The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to replace the user interface.

The vulnerability of the Downloads component in the Google Chrome browser is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures to protect the SQL query structure during the processing of the search parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the Polkit authentication mechanism implemented by the InputPlumber utility in the Linux operating system allows a hacker to circumvent existing security restrictions, cause service failures, or gain increased privileges.

The vulnerability of the Polkit authentication mechanism in the Linux operating system’s InputPlumber utility is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions, cause service failures, o...

The vulnerability of the microprogrammed wireless Wi-Fi router Tenda W30E, related to deficiencies in authentication mechanisms, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, which stems from the use of strictly encrypted user credentials, allows a hacker to escalate their privileges.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel relates to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of Grafana Pyroscope’s continuous profiling software relates to the disclosure of information, which allows a perpetrator to access confidential data.

The vulnerability of Grafana Pyroscope’s continuous profiling software is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of the PingAlert application server, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the PingAlert application server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server, related to buffer overflows in dynamic memory, allow attackers to execute arbitrary code.

The vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server for protecting against Internet attacks are related to buffer overflows in dynamic memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary co...

The vulnerability of the implementation of the Web Map Service (WMS) protocol in the software for managing and publishing geospatial data on the OSGeo GeoServer server allows a perpetrator to disclose protected information and cause service failures.

The vulnerability of the Web Map Service WMS protocol implementation in the software for managing and publishing geospatial data on the OSGeo GeoServer server is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of Azure Managed Redis and Azure Cache for Redis Enterprise data caching services, related to improper authorization, allows attackers to escalate their privileges.

The vulnerability of Azure Managed Redis and Azure Cache for Redis Enterprise data caching services is related to improper authentication. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerabilities of the functions fromAdvSetMacMtuWan, wanSpeed, cloneType, and the mac-related microprogramming software of Tenda ax1803 allow attackers to execute arbitrary code or trigger a stack overflow.

The vulnerabilities of the functions fromAdvSetMacMtuWan, wanSpeed, cloneType, and the microprogramming software for Tenda ax1803 are related to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to trigger a stack overflow or execute arbitrary code...

The vulnerability of the DSP microprogramming software service in Qualcomm’s embedded chips lies in insufficient validation of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from the ability to access the channel from a non-endpoint location, allowing attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks lies in the ability to access the channel from a point that is not a final destination. Exploiting this vulnerability could allow an attacker to execute a “man-in-the-middl...

The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, allows a hacker to gain access and modify data.

The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, is related to a data source confirmation error. Exploiting this vulnerability could allow an attacker operating remotely to gain access to modify data...

The vulnerability of the access control list component in Cisco SD-WAN vEdge microprogramming router software allows a perpetrator to bypass the access control list.

The vulnerability of the access control list component in Cisco SD-WAN vEdge microprogramming device software is related to access control errors. Exploiting this vulnerability could allow a malicious actor to bypass the access control list...

The vulnerability of the annotate() and alias() functions in the Django web application framework allows a hacker to execute arbitrary code.

The vulnerability of the LoginView, LogoutView, and setlanguage functions in the Django web application framework is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Dahua video surveillance cameras have a vulnerability related to copying into the buffer without checking the size of the input data. This allows intruders to execute arbitrary codes or trigger malfunctions during maintenance.

The vulnerability of Dahua video surveillance cameras lies in the copying of input data into the buffer without checking its size. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause malfunctions in the system...

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the lack of access control mechanisms. This allows attackers to elevate their privileges to the root level.

The vulnerability of the microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, stems from deficiencies in access control. Exploiting this vulnerability could allow...

The vulnerability in the GeoServer Web Feature Service (WFS) software, used for managing and publishing geospatial data on the OSGeo GeoServer server, allows a perpetrator to disclose protected information.

The vulnerability in the GeoServer Web Feature Service WFS software, used for managing and publishing geospatial data on the OSGeo GeoServer server, is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose...

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager relates to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

The vulnerability in the web interface of the Cisco TelePresence Management Suite software allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability in the web interface of the Cisco TelePresence Management Suite software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module’s web processor allows a hacker to execute arbitrary code.

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module web processors is related to the insecure initialization of resources when a specific IP address is used for connecting to the WDB agent. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Sofia-SIP user agent library (session initiation protocol) relates to reading data beyond the buffer in memory, allowing a attacker to cause a service failure.

The vulnerability of the Sofia-SIP user agent library session initiation protocol relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the `cscfg_csdev_enable_active_config()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cscfgcsdevenableactiveconfig function in the Linux operating system kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the websAspInit() function in D-Link DIR-513 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the websAspInit function /goform/formSetWanPPPoE in the D-Link DIR-513 router microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the vCard component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code under the root user’s context.

The vulnerability of the vCard component of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...

The vulnerability of the web interface of the microprogrammed software routers DIR-615 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface of the microprogrammed software router DIR-615 arises from the lack of checks on input data in the pingipaddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the software platform for managing execution environments of virtual machines in Apache CloudStack lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the software platform that manages virtual machine environments in Apache CloudStack relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Advanced Notification Service (ANS) management service in the HarmonyOS operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Advanced Notification Service ANS management service in the HarmonyOS operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

The vulnerability of the HarmonyOS operating system, related to insufficient handling of exceptional states, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HarmonyOS operating system is related to insufficient handling of exceptional states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the microprogramming software of the Aitemi M300 wireless signal amplifiers (MT02) arises from the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the microprogramming software of the Aitemi M300 MT02 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the SSID identifier. Exploiting this vulnerability can allow a remote attacker...

The vulnerability of the getAuthCode() function in D-Link DIR-605L router microprogramming software allows a hacker to execute any code with root privileges.

The vulnerability of the getAuthCode function in D-Link DIR-605L router microprogramming software is related to buffer overflows in the CAPTCHA processing stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems allows a perpetrator to execute arbitrary commands.

The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

The vulnerability of the WeGIA web manager’s personalizacao_imagem.php script allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the personalizacaoimagem.php web handler of the WeGIA browser is related to the failure to protect the website structure when processing the err parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the execution of operations beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the disclosure of system data by unauthorized individuals, allowing attackers to gain unauthorized access to protected information.

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the disclosure of system data by unauthorized individuals. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected information...

The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

The vulnerability of the formSetEmail function (/goform/formSetEmail) in the D-Link DIR-619L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetEmail function /goform/formSetEmail of the D-Link DIR-619L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the libsavsvc.so library in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the libsavsvc.so library in Android operating systems relates to the reading of data beyond the buffer boundaries in memory during the decoding of headers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted HTML page...

The vulnerability of the AES-XTS encryption algorithm implementation in single-Chip Microcontrollers ESP32-S2 and ESP32-S2F allows a attacker to compromise the confidentiality of the protected information.

The vulnerability of the AES-XTS encryption algorithm implemented in single-Chip Microcontrollers ESP32-S2 and ESP32-S2F is related to the number of surfaces that are vulnerable, with their quantitative measurement exceeding the desired maximum. Exploiting this vulnerability can allow attackers t...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of HashiCorp’s Vault and Vault Enterprise storage platforms, which involve improper configuration of permissions for critical resources, allows attackers to bypass authentication processes.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to bypass authentication processes...

The vulnerability of the asynchronous messaging system Apache ActiveMQ Artemis, related to incorrect authentication, allows attackers to gain access to confidential information.

The vulnerability of the asynchronous messaging system Apache ActiveMQ Artemis is related to incorrect authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of PRC files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Vulnerability of the H5FL__malloc() function (src/H5FL.c) in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the H5FLmalloc function src/H5FL.c in the HDF5 library is related to improper cleaning or release of resources. Exploiting this vulnerability may allow an attacker to cause a service failure...

The vulnerability of the multimedia platform GPAC, related to the assignment of the NULL pointer, allows a perpetrator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...