Buffer Overflow DoS

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot or caus...

Google Chrome Tab Groups Data Compromise

The vulnerability of Google Chrome’s Tab Groups component is related to writing beyond the buffer limit. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Magento Commerce Code Execution

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe Photoshop Buffer Overflow

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

.NET Framework log4net XML External Entity XXE

The vulnerability of the logging library for the .NET Framework log4net is related to errors caused by XML references to external objects XXE. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Unidirectional Link Detection DoS

The vulnerability of the Unidirectional Link Detection function in NX-OS and FXOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

MPXJ common/InputStreamHelper Java Write File

The vulnerability in the common/InputStreamHelper.java library of the MPXJ library exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to write files to arbitrary locations...

Cisco Small Business Router Code Execution

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrar...

Windows GDI+ Unauthorized Access

The vulnerability of the Windows GDI+ component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

Microsoft Graphics Components Code Execution

The vulnerability of Microsoft Graphics Components in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft .NET Framework Unauthorized Access

The vulnerability of the Microsoft .NET Framework software platform is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Backup Service Privilege Escalation

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Application Compatibility Client Library Privilege Escalation

The vulnerability of the Windows Application Compatibility Client Library is related to errors in processing Windows registry operations. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Office Memory Object Handling Code Execution

The vulnerability of the Microsoft Office package is related to errors in memory object handling. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Hyper-V Hardware Virtualization Privilege Escalation

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Network Location Awareness Service Code Execution

The vulnerability of the Windows Network Location Awareness Service in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

Data Pump Oracle Database Server Full Control

The vulnerability of the Data Pump component of the Oracle Database Server management database system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application...

NETGEAR Router Registration Information Disclosure

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient...

Schneider Electric Easergy T300 Uncontrolled Resource Consumption

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 for transformer substations automation involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system due ...

Windows Adobe Type Manager Library Code Execution

The vulnerability of the Windows Adobe Type Manager Library on Windows operating systems is related to the improper handling of a specially created Adobe Type 1 PostScript font. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Adobe Type Manager Code Execution

The vulnerability of the Windows Adobe Type Manager library in Windows operating systems is related to the improper handling of the specially created multi-level font format—Adobe Type 1 PostScript. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially...

CewolfServlet MDLogUploaderServlet Code Execution

The vulnerability of the CewolfServlet and MDLogUploaderServlet components of the software for managing workstations via the web interface of ManageEngine Desktop Central arises from the restoration of a data structure that is unreliable in memory. Exploiting this vulnerability could allow an...

Cisco ASA Media Gateway Control Protocol DoS

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammed network devices of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor...

MediaWiki Output Encoding

The vulnerability of the software component responsible for implementing the MediaWiki hypertext environment is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

WpcDesktopMonSvc Privilege Escalation

The vulnerability of the WpcDesktopMonSvc component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Microsoft Graphics Components Code Execution

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Windows Memory Error DoS

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

libvpx Heap Buffer Overflow DoS

The vulnerability of the multimedia library libvpx is related to a memory-bound read error. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

Django uri_to_iri DoS

The vulnerability of the jango.utils.encoding.uritoiri function in the Django web development framework is related to incorrect encoding of UTF-8 octal sequences. This can lead to excessive memory usage due to recursion. Exploiting this vulnerability could allow a remote attacker to cause a servi...

TCP Protocols Code Execution

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks is related to errors in the TCP Urgent Pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted TCP packets...

Oracle Email Center Message Display Component Privilege Escalation

The vulnerability of the Oracle Flow Builder component, a software tool for testing web applications, web services, and databases within the Oracle Application Testing Suite, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify,...

Oracle Human Resources Hierarchy Diagrammers Data Access

The vulnerability of the Hierarchy Diagrammers component in Oracle Human Resources software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

Oracle CRM Message Hooks Data Manipulation

The vulnerability of the Message Hooks component in Oracle CRM Technical Foundation’s customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to modify, add, or delete data using the...

Oracle Human Resources Hierarchy Diagrammers Data Access

The vulnerability of the Hierarchy Diagrammers component in Oracle Human Resources software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

Cisco Unified Communications Manager Disclosure

The vulnerability in the web interface of the Cisco Unified Communications Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Cisco Web Security Appliance API Framework HTTP Header Injection

The vulnerability of the API Framework web server component of Cisco Web Security Appliance WSA and the Cisco Content Security Management Appliance SMA security management device is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious...

DOSBox Buffer Overflow DoS

The vulnerability of the DOSBox emulator is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise data integrity, gain access to confidential information, and cause service failures...

WebUSB Protocol Code Execution

The vulnerability of the WebUSB protocol implementation in Google Chrome’s web browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Google Chrome Code Execution

The vulnerability of the offline audio context component in the Google Chrome web browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Exim Code Execution

The vulnerability of the Exim mail server is related to errors in memory object processing. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

PoDoFo crop_page() DoS

The vulnerability of the croppage function in the PoDoFo software library is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted file...

node-tar File Replacement

The vulnerability of the node-tar module in the Node.js library is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow a remote attacker to replace the existing content of the file...

Oracle Identity Manager Advanced Console Controller Unauthorized Access

The vulnerability of the Advanced Console controller’s sub-component in Oracle Identity Manager, a software platform of Oracle Fusion Middleware, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Oracle VM VirtualBox Partial DoS

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a partial service outage...

eDocLib Platform XSS

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...

Oracle E-Business Suite CRM User Management Framework Data Access

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications system, part of the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using t...

gnupg Pointer Arithmetic DoS

The vulnerability of the gpg data encryption tool from the gnupg package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure, by passing a specially crafted file as an argument to the command line...