Oracle CRM Message Hooks Data Manipulation

The vulnerability of the Message Hooks component in Oracle CRM Technical Foundation’s customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to modify, add, or delete data using the...

Oracle Human Resources Hierarchy Diagrammers Data Access

The vulnerability of the Hierarchy Diagrammers component in Oracle Human Resources software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

Cisco Unified Communications Manager Disclosure

The vulnerability in the web interface of the Cisco Unified Communications Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Cisco Web Security Appliance API Framework HTTP Header Injection

The vulnerability of the API Framework web server component of Cisco Web Security Appliance WSA and the Cisco Content Security Management Appliance SMA security management device is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious...

DOSBox Buffer Overflow DoS

The vulnerability of the DOSBox emulator is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise data integrity, gain access to confidential information, and cause service failures...

WebUSB Protocol Code Execution

The vulnerability of the WebUSB protocol implementation in Google Chrome’s web browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Google Chrome Code Execution

The vulnerability of the offline audio context component in the Google Chrome web browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Exim Code Execution

The vulnerability of the Exim mail server is related to errors in memory object processing. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

PoDoFo crop_page() DoS

The vulnerability of the croppage function in the PoDoFo software library is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted file...

node-tar File Replacement

The vulnerability of the node-tar module in the Node.js library is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow a remote attacker to replace the existing content of the file...

Oracle VM VirtualBox Partial DoS

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a partial service outage...

Oracle Identity Manager Advanced Console Controller Unauthorized Access

The vulnerability of the Advanced Console controller’s sub-component in Oracle Identity Manager, a software platform of Oracle Fusion Middleware, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

eDocLib Platform XSS

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...

Oracle E-Business Suite CRM User Management Framework Data Access

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications system, part of the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using t...

gnupg Pointer Arithmetic DoS

The vulnerability of the gpg data encryption tool from the gnupg package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure, by passing a specially crafted file as an argument to the command line...

Win32k Kernel Mode RCE

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

Windows GDI Unauthorized Access

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

information protection system Buffer Overflow DoS

The vulnerability of the information protection system against unauthorized access is due to an operation going beyond the buffer in memory file handling is not performed; the full path length exceeds 260 characters. Exploiting this vulnerability can allow a local attacker to cause a service...

ChakraCore Memory Object Execution Code

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code in the context of the current user...

Junos REST API Information Disclosure

The vulnerability of the REST API interface of the Junos operating system is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to information about user account passwords...

Dr.Web Enterprise Security Suite Protocol Error File Replacement

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in errors in the proprietary protocol used to connect the antivirus components to the server. Exploiting this vulnerability allows a malicious actor to create a fake “Dr.Web Enterprise Security Suite” server withi...

Oracle MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Oracle MySQL Connector/J Full Control

The vulnerability of the Connector/J sub-component of the MySQL Connectors component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application using the JDBC protocol...

Pelco Sarix Web Interface Command Execution

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands through the WEB interface...

Cisco Webex Network Recording Player Buffer Overflow

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Windows Privilege Escalation Execution

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Microsoft SQL Server Management Studio XXE Information Disclosure

The vulnerability of Microsoft SQL Server Management Studio is related to errors in restricting XML references to external objects XXE. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using a specially crafted file...

GIMP load_image Buffer Overflow DoS

The vulnerability of the loadimage function in the GIMP graphic editor’s plug-ins/common/file-gbr.c file is related to the issue of data being written beyond the buffer boundaries when processing UTF-8 formatted data. Exploiting this vulnerability can allow an attacker to cause service failures,...

Cisco Email Security Appliances Malicious Content Detection

The vulnerability of Cisco Email Security Appliances’ security systems stems from deficiencies in the mechanisms for detecting malicious content in executable files EXE files. Exploiting this vulnerability allows a malicious actor to send messages containing malicious files remotely...

Outside In Filters Component Unauthorized Access

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or...

Oracle VM VirtualBox Core Component Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected data or cause service failures...

Oracle Database Core RDBMS Data Compromise

The vulnerability of the Core RDBMS component of the Oracle Database management system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of the protected data...

Active Management Technology subsystem Code Execution

The vulnerability of the Active Management Technology subsystem of the Intel Converged Security Manageability Engine arises due to buffer overflows during HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm WLAN Android Privilege Escalation

The vulnerability of the limsendsmeprobereqind function in the Qualcomm WLAN operating system’s Android component, as found in the CAF repository, is due to a buffer overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Qualcomm WLAN Privilege Escalation

The vulnerability of the csrupdatefilsparamsrso function in the Qualcomm WLAN operating system’s Android component, found in the CAF file, is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

libmpeg2 Media Framework Code Execution

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

Intel Management Engine Privilege Escalation

The multiple vulnerabilities of the Intel Management Engine sub-system within the microprogramming software of the Platform Controller Hub PCH family, which serve as south bridges, are caused by buffer overflows. These vulnerabilities are related to deficiencies in access control. Exploiting thes...

SAP NetWeaver Navigation Request Sniffer XSS

The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows a malicious actor to inject arbitrary...

Microsoft Edge Code Execution

The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption due to a script error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a resul...

Cisco IOS SNMP Code Injection

Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP...

FFmpeg Memory Limit Recording

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...

Input Manager Service in DoS

The vulnerability of the Input Manager Service in the Android operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause temporary service interruptions, necessitating the resetting of user settings to correct the issue...

ImageMagick DoS

The vulnerability of the ReadMNGImage function in the ImageMagick console graphic editor’s png.c file arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure loss o...

Windows Privilege Escalation

The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...

Cavium SDK RSA Key Disclosure

The vulnerability of the RSA-CRT implementation in the developer’s toolkit for devices based on Cavium processors is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to obtain encrypted RSA keys by launching attacks through external...

NETGEAR Router Password Information Disclosure

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900,...

Multimedia Toolkit QuickTime Code Execution

The vulnerability of the Multimedia Toolkit QuickTime is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted file...