The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems allows a perpetrator to execute arbitrary commands through specially crafted HTTP requests.

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems lies in the lack of measures taken to neutralize specific elements within the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through specially...

The vulnerability of Microsoft Visual Studio Code’s source editor, related to insufficient input validation, allows attackers to bypass existing security mechanisms.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...

The vulnerability of Microsoft Exchange Server servers stems from the lack of protective measures for website structures, allowing attackers to carry out spear-phishing attacks.

The vulnerability of Microsoft Exchange Server servers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Media component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Media component in the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Active Storage component of the Ruby on Rails software framework allows attackers to execute arbitrary code.

The vulnerability of the Active Storage component in the Ruby on Rails software framework is related to insufficient neutralization of certain elements in the request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager centralized system management platform allows a perpetrator to disclose protected information.

The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager centralized system management system is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary commands.

The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the TanStack library set, related to the presence of undeclared capabilities, allows a hacker to execute arbitrary code.

The vulnerability of the TanStack library set is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the mbuf_get_bytes() and mbuf_get_chars() functions in PostgreSQL PgBouncer’s connection pool allows a hacker to cause a service failure.

The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...

The vulnerability of the UNIX command-line utility set, BusyBox, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.

The vulnerability of the UNIX command-line utility BusyBox is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the WebML component in the Google Chrome browser, which allows a hacker to trigger a service failure.

The vulnerability of the WebML component in Google Chrome relates to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially crafted HTML page...

The vulnerability of the mdp5_pipe_assign() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_pipe.c file of the DRI support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mdp5pipeassign function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause system...

The vulnerability of the format_show() function in the arch/powerpc/kernel/secvar-sysfs.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the formatshow function in the arch/powerpc/kernel/secvar-sysfs.c module of the PowerPC platform in Linux operating systems is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Winlogon entry program in Windows operating systems is related to the incorrect definition of symbolic links during access to the file. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the raid_status() function in the drivers/md/dm-raid.c module of the Linux operating system’s device driver for multiple devices (RAID and LVM), which allows an attacker to access protected information or cause service failures.

The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications allows a malicious individual to escalate their privileges and execute arbitrary code.

The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary cod...

The vulnerability of the VPN module of the TP-Link Archer AXE75 wireless router, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the VPN microprogramming software for TP-Link Archer AXE75 Wi-Fi routers is related to insufficient verification of input data. Exploiting these vulnerabilities could allow a remote attacker to cause service interruptions...

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...

The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems lies in the improper use of standard permissions, allowing attackers to increase their privileges.

The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system allows a intruder to gain unauthorized access to the system.

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to incorrect session duration settings. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the system...

The vulnerability of the Polkit authentication mechanism implemented by the InputPlumber utility in the Linux operating system allows a hacker to circumvent existing security restrictions, cause service failures, or gain increased privileges.

The vulnerability of the Polkit authentication mechanism in the Linux operating system’s InputPlumber utility is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions, cause service failures, o...

The vulnerability of Grafana Pyroscope’s continuous profiling software relates to the disclosure of information, which allows a perpetrator to access confidential data.

The vulnerability of Grafana Pyroscope’s continuous profiling software is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to gain access to and delete data.

The vulnerability of Google Chrome’s Blink rendering module is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access and delete data by using a specially created HTML page...

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

The vulnerability of the formPictureUrl component in the microprogramming software for UTT HiPER 840G allows a attacker to cause a service failure.

The vulnerability of the formPictureUrl component in the UTT HiPER 840G router microprogramming system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of software for the design, operation, and maintenance of technological installations—including COMOS, Simcenter 3D, and Simcenter Femap—is related to errors in the authentication process. These errors allow attackers to carry out “man-in-the-middle” attacks.

The vulnerabilities of the software for designing, operating, and maintaining technological installations—COMOS, Simcenter 3D, and Simcenter Femap—are related to errors in the authentication process. Exploiting these vulnerabilities can allow a remote attacker to carry out a “man-in-the-middle”...

The vulnerability of the Pillow image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Pillow image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of PLC NLcon-CE-485-C, related to the lack of measures taken to encrypt confidential data, allows attackers to gain access to confidential information.

The vulnerability of PLC NLcon-CE-485-C is related to the lack of measures taken to encrypt confidential data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the developer tool “1C:Standard Subsystems Library” relates to deficiencies in code generation process management, allowing a hacker to execute arbitrary code.

The vulnerability of the developer tool “1C:Standard Subsystems Library” is related to deficiencies in process management for code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the "Health check-up" platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows a perpetrator to access confidential information.

The vulnerability of the "Health check-up" patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability of the “Health check-up” platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows unauthorized access by attackers to protected information.

The vulnerability of the “Health check-up” patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the astra-safepolicy security configuration software lies in the lack of data security mechanisms. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the astra-safepolicy security configuration software is related to the lack of a data security mechanism. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the formWsc() function in TOTOLINK N300RT router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the formWsc function in TOTOLINK N300RT router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the targetAPSsid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the software solutions for managing privileged sessions, such as Zoho ManageEngine Access Manager Plus, the software for control, management, and auditing, Zoho ManageEngine Password Manager Pro, and the software for managing privileged access, ManageEngine Privileged Access Manager 360 (PAM360), stems from incorrect path name restrictions. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Zoho ManageEngine Access Manager Plus, a software solution for controlling, managing, and auditing privileged sessions; the Zoho ManageEngine Password Manager Pro, a software solution for controlling access privileges; and the ManageEngine Privileged Access Manager 360...

The vulnerability of the NVIDIA GPU Display Driver lies in its uncontrolled search path, which allows attackers to trigger system failures, gain elevated privileges, execute arbitrary code, and forge protected information.

The vulnerability of the NVIDIA GPU Display Driver is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, and forge protected information...

Vulnerability of the system configuration module of automation systems The “BUK TS-G” system, due to the lack of measures taken to protect SQL queries, allows for the execution of arbitrary code.

The vulnerability of the configuration module of the automation system “BUK TS-G” is related to the failure to protect SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted SQL query...

The vulnerability of the Punycode character transformation method, which is used to process domain names, allows attackers to increase their privileges.

The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the web interface of the script /htdocs/cgibin/hedwig.cgi, a microprogramming system for D-Link DIR-852 routers, allows a attacker to execute arbitrary commands.

The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

The vulnerability of the software solution for multidisciplinary optimization, the Multidisciplinary Optimization Engineer, arises from the lack of measures taken to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for multidisciplinary optimization relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the formSetMacFilterCfg() function in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetMacFilterCfg function in the Tenda AC6 router’s microprogramming software lies in the fact that the operation outputs outside the buffer in memory when processing the parameters macFilterType and deviceList. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the formSetCfm() function in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda AC6 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the debug logging function in the audit log of the Cisco Duo Authentication Proxy allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the debug logging function in the audit log of the Cisco Duo Authentication Proxy is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to integer overflow. This vulnerability allows a malicious actor to trigger a service failure.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to buffer overflows in dynamic memory. This vulnerability allows attackers to cause system failures, gain unauthorized access to protected information, and execute arbitrary code.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, gain unauthorized access...

The vulnerability of the strongSwan microprogramming software firewall solution developed by Ruijie RG-EG306MG-P allows a intruder to disclose protected information.

The vulnerability of the strongSwan microprogramming software firewall solution from Ruijie RG-EG306MG-P lies in the lack of encryption for confidential data during the processing of the parameter “idontcareaboutsecurityanduseaggressivemodepsk”. Exploiting this vulnerability can allow a remote...

The vulnerability of the snd_usb_get_audioformat_uac3() function (sound/usb/stream.c) in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the sndusbgetaudioformatuac3 function in the Linux kernel’s sound/usb/stream.c file is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `net/ipv4/udp_offload.c` module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/ipv4/udpoffload.c module of the Linux operating system is related to incorrect data type conversion. Exploiting this vulnerability can allow an attacker to cause a service failure...