The vulnerability of the Traffic Analyzer – Statistical function in the microprogramming software for Wi-Fi routers from ASUS’ RT-AC86U allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the Traffic Analyzer – Statistical function in ASUS’ Wi-Fi router software, the RT-AC86U, exists due to the lack of measures taken to neutralize certain components. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands or cause service...

The vulnerability of the API interface of the Cisco Meeting Server platform allows a hacker to trigger a service failure.

The vulnerability of the Cisco Meeting Server’s API interface relates to insufficient validation of input data during request processing. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

The vulnerabilities of the `alloc_large()` and `alloc_sarray()` functions in the libjpeg-turbo image processing library allow a malicious actor to perform division operations with zero.

The vulnerability of the alloclarge and allocsarray functions in the libjpeg-turbo image processing library is related to deficiencies in the handling of input values. Exploiting this vulnerability could allow a malicious actor to trigger a zero-division operation remotely...

The vulnerability of the FLAC__bitreader_read_rice_signed_block function in the bitreader.c component of the FLAC audio codec, related to reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the FLACbitreaderreadricesignedblock function in the bitreader.c component of the FLAC audio codec is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the opie operating system package from Debian GNU/Linux may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability of the Network component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...

The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows a hacker to compromise data integrity.

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Picomatch library lies in the uncontrolled modification of object prototype attributes, which allows attackers to compromise data integrity.

The vulnerability of the Picomatch library is related to uncontrolled changes to the attributes of the object’s prototype. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of AVEVA PI Server’s data storage, normalization, analysis, and notification functions in real-time mode, due to incorrect handling of exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the AVEVA PI Server’s data storage, normalization, analysis, and notification functions in real-time is related to improper handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the config_set function in the libconfig.so library of the web server’s embedded software is related to buffer overflows in the stack due to insufficient input data processing. This allows attackers to execute arbitrary code or cause service interruptions by exploiting this vulnerability.

The vulnerability of the configset function in the libconfig.so library, a built-in software library for web servers, is related to buffer overflows in the stack due to insufficient input handling. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary...

The vulnerability in the CDCreateKernlConnection function of the condrv.sys driver in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the CDCreateKernlConnection function in the condrv.sys driver of the Windows operating system is related to deficiencies in the path name validation process. Exploiting this vulnerability allows a malicious actor to trigger service failures by using a specially crafted path...

The vulnerability of the Veritas Access data storage system and its backup/restore software, Veritas NetBackup and Veritas NetBackup Appliance, is related to privilege division errors. This vulnerability allows an attacker to execute commands with root/admin privileges.

The vulnerability of the Veritas Access data storage system, as well as the software tools for backup and recovery with Veritas NetBackup and Veritas NetBackup Appliance, is related to privilege division errors. Exploiting this vulnerability could allow an attacker to execute commands on the...

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Content Security Policy component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Content Security Policy component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially crafted HTML page...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and influence the integrity of the data.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data and influence data integrity through a specially created HTML page...

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure, related to access control errors, allows attackers to escalate their privileges.

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the trigger_kthread_fn() function in the kernel/trace/traceeventstrigger.c module, which supports kernel tracing in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the triggerkthreadfn function in the kernel/trace/traceeventstrigger.c module, which supports kernel tracing in Linux operating systems, relates to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the ib_nl_handle_ip_res_resp() function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver allows a attacker to cause a service failure.

The vulnerability of the ibnlhandleipresresp function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of NetScaler ADC (formerly Citrix ADC) delivery controller and the NetScaler Gateway (formerly Citrix Gateway) access control system is related to improper external management of file names or paths, allowing attackers to gain unauthorized access to protected information.

The vulnerability of NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway access control systems is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system allows a intruder to gain unauthorized access to the system.

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the system...

The vulnerability of the Out of Office Assistant system, related to insufficient protection of the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Out of Office Assistant task distribution system is related to insufficient protection of the web page structure when processing the Jira fullName parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the debuginfo.htm component in Netgear’s integrated router software—Netgear CBR40, Netgear CBK40, and Netgear CBK43—allows attackers to disclose sensitive information that should be protected.

The vulnerability of the debuginfo.htm component in Netgear’s integrated router software, such as Netgear CBR40, Netgear CBK40, and Netgear CBK43, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected ...

The vulnerability of the cgiPortMapAdd function in the microprogramming software of the Tenda PA6 wireless signal booster allows a hacker to execute arbitrary code.

The vulnerability of the cgiPortMapAdd function in the wireless access point software Tenda PA6 relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through parameters type and sfname...

The vulnerability of the file.data function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G allows a hacker to execute arbitrary code.

The vulnerability of the file.data function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a remote...

The vulnerability of Puppet’s infrastructure automation tool lies in the absence of a mechanism to neutralize elements in CSV files. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Puppet infrastructure automation tool relates to the absence of a mechanism for neutralizing elements in the CSV file. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to integer overflow. This allows a intruder to trigger a service failure.

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially crafted HTTP request...

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the CSS components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data.

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data through a specially created HT...

The vulnerability in the `net/ipv4/icmp.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/ipv4/icmp.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the apcli Cancel_wps() function (/usr/lib/lua/luci/controller/mtkwifi.lua) in the TOTOLINK A6000R router software allows a attacker to execute arbitrary commands or cause service interruptions.

The vulnerability of the apcliCancelwps function /usr/lib/lua/luci/controller/mtkwifi.lua of the TOTOLINK A6000R router’s software is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the Zangi Private Messenger messaging application, related to deficiencies in the session key generation mechanism, allows a hacker to execute a “man-in-the-middle” attack.

The vulnerability of the Zangi Private Messenger messaging application is related to deficiencies in the mechanism for generating session keys. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack...

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router allows a hacker to execute arbitrary code.

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SAP Customer Data Cloud data management software lies in the use of a non-safe random number generator program, which allows an attacker to disclose sensitive information.

The vulnerability of the SAP Customer Data Cloud data management software is related to the use of a non-safe random number generator program. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information...

The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading beyond the permissible buffer size, allows an attacker to access confidential information or cause service failures.

The vulnerability of the d2alawarray function in the SI libsndfile library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential information or cause service failures...

The vulnerability of the MESSAGING and SAP_XIAF components of the software for integrating corporate applications in SAP NetWeaver Process Integration allows a hacker to disclose protected information.

The vulnerability of the MESSAGING and SAPXIAF components of the SAP NetWeaver Process Integration software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Vulnerability in the MPEG-2 decoder of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to elevate their privileges and cause service failures.

The vulnerability of the Windows operating system’s kernel is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the authentication procedures’ flaws, which allow unauthorized access to protected information by intruders.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the software platform for operating data management systems, related to the lack of authentication for critical functions, allows attackers to trigger service interruptions. This vulnerability is associated with ABB Ability zenon.

The vulnerability of the software platform for operating data management in ABB Ability zenon relates to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to trigger service failures remotely...

The vulnerability in the sysinfo.asp script of ASUS RT-N12E router microprogramming software allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the sysinfo.asp script in ASUS RT-N12E router microprogramming software is related to the lack of measures taken to protect the website structure when processing SSID identifiers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks X...

The vulnerability of the application software interface “multiple_ssid_htm” of the multifunctional wireless access points manufactured by Advantech, models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “multiplessidhtm” application programming interface in the microprogramming-based wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the lack of measures taken to neutralize the special elements used in the operatin...

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series lies in improper name restrictions for path entries to the catalog. This allows unauthorized access by attackers to resources and enables them to modify them.

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability of the Suricata intrusion detection and prevention system, related to overflowing buffers in dynamic memory, allows an intruder to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to the overflow of the buffer in the dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...

The vulnerability of the bcrypt hashing algorithm implementation in the system file exporter tool for Prometheus Exporter Toolkit allows a hacker to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the bcrypt hashing algorithm implementation in the Prometheus Exporter Toolkit’s file export function is related to the ability to bypass authentication when processing the web.yml file. Exploiting this vulnerability can allow attackers to circumvent security restrictions and...