ImageMagick System Failure

The vulnerability of the console-based graphic editor ImageMagick is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to trigger a service failure using a malicious file...

Linux kernel driver Heap Buffer Overflow DoS

The vulnerability of the ibnlhandleipresresp function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

DHCP Server Unauthorized Access

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

OpenImageIO ICOInput seek_subimage Heap Buffer Overflow DoS

The vulnerability of the ICOInput::seeksubimage function in the src/ico.imageio/icoinput.cpp module of the OpenImageIO library is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

FortiMail Web Structure Code Execution

The vulnerability of the FortiMail email protection system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

Apex One Privilege Escalation

The vulnerability of the anti-virus software Apex One is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a hacker to increase their privileges...

Contao Data Compromise

The vulnerability of the Contao content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by downloading specially created PHP...

TrustAccess Network Firewall Authentication Bypass

The vulnerability of the TrustAccess network firewall is related to an improperly implemented user authentication mechanism. Exploiting this vulnerability allows a perpetrator who has access to user credentials to perform authentication procedures without using the TrustAccess graphical interface...

FLAC bitreader Heap Buffer Overflow DoS

The vulnerability of the FLACbitreaderreadricesignedblock function in the bitreader.c component of the FLAC audio codec is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Cyrus IMAP Mail Server Data Compromise

The vulnerability of the indexurlfetch function imap/index.c in the Cyrus IMAP server is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information by using the UrlFetch function and the...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ImageMagick Integer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

CSS components Confidential Data Access

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

Password component compromise Data Compromise

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Downloads Component Google Chrome Microsoft Edge Data Compromise

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterpidinstswap function in the MP4Box multimedia platform of GPAC relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

bpf_tail_call_direct_fixup Heap Buffer Overflow DoS

The vulnerability of the bpftailcalldirectfixup function in the arch/x86/net/bpfjitcomp.c module, which supports networking functions on the x86 kernel of the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to...

Tenda PA6 cgiPortMapAdd Code Execution

The vulnerability of the cgiPortMapAdd function in the wireless access point software Tenda PA6 relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through parameters type and sfname...

Adobe Experience Manager Code Execution

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

INVD Processor Heap Buffer Overflow DoS

The vulnerability of the INVD processor instruction for virtual machines running on AMD-processor servers is related to the loss or omission of information. Exploiting this vulnerability can allow a malicious actor to cause the guest virtual machine’s memory to be compromised...

Moxa NPort asynchronous server’s Code Execution

The vulnerability of Moxa NPort asynchronous server microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

GitLab IP Address Restriction Bypass

The vulnerability of the IP address restriction function in the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictio...

WBF Driver Unauthorized Access

The vulnerability of the WBF driver of the HID DigitalPersona U.are.U 4500 Reader biometric fingerprint scanner software is related to cryptographic transformation errors. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

Oracle Solaris Common Desktop Environment Full Control

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Firefox Thunderbird Password Storage Unauthorized Access

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Mediaserver libmpeg2 Heap Buffer Overflow RCE

The vulnerability of the Mediaserver application in the Android operating system’s libmpeg2 library arises from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption and remotely execute code within the...

DIAFAN.CMS SQL Injection

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Content Security Policy Compromise Data Compromise

The vulnerability of the Content Security Policy component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially crafted HTML page...

Network Component Confidential Data Access

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

Skia Graphic Library Confidential Data Access

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

User Profile Service RCE

The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code within the authorized user’s session...

ABB Ability zenon Auth Bypass DoS

The vulnerability of the software platform for operating data management in ABB Ability zenon relates to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to trigger service failures remotely...

Out of Office Assistant XSS

The vulnerability of the Out of Office Assistant task distribution system is related to insufficient protection of the web page structure when processing the Jira fullName parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Siemens Tecnomatix Plant Simulation Buffer Overflow

The vulnerability of the software environment for simulation modeling of systems and processes in Siemens Tecnomatix Plant Simulation lies in buffer overflows in the stack. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created WRL files...

D-Link Router File Data Code Execution

The vulnerability of the file.data function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a remote...

Puppet CSV Injection Confidential Data DoS

The vulnerability of the Puppet infrastructure automation tool relates to the absence of a mechanism for neutralizing elements in the CSV file. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

libjpeg-turbo alloc_large division overflow

The vulnerability of the alloclarge and allocsarray functions in the libjpeg-turbo image processing library is related to deficiencies in the handling of input values. Exploiting this vulnerability could allow a malicious actor to trigger a zero-division operation remotely...

MESSAGING SAP_XIAF Disclosure Information

The vulnerability of the MESSAGING and SAPXIAF components of the SAP NetWeaver Process Integration software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Astra Linux fly-qdm Graphical User Input Code Execution

The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system is related to buffer overflows when copying a command string from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

Veritas Access Privilege Escalation

The vulnerability of the Veritas Access data storage system, as well as the software tools for backup and recovery with Veritas NetBackup and Veritas NetBackup Appliance, is related to privilege division errors. Exploiting this vulnerability could allow an attacker to execute commands on the...

Network Component Confidential Data Access

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

NGINX SSL Module Data Compromise

The vulnerability of the ngxhttpsslmodule module in NGINX Plus and NGINX Open Source web servers is related to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and accessibility of protected information...

Cisco Webex XSS

The vulnerability of the Cisco Webex web conferencing platform exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Advantech multiple_ssid_htm Data Compromise

The vulnerability of the “multiplessidhtm” application programming interface in the microprogramming-based wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the lack of measures taken to neutralize the special elements used in the operatin...