98363 matches found
Oracle E-Business Suite User Monitoring Unauthorized Access
The vulnerability of the User Monitoring component in the Application Management Pack of the Oracle E-Business Suite is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP...
Cisco Webex Network Recording Player Buffer Overflow
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...
Windows Data Sharing Service Privilege Escalation
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Windows Privilege Escalation Execution
The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Microsoft SQL Server Management Studio XXE Information Disclosure
The vulnerability of Microsoft SQL Server Management Studio is related to errors in restricting XML references to external objects XXE. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using a specially crafted file...
GIMP load_image Buffer Overflow DoS
The vulnerability of the loadimage function in the GIMP graphic editor’s plug-ins/common/file-gbr.c file is related to the issue of data being written beyond the buffer boundaries when processing UTF-8 formatted data. Exploiting this vulnerability can allow an attacker to cause service failures,...
Cisco Email Security Appliances Malicious Content Detection
The vulnerability of Cisco Email Security Appliances’ security systems stems from deficiencies in the mechanisms for detecting malicious content in executable files EXE files. Exploiting this vulnerability allows a malicious actor to send messages containing malicious files remotely...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or...
Oracle VM VirtualBox Core Component Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected data or cause service failures...
Oracle Database Core RDBMS Data Compromise
The vulnerability of the Core RDBMS component of the Oracle Database management system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of the protected data...
Active Management Technology subsystem Code Execution
The vulnerability of the Active Management Technology subsystem of the Intel Converged Security Manageability Engine arises due to buffer overflows during HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Qualcomm WLAN Android Privilege Escalation
The vulnerability of the limsendsmeprobereqind function in the Qualcomm WLAN operating system’s Android component, as found in the CAF repository, is due to a buffer overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
Qualcomm WLAN Privilege Escalation
The vulnerability of the csrupdatefilsparamsrso function in the Qualcomm WLAN operating system’s Android component, found in the CAF file, is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
libmpeg2 Media Framework Code Execution
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
Intel Management Engine Privilege Escalation
The multiple vulnerabilities of the Intel Management Engine sub-system within the microprogramming software of the Platform Controller Hub PCH family, which serve as south bridges, are caused by buffer overflows. These vulnerabilities are related to deficiencies in access control. Exploiting thes...
SAP NetWeaver Navigation Request Sniffer XSS
The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows a malicious actor to inject arbitrary...
Microsoft Edge Code Execution
The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption due to a script error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a resul...
Cisco IOS SNMP Code Injection
Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP...
FFmpeg Memory Limit Recording
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...
Input Manager Service in DoS
The vulnerability of the Input Manager Service in the Android operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause temporary service interruptions, necessitating the resetting of user settings to correct the issue...
ImageMagick DoS
The vulnerability of the ReadMNGImage function in the ImageMagick console graphic editor’s png.c file arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure loss o...
Android Memory Corruption RCE
The vulnerability of the libavc component in the Android MediaServer operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely, using a specially crafted media fil...
Windows Privilege Escalation
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...
Cavium SDK RSA Key Disclosure
The vulnerability of the RSA-CRT implementation in the developer’s toolkit for devices based on Cavium processors is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to obtain encrypted RSA keys by launching attacks through external...
NETGEAR Router Password Information Disclosure
The vulnerability of the embedded software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900,...
Multimedia Toolkit QuickTime Code Execution
The vulnerability of the Multimedia Toolkit QuickTime is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted file...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the hostap-modules-2.6.8-3-686 package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-3-mckinley-smp operating system of Debian GNU/Linux may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
Multiple vulnerabilities exist in the kernel-image-2.6.8-11-amd64-k8-smp operating system from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the krb5-ftpd package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-5kc-malta package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information...
Windows Desktop Experience Data Compromise
The vulnerability in DirectShow allows for an increase in privilege levels...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the linux-headers-2.6.26-1-5kc-malta package of the Debian GNU/Linux operating system may be exploited, resulting in a breach of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.4.17-r3k-kn02 Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information...
Java Platform Data Compromise
The vulnerability of the Java SE software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using the JavaFX subcomponent...
Java Platform Data Compromise
The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality by using the Security sub-component...
MariaDB Server Information Disclosure
The vulnerability in the MySQL Server component of Oracle MySQL allows unauthorized users, after passing authentication, to manipulate data accessibility by using the stored procedure subcomponent...
Microsoft SQL Server Information Disclosure
There is a vulnerability in SQL Server that can cause a service failure. If exploited successfully, a malicious individual can trigger a server failure before it can be restarted manually...
Microsoft Lync Server Data Compromise
The vulnerability of the GDI+ component of the Microsoft Lync Attendee User program, related to the processing of specially crafted images, allows for remote execution of code when a user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full...
Java Development Kit Data Compromise
The vulnerability of the Java Development Kit application development tool relates to JavaFX subcomponents. Exploiting this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using JavaFX subcomponents...
Symantec Anti-Virus Engine Code Execution
The vulnerability of the Symantec Anti-Virus Engine is related to errors in syntactic analysis of executable files, packaged using the ASPack software. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption using a file with...
Android Privilege Escalation
The vulnerability of the MediaTek Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...
MySQL Information Disclosure
The vulnerability of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise accessibility by affecting the Performance Schema on the server...
MySQL Data Compromise
The vulnerability of the MySQL database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to influence the confidentiality of information by manipulating the JSON server...
Ruby on Rails Access Control Bypass
The vulnerability in the nestedattributes.rb file of the activerecord/lib/activerecord module in the Ruby on Rails software framework is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions by using nested attributes ...
Firefox ESR and Firefox DoS
The vulnerability of the graphite2::FileFace::gettablefn function in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, means that memory is not initialized for special data structures. Exploiting this vulnerability can allow a malicious actor to cause service...
FFmpeg DoS
The vulnerability in the libavcodec/tiff.c function of the FFmpeg multimedia library arises from buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure such as inability to read data outside the array bounds or have other effects by using a specially creat...
NetScaler Gateway Application Privilege Escalation
The multiple vulnerabilities of the microprogramming software for access control systems in the NetScaler Gateway and the NetScaler Application Delivery Controller are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to enhance their privileges by manipulatin...
Cisco TelePresence Video Communication Server Arbitrary Code Injection
The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted...