92710 matches found
The vulnerability of the Oracle PeopleSoft Enterprise PeopleTools Application Server component of the Oracle PeopleSoft products allows a perpetrator to gain full control over the application.
The vulnerability of the Oracle PeopleSoft Enterprise PeopleTools Application Server component of the Oracle PeopleSoft products is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP protocol...
The vulnerability in the graphite2::Silf::readGraphite function of the Graphite library for Mozilla Firefox and Mozilla Firefox ESR browsers allows an attacker to cause a service failure or execute arbitrary code.
The vulnerability of graphite2::Silf::readGraphite in the Graphite 2 library for Mozilla Firefox and Mozilla Firefox ESR browsers relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary cod...
The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, related to the unencrypted data transmission process, allows attackers to access confidential information.
The vulnerability of the VMware vCenter Server virtualization infrastructure relates to the unencrypted data transfer between storage repositories. Exploiting this vulnerability can allow an attacker to gain access to confidential information during the movement of a virtual machine between stora...
The vulnerability of the Windows Media Player component of the Windows operating system, which allows a hacker to disclose protected information
The vulnerability of Windows Media Player on the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to determine whether files exist on the disk by using a specially created hyperlink...
The vulnerability of the load_image function in the GIMP graphic editor, related to reading beyond the buffer limit of memory, allows attackers to cause system failures, undermine data integrity, and compromise confidentiality.
The vulnerability of the loadimage function in the GIMP graphic editor’s plug-ins/common/file-gbr.c file is related to the issue of data being written beyond the buffer boundaries when processing UTF-8 formatted data. Exploiting this vulnerability can allow an attacker to cause service failures,...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers allows attackers to increase their privileges.
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
The vulnerability of the Advanced Local Procedure Call operating system in Windows, caused by access control errors, allows attackers to escalate their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems arises due to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) relates to the manipulation of inter-site requests, allowing a perpetrator to change the device’s password.
The vulnerability of the microprogrammed software of the 4G LTE Light Industrial M2M Router NWL-25 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to remotely change the device’s password...
The vulnerability of the Flash Player software platform, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document or a web page containing malicious Flash content...
The vulnerability of the extractDir function in the JICompress component of the QuaZIP library allows a hacker to execute arbitrary code.
The vulnerability of the extractDir function in the JICompress component JlCompress.cpp from the QuaZIP library is related to deficiencies in checking the path name of the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a...
The vulnerability of the Policy Builder interface of the Cisco Policy Suite software management tool allows a perpetrator to access the interface and make changes to existing repositories.
The vulnerability of the Policy Builder interface of the Cisco Policy Suite management software is related to the absence of a mechanism for authenticating the Policy Builder interface. Exploiting this vulnerability could allow an attacker to gain access to the interface and make changes to...
The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges through a specially...
The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem (dxgkrnl.sys) on the Windows operating system, which allows a hacker to escalate their privileges
The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem dxgkrnl.sys in the Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
The vulnerability of the ReadBMPImage function (coders/bmp.c) in the console-based image editing tool ImageMagick allows a hacker to cause a service failure.
The vulnerability of the ReadBMPImage function coder/bmp.c in the console-based graphic editor ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory consumption through a specially created B...
The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.
The vulnerability in Microsoft Edge and Internet Explorer JavaScript engines arises from an operation that goes beyond the buffer boundaries in memory memory corruption due to script execution. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the...
The vulnerability of the RW-message structure in the Aerospike Database Server of the Oracle Database database management system allows a perpetrator to execute arbitrary code.
The vulnerability of the RW-message structure in the Aerospike Database Server of the Oracle Database database management system is related to unvalidated array indexing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code read from beyond the memory limit using a...
The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...
The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure
The vulnerability of the ReadSUNImage function in the ImageMagick console graphics editor’s sun.c file arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure loss ...
Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions
The vulnerability of the CoreText component in iOS and Mac OS X operating systems is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created text message...
The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain information about the integration platform and the operating system, enabling them to carry out UXSS attacks.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating...
The vulnerability of the iOS operating system, which allows a hacker to read text messages on the lock screen
The vulnerability of the Siri component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to read text messages on the lock screen using uncertain vectors...
The vulnerability of the Android operating system, which allows a hacker to trigger memory corruption
The vulnerability of the Mediaserver application in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using a specially...
The vulnerability of the Android operating system, which allows a hacker to trigger a buffer overflow.
The vulnerability in the trusted execution environment of Android’s operating system’s access control API arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a buffer overflow due to lack of size checking for the buffer...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of NVIDIA GPU kernel driver for the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a malicious application remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the hostap-modules-2.6.8-3-686 package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6-em64t-p4 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-3-s390x operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-3-32-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the libkadm55 package of the Debian GNU/Linux operating system can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-2-alpha-legacy package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-486 operating system of the Debian GNU/Linux distribution; their exploitation may lead to breaches of confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the snmpd package of the Debian GNU/Linux operating system can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the krb5-clients package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Java Platform software platform allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability of the Java SE and Java SE Embedded software platform allows a remote attacker to compromise data confidentiality by using the JAXP subcomponent...
The vulnerability of the Java Platform software platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Java SE software platform allows local users to compromise the confidentiality, integrity, and accessibility of data by using a sub-component called Deployment...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-1-all package of the Debian GNU/Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Java Platform software platform allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality by using the Swing subcomponent...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.18-6-all-arm package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerability of the Java Platform software platform, allowing a remote attacker to compromise the integrity of protected information
The vulnerability of the Java SE software platform allows a malicious actor to compromise data integrity by using the Serviceability sub-component...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-2-4kc-malta package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity
Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the JAXP component...
The vulnerability of the Linux operating system, which allows a malicious individual to increase their privileges
The compatsysrecvmmsg function in the net/compat.c file, with the configuration CONFIGX86X32, allows a malicious individual to increase their privileges through the system call recvmmsg...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of NVIDIA’s Android operating system media driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
The vulnerability of the Solaris operating system allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the PAM LDAP module in the Solaris operating system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the HPE Data Protector backup tool allows a perpetrator to execute arbitrary code.
The vulnerability of the HPE Data Protector backup tool is related to errors in the code. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the MySQL database management system allows attackers to manipulate the accessibility of information.
The vulnerability of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise accessibility by affecting the Optimizer server...