98363 matches found
Popup Builder Plugin XSS
The vulnerability of the Popup Builder plugin in the WordPress content management system exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
Media File Handler Arbitrary File Creation
The vulnerability of the Media File Handler component in the Mastodon web application arises due to a input validation error during the processing of directory traversal sequences. Exploiting this vulnerability allows an attacker to create and re-upload arbitrary files into the system using a...
Dell PowerProtect Data Manager Buffer Overflow
The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 backup device is caused by buffer overflow in the queue. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to crash or execute arbitrary code...
ConnectWise ScreenConnect Authentication Bypass RCE
The vulnerability of the ConnectWise ScreenConnect remote access software lies in the ability to bypass the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
MailSherlock audit platform Processor SQL Injection
The vulnerability of the packet handler on the MailSherlock email audit platform relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL queries...
Quick Look Code Execution
The vulnerability of the Quick Look function in macOS systems stems from a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
aiohttp Path Traversal
The vulnerability of the aiohttp HTTP client is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Cisco Prime Infrastructure Command Execution
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to improper handling of objects in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...
Neural Engine Root Code Execution
The vulnerability of the macOS operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges...
Rapid SCADA Open Redirection
The vulnerability of the SCADA system Rapid SCADA is related to the use of open redirection as a result of incorrect data cleaning on the user input page. Exploiting this vulnerability allows an attacker to redirect the user to any desired URL address...
IoTDB Database Code Execution
The vulnerability of the IoT database Apache IoTDB exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Tenda A15 Web Interface Code Execution
The vulnerability of the web interface for managing wireless access points of the Tenda A15 micro-programming system is related to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the deviceList argument...
Delta Industrial Automation DOPSoft Buffer Overflow
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesTimeLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary cod...
PowerVR GPU Driver Heap Buffer Overflow DoS
The vulnerability of the PMRReadBytes function in the PowerVR GPU driver for Android and ChromeOS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
Splunk Enterprise Unauthorized Access
The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information using the SPL command mrollup...
Nginx UI Server Privilege Escalation
The vulnerability of the Nginx UI server’s user interface is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability can allow a remote attacker to cause service failures, increase their privileges, and expose sensitive information through a...
Airflow Data Processing Disclosure
The vulnerability of the software allows for the creation, monitoring, and orchestration of data processing scenarios in Airflow. This vulnerability involves the exposure of protected information. Exploiting this vulnerability can enable a remote attacker to obtain confidential information...
TOTOLINK N350RT Code Execution
The vulnerability of the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8 in the microprogramming software for TOTOLINK N350RT routers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
RTU500 Scripting Interface TLS Unauthorized Access Spoofing
The vulnerability of the TLS implementation in the RTU500 Scripting Interface for programming logic controllers from Hitachi Energy relates to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information a...
Linux perf_event_validate_size Heap Buffer Overflow DoS
The vulnerability of the perfeventvalidatesize function in the kernel/events/core.c module of the Linux operating system’s perf subsystem is related to writing beyond the boundaries of a allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Microsoft Office for Mac Spear Phishing
The vulnerability of the Microsoft Office for Mac software is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
Blink Web Page Rendering Mechanism Code Execution
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created malicious web page...
LibTIFF Heap Buffer Overflow DoS
The vulnerability of the TIFFClose function in the LibTIFF library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
SNMPv3 Unauthorized Access
The vulnerability of the SNMPv3 software for Virtualize Spectrum virtualization lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
Tenda W18E Code Execution
The vulnerability of the formSetNetCheckTools function in the Tenda W18E router software lies in insufficient validation of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the hostName parameter...
D-Link N300 WI-Fi Router DIR-605L Code Execution
The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute...
Elasticsearch API Disclosure
The vulnerability of the Elasticsearch search engine’s application programming interface is related to insufficient protection of registration data. Exploiting this vulnerability could allow a perpetrator to disclose protected information...
Dell EMC PowerEdge MX SmartFabric Storage Command Injection
The vulnerability of the software for managing data storage on Dell EMC PowerEdge MX Dell SmartFabric Storage lies in insufficient checking of arguments passed in commands. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...
D-Link tgfile.htm Code Execution
The vulnerability of the tgfile.htm function in the microprogramming software for D-Link routers such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allo...
Juniper Networks’ Junos OS Evolved DoS
The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS Evolved operating system is related to incorrect checking of the return value of methods or functions. Exploiting this vulnerability can allow an attacker to cause a service failure...
Inductive Automation Ignition XSS
The vulnerability of Inductive Automation Ignition’s software for industrial automation is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...
D-Link DIR-823G Router DoS
The vulnerability of the SetDeviceSettings function in D-Link DIR-823G router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the AdminPassword parameter. Exploiting this vulnerability can allow a remote attacker to cause...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfbifsFlushCommandList function on the GPAC multimedia platform is related to the improper use of dynamic memory during program execution. Exploiting this vulnerability can allow an attacker to cause a service failure...
Libbitcoin Explorer Information Disclosure
The vulnerability of the Libbitcoin Explorer BX for processing Bitcoin transactions and blocks is related to the use of a insecure random number generator program. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information...
Nagios XI update_banner_message() Code Execution
The vulnerability of the updatebannermessage function in the Nagios XI monitoring tool is related to the lack of measures taken to protect the SQL query structure when processing the ID parameter. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access t...
Argo CD Pathname Restriction Unauthorized Access
The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
Metabase Code Execution
The vulnerability of the Metabase data visualization and reporting software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Eclipse Jetty Cookie Injection
The vulnerability of Eclipse Jetty servlet containers is related to syntax validation errors in input checks. Exploiting this vulnerability allows a malicious actor to inject one cookie into another and affect their processing...
MariaDB ds_compress.cc DoS
The vulnerability of the dscompress.cc component in the MariaDB database management system arises due to blocking resource errors. Exploiting this vulnerability can allow an attacker to cause service failures...
Keycloak Unauthorized Access
The vulnerability of the Keycloak identity and access management software lies in improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Google Chrome V8 Engine Code Execution
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...
Splunk Web Code Execution
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform is related to an incorrect initialization of resources when processing the OPENSSLDIR value. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain...
GitPython Clone Code Execution
The vulnerability of the clone/clonefrom components in the Python library for interacting with Git repositories in GitPython is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting a specially crafted URL address...
XWiki Platform XSS
The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks XSS remotely...
Zoom Video Conferencing Unauthorized Access
The vulnerability of Zoom, a video conferencing software, is related to the implementation of security features at the client side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
JBrowse Unlimited File Download Code Execution
The vulnerability of the JBrowse browser is related to the unlimited downloading of files of a malicious nature. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
VMware SD-WAN Edge Web Interface Bypass
The vulnerability of the web interface of microprogramming software in VMware SD-WAN Edge devices is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain read, modify, or delete access to data by downloading the...
ASUS RT-AC86U RT-AX56U Code Execution
The vulnerability of ASUS’ Wi-Fi router software, RT-AC86U and RT-AX56U, is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Base plugin Gstreamer Code Execution
The vulnerability of the Base plugin gst-plugins-base in the Gstreamer multimedia framework is related to insufficient protection of service data due to the lack of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...