The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

The vulnerability of the cdns_resume() function in the drivers/usb/cdns3/core.c file of the Linux operating system’s device driver framework allows a hacker to induce a service failure.

The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows attackers to compromise the accessibility of protected information.

The vulnerability of the GPU components in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information through a specially crafted HTML page...

The vulnerability of the Extensions API component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to access confidential data.

The vulnerability of the Extensions API in Google Chrome and Microsoft Edge browsers is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability of the SafeBrowsing component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the SafeBrowsing component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through the use of a malicious file...

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the console-based graphic editor ImageMagick, related to buffer overflow in the stack, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP allows a hacker to cause a service failure and expose protected information.

The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to induce a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Microsoft .NET Framework software platform, related to incorrect path name restrictions, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET Framework software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the JIT-compiler of Mozilla Firefox allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JIT-compiler of Mozilla Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the dependencies_local_check() method in the application for setting the REBOOT OS redoswelcome allows a perpetrator to execute arbitrary code.

The vulnerability of the dependencieslocalcheck method in the application for setting the REBOOT OS parameter redoswelcome is related to the improper elimination of special elements used in the OS command. Exploiting this vulnerability allows a malicious actor to inject special symbols into the...

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the MKS/Spreadsheet component of the “S-SMARTH” software suite arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the MKS/Spreadsheet component of the “S-SMARTH” software suite is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the software for interacting with servers via cURL, related to errors in the certificate validation process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ColdFusion software platform, related to the unlimited loading of dangerous type files, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Go programming language’s crypto/x509 component, which allows a hacker to trigger a service failure

The vulnerability of the Go programming language’s crypto/x509 component is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the 7z-file processing mechanism of the ClamAV antivirus program allows a hacker to trigger a service failure.

The vulnerability of the 7z-file processing mechanism of the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...

The vulnerability of the software platform based on Git for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process, which allow unauthorized users to increase their privileges.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development on GitLab EE/CE allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack lies in the redirection of URLs to unreliable websites. This allows attackers to carry out phishing attacks or expose confidential information.

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack lies in the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker to carry out phishin...

The vulnerability of the user_role function in the LiteLLM proxy server allows attackers to increase their privileges and gain full control over the proxy server.

The vulnerability of the userrole function in the LiteLLM proxy server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to increase their privileges and gain full control over the proxy server...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to synchronization errors when using a shared resource, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the client for remote desktop sessions on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge allows a hacker to replace the user interface.

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface using a specially created Chrome extension...

The vulnerability of the soup_body_input_stream_read_chunked() function in the LibSoup library allows a attacker to circumvent existing security restrictions, implement a cache poisoning attack, or gain unauthorized access to protected information.

The vulnerability of the soupbodyinputstreamreadchunked function in the LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures, execute a cache poisoning attack, or gain unauthorized...

The vulnerability of the Chronosphere Chronocollector data collector lies in its ability to expose system data to unauthorized individuals, allowing intruders to gain unauthorized access to protected information.

The vulnerability of the Chronosphere Chronocollector data collector relates to the exposure of system data to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the modular interface between web servers and web applications in Rack, related to incorrect path name restrictions for the restricted directory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the modular interface between web servers and Rack web applications is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Google Chrome’s WebRTC technology allows attackers to execute arbitrary code or trigger a service failure.

The vulnerability of Google Chrome’s WebRTC technology is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the data collection tool for Azure Monitor Agents from virtual machines and physical servers arises from improper external management of file names or paths. This allows attackers to escalate their privileges.

The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, is related to incorrect external management of file names or paths. Exploiting this vulnerability can allow a malicious actor to increase their privileges...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their dependence on vulnerable third-party components, which allows attackers to cause service failures.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to their dependence on vulnerable third-party components. Exploiting these vulnerabilities can allow attackers to cause service...

The vulnerability of the Dell ThinOS operating system for thin clients involves insufficient data cleaning at the management level, allowing attackers to execute arbitrary commands.

The vulnerability of the Dell ThinOS operating system for thin clients is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the use of memory after it is freed, allowing an attacker to trigger a service failure.

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.

The vulnerability of Windows push-notifications services is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Desktop Agent function on the cloud platform for Cisco WebEx Contact Centers allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Desktop Agent function on the cloud platform for Cisco WebEx Contact Centers relates to the failure to remove script-related HTML tags from the web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protect...

The vulnerability of the WebML component in the Google Chrome browser, which allows a hacker to trigger a service failure.

The vulnerability of the WebML component in Google Chrome relates to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially crafted HTML page...

The vulnerability of the Wazuh intrusion detection and prevention system, related to incorrect verification of certificate authenticity, allows a perpetrator to execute a MITM attack and execute arbitrary code.

The vulnerability of the Wazuh intrusion detection and prevention system is related to incorrect verification of certificate authenticity. Exploiting this vulnerability allows a remote attacker to execute a MITM attack and execute arbitrary code...

The vulnerability of the memblock_set_node() function in the mm/memblock.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the memblocksetnode function in the mm/memblock.c module of the Linux kernel’s memory management subsystem is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pch_request_dma() function in the drivers/tty/serial/pch_uart.c module of the console TTY driver in the Linux kernel’s serial port allows a attacker to cause a service failure.

The vulnerability of the pchrequestdma function in the drivers/tty/serial/pchuart.c file of the TTY driver in the Linux kernel’s serial port module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Directum RX ECM system, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum RX ECM system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the rendering mechanism of Blink in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the ability to bypass authentication via a user-controlled key, allowing attackers to compromise the integrity of protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server relates to bypassing authentication via a key controlled by the user. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of protected information...

The vulnerability of the DRM/Radeon kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/Radeon kernel component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to privilege assignment errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the goform/SetIpMacBind file in the Tenda TX3 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the goform/SetIpMacBind function in the Tenda TX3 router microprogramming system lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability in the web interface for managing microprogramming router Tenda F3 allows a perpetrator to compromise the integrity of the protected information.

The vulnerability in the web interface for managing microprogramming router software Tenda F3 is related to incorrect restrictions on the visible layers or frames of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the VPN module of the TP-Link Archer AXE75 wireless router, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the VPN microprogramming software for TP-Link Archer AXE75 Wi-Fi routers is related to insufficient verification of input data. Exploiting these vulnerabilities could allow a remote attacker to cause service interruptions...