98363 matches found
libarchive Heap Buffer Overflow DoS
The vulnerability of the implementation of the zipxlzmaaloneinit function in the libarchive library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information or cause service failures...
Kubernetes Cluster Management Hypertext Access Confidential Data
The vulnerability of the Kubernetes cluster management software is related to errors in processing hypertext links. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
GPAC MPEG-4 Decoder Heap Buffer Overflow DoS
The vulnerability of the PCRB decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...
NETGEAR Router Command Injection
The vulnerability of the embedded software of NETGEAR routers such as D3600, D6000, D6100, D6220, D6400, D7800, D8500, DGN2200Bv4, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7100LG, R7300, R7900, R7900P, R8000, R8000P, R8300, R8500, WNDR3400v3,...
PTC Axeda XML Message Full Control
The vulnerability of the PTC Axeda platform for creating and deploying corporate-level applications is related to the use of strictly encrypted login credentials during the installation of UltraVNC. Exploiting this vulnerability can allow a malicious actor to gain full control over the operating...
Microsoft Defender for IoT Code Execution
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
Microsoft Exchange Server RCE
The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data to the server...
Adobe Animate Buffer Overflow
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
NETGEAR Router Privilege Insecure
The vulnerability of NETGEAR R6900P, R7000, R7000P, and RS400 router’s built-in software is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
NETGEAR Router Command Injection
The vulnerability of NETGEAR’s integrated routing software, including models like LBR20, RBS50Y, RBR10, RBR20, RBR40, RBR50, RBS10, RBS20, RBS40, RBS50, RBK12, RBK20, RBK40, and RBK50, stems from the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attack...
NETGEAR Router Command Injection
The vulnerability of the embedded software of NETGEAR routers such as R8000, RAX200, R8000P, R7900P, RBR850, RBS850, and RBK852 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
NETGEAR RAX200 software Data Compromise
The vulnerability of NETGEAR RAX200 router’s built-in software is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
NETGEAR Router Command Injection
The vulnerability of NETGEAR’s integrated routing software, including models such as D7800, DM200, EX2700, EX6150v2, EX6200v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, R7500v2, R7800, R8900, R9000, RAX120, WN3000RPv2, WN3000RPv3, WNR2000v5, XR500, RBK20, RBR20, RBS20,...
NETGEAR Integrated Routing Software Command Injection
The vulnerability of NETGEAR’s integrated routing software, including models like RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
OpenEXR Buffer Overflow
The vulnerability of the Imf31::LineCompositeTask::execute function in the OpenEXR library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a buffer overflow...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Surface MobileIron Core Code Execution
The vulnerabilities of the MobileIron Core, a secure mobile gateway; the MobileIron Sentry, a data monitoring application; the MobileIron Monitor and Reporting Database RDB, which collects data about devices and software; and the MobileIron Enterprise Connector are related to deficiencies in acce...
Netis WF2419 Router Ping Traceroute Command Injection Unauthorized Access
The vulnerability of the ping and tracert commands in the web interface for managing Netis WF2419 microprogramming devices relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and gain...
IOMobileFramebuffer Extension Code Execution
The vulnerability of the IOMobileFramebuffer extension in iOS, iPadOS, watchOS, and macOS relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Leptonica pixFewColorsOctcubeQuantMixed DoS
The vulnerability of the pixFewColorsOctcubeQuantMixed component in the Leptonica image processing library relates to reading data from buffers within acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Kaspersky Endpoint Security Path Restriction DoS
The vulnerability of Kaspersky Endpoint Security for Windows relates to errors during path limitation for restricted access directories. Exploiting this vulnerability can allow a malicious actor to cause a service failure when the operating system is loaded...
Bluetooth Classic device DoS
The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices is related to overflow errors in dynamic memory buffers. Exploiting this vulnerability can allow a remote attacker to cause the device to fail to perform its functions...
Siemens Solid Edge Viewer Code Execution
The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...
iOS kernel Data Compromise
The vulnerability of the iOS operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to obtain confidential information through a specially created application...
VAPI Service DoS
The vulnerability of the VAPI service, a component of the VMware vCenter Server virtual infrastructure management tool, involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted HTTP...
VMware vCenter Server Privilege Escalation
The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient verification of session tokens. Exploiting this vulnerability can allow attackers to increase their privileges...
Google Chrome V8 Engine Use-After-Free
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a...
rhttpproxy Bypass
The vulnerability of the rhttpproxy service in the vmware vcenterserver software is related to errors in the authentication process. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
Google Chrome Microsoft Edge Code Execution
The vulnerability of the Indexed DB API for browser-based structured data storage in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially...
PDF Memory Management Data Compromise
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...
Blockhost-Net Information Disclosure
The vulnerability of the operating environments of the information protection software “Blockhost-Net” and “Blockhost-Net K” is related to the use of insecure mechanisms for processing authentication data in the memory of the operating system. Exploiting this vulnerability can allow an attacker...
Google Chrome URL Component Data Compromise
The vulnerability of the Google Chrome browser’s URL component is related to insufficient data validation during formatting. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...
SELinux Heap Buffer Overflow DoS
The vulnerability of the cilverifyclassperms function in the SELinux access control system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Redcarpet Markdown Data Compromise
The vulnerability of the Ruby library for parsing Markdown in HTML Redcarpet is related to improper cleaning of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
Dnsmasq Data Compromise
The vulnerability of the Dnsmasq DNS server lies in the lack of checking for requests with the same name. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
Google Chrome CORS Access
The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to the bypassing of security policies. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential information...
Libbsd Heap Buffer Overflow DoS
The vulnerability of the library for simplifying project migration in Libbsd is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...
OpenEXR readSampleCountForLineBlock Integer Overflow DoS
The vulnerability of the readSampleCountForLineBlock function in software for storing OpenEXR images with wide dynamic range brightness values is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
MinIO Authentication Bypass
The vulnerability of the MinIO object storage server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the readOnly policy and compromise the integrity of the protected information by creating a temporary URL address “mc share upload”...
Trend Micro Deep Security Agent File Deletion
The vulnerability of the Trend Micro Deep Security Agent lies in the improper handling of links before accessing a file. Exploiting this vulnerability could allow an attacker to delete any files they desire...
Apache OpenOffice Hypertext Error Code Execution
The vulnerability of the Apache OpenOffice office software is related to errors in processing hypertext links. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted link within a document...
WorkFlow Database Update Module Unrestricted File Loading Code Execution
The vulnerability of the database update module of the LOCsman:PLM engineering data and product lifecycle management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow an attacker to execute arbitrary code by replacing the dll library version.dl...
TrueType driver Win32k.sys Code Execution
The vulnerability of the TrueType driver Win32k.sys in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PDF viewer PDF editing Uncontrolled Resource Consumption DoS
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service interruptions...
Linux driver firmware EFI bypass security restrictions
The vulnerability in the driver/firmware/EFI code of the Linux operating system relates to bypassing security functions. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
Oracle E-Business Suite India Localization Sub-component Results Component Unauthorized Access
The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite system are related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...
Oracle VM VirtualBox Core Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
iRecruitment Oracle Human Resources Data Access
The vulnerability of the iRecruitment component of the Oracle Human Resources staffing management software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...
CNCSoft-B Buffer Overflow Info Disclosure
The vulnerability of the CNCSoft-B numerical control software system relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Oracle VM VirtualBox DoS
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...