D-Link DIR-882 A1 Wireless Router Code Execution

The vulnerability of the sub48AC20 function in D-Link DIR-882 A1 wireless router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Juniper Networks’ Junos OS Evolved Privilege Escalation

The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to modify existing files or execute arbitrary commands on behalf of the user...

VMware Aria Operations Monitoring Tool Code Execution

The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code and increase their privileges...

D-Link DIR-2150 Router Code Execution

The vulnerability of the SetNTPServerSettings function in the application software interface of D-Link DIR-2150 router microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...

Oracle MySQL Server DoS

The vulnerability of the Server component: The Data Dictionary component of the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to cause service interruptions using the MySQL protocol...

Jenkins Cisco Spark Plugin Password Storage Unauthorized Access

The vulnerability of the Jenkins Cisco Spark Plugin is related to the storage of passwords in an unencrypted form in the configuration file org.jenkinsci.plugins.spark.SparkNotifier.xml. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected informati...

VMware Aria Operations Monitoring Tool Code Execution

The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Zyxel ZyWALL/USG Network Device Arbitrary Command Execution

The vulnerability of Zyxel ZyWALL/USG, VPN, USG FLEX, and ATP network devices exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

ksmbd Module Code Execution

The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the SMB2SESSIONSETUP command...

Windows lock screen bypass security restrictions

The vulnerability of the Windows operating system’s lock screen is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions...

Cisco IOS XE VFR DoS

The vulnerability of the IPv4 Virtual Fragmentation Reassembly VFR function in Cisco IOS XE operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure by sending fragmented...

Arris Router Code Execution

The vulnerability of the microprogrammed software of Arris routers such as TG2482A, TG2492, and SBG10 is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted request...

Microsoft SQL Server Code Execution

The vulnerability of the Microsoft SQL Server relational database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Video components DoS

The vulnerability of the Video components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure by loading a specially created malicious HTML page...

AMD security processor BIOS DoS

The vulnerability of AMD’s microprogrammed security processor BIOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

IBM API Connect Data Compromise

The vulnerability of the IBM API Connect management tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information by sending specially crafted payloads...

NetScaler SD-WAN Privilege Escalation

The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Redis Integer Overflow DoS

The vulnerability of the Redis database management system is related to integer overflow when processing objects. Exploiting this vulnerability can allow attackers to trigger a service failure using the SETRANGE and SORT/SORT-RO commands. source-iocs-preserved const=SORTRO...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to insufficient validation of input data during object processing. Exploiting this vulnerability can allow attackers to enhance their privileges...

Moodle Course Management XSS

The vulnerability of the Moodle course management system is related to insufficient cleaning of user data in several “social” fields of the user’s profile. Exploiting this vulnerability allows a malicious actor to carry out attacks using cross-site scripting XSS...

vRealize Log Insight Web Structure Compromise Data Compromise

The vulnerability of the vRealize Log Insight log management tool and the VMware Cloud Foundation virtualization platform exists due to the lack of security measures taken to protect the structure of their web pages. Exploiting this vulnerability allows a malicious actor to compromise the...

UEFI EDK2 Authentication Deficiency

The vulnerability of open-source development environments for UEFI EDK2 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

Cisco AsyncOS DoS

The vulnerability of the Cisco AsyncOS operating system in the Cisco Email Security Appliance ESA security system is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by establishing a large number o...

Cisco Identity Services Engine File Upload/Deletion

The vulnerability of the Cisco Identity Services Engine ISE’s web management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and upload or delete certain files using a specially created HTTP...

Microsoft Windows Sysmon Privilege Escalation

The vulnerability of the Microsoft Windows Sysmon system service is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Local Security Authority Subsystem Service DoS

The vulnerability of the Local Security Authority Subsystem Service in Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Microsoft ODBC Driver Code Execution

The vulnerability of the Microsoft ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WDAC OLE DB Driver Code Execution

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Netlogon Remote Protocol Privilege Escalation

The vulnerability of the Netlogon Remote Protocol MS-NRPC implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CorelDRAW Graphics Suite Buffer Overflow

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor lies in the reading of data beyond the buffer boundaries in memory during the syntax analysis of EMF files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created...

Qualcomm Embedded Kernel Code Execution

The vulnerability of microprogramming software in embedded Qualcomm chips is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

RPKI Validator DoS

The vulnerability of the RPKI validator OctoRPKI is related to the use of a zero value during the generation of Route Origin Authorisations. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Measuresoft ScadaPro Server Code Execution

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to the use of an untrusted indicator. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Infrastructure component Privilege Escalation

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to create, delete, or alter access to critical data, gain read-only access to data, or cause a...

Vim utf_ptr2char() function Data Compromise

The vulnerability of the utfptr2char function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PrestaShop SQL Injection

The vulnerability in the open-source e-commerce web application PrestaShop relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Intel(R) Datacenter Group Event insecure search path Privilege Escalation

The vulnerability of the IntelR Datacenter Group Event software is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to increase their privileges...

Windows Network File System Code Execution

The vulnerability of the Windows Network File System NFS operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OAS Engine SecureAddUser Unauthorized Access

The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

Cisco Expressway Series API Interface Path Bypass Privilege Escalation

The vulnerability of the API interface of Cisco Expressway Series and Cisco Telepresence VCS database devices is related to insufficient checking of arguments entered by users during command execution. Exploiting this vulnerability allows attackers to perform attacks remotely, bypassing the...

Android ce_t4t_data_cback() Code Execution

The vulnerability of the cet4tdatacback function in Android operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

HP LaserJet Professional M1210 series Code Execution

The vulnerability of the microprogramming software of the HP LaserJet Professional M1210 series multifunctional device is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to execute arbitrary code with application privileges...

MariaDB log_statement_ex DoS

The vulnerability of the logstatementex method in the MariaDB database management system’s plugin/serveraudit/serveraudit.c file is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Oracle VM VirtualBox DoS

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Titan FTP Server Privilege Escalation

The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

Cisco Webex Meetings Web Interface Disclosure Phishing Drive-by

The vulnerability of Cisco Webex Meetings’ software web interface exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to disclose protected information, alter the appearance of the website, and perform phishing attacks ...

Interactive Graphical SCADA System Buffer Overflow DoS

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a specially crafted message...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the blockinvalidatepage function fs/buffer.c in the Linux operating system’s kernel is related to the lack of integrity checks. Exploiting this vulnerability could allow an attacker to cause a service failure...

Wayland Display Key Combination Fast Access swhkd mechanism DoS

The vulnerability of the Display Key Combination Fast Access daemon, swhkd, in the Wayland display server protocol is related to the ability to connect to the UNIX domain socket /tmp/swhkd.sock. Exploiting this vulnerability allows a remote attacker to gain access to protected information or caus...

FTP Server Code Execution

The vulnerability of the FTP servers of the microprogrammed control devices CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors during the verification of the USER command’s length. Exploiting this vulnerability can allow a remote...