The vulnerability of the smbd_negotiate() function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...

The vulnerability of the raid_status() function in the drivers/md/dm-raid.c module of the Linux operating system’s device driver for multiple devices (RAID and LVM), which allows an attacker to access protected information or cause service failures.

The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications allows a malicious individual to escalate their privileges and execute arbitrary code.

The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary cod...

The vulnerability of the VPN module of the TP-Link Archer AXE75 wireless router, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the VPN microprogramming software for TP-Link Archer AXE75 Wi-Fi routers is related to insufficient verification of input data. Exploiting these vulnerabilities could allow a remote attacker to cause service interruptions...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer memory limit, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software lies in the incorrect limitation of the path name to the directory. This allows a intruder to gain unauthorized access to the protected information.

The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...

The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems lies in the improper use of standard permissions, allowing attackers to increase their privileges.

The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system allows a intruder to gain unauthorized access to the system.

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to incorrect session duration settings. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the system...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the idmrshr parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getdoc parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the Polkit authentication mechanism implemented by the InputPlumber utility in the Linux operating system allows a hacker to circumvent existing security restrictions, cause service failures, or gain increased privileges.

The vulnerability of the Polkit authentication mechanism in the Linux operating system’s InputPlumber utility is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions, cause service failures, o...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, which stems from the use of strictly encrypted user credentials, allows a hacker to escalate their privileges.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of Adobe Dreamweaver HTML editor lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Android Frameworks Base repository of the Android operating system allows attackers to enhance their privileges.

The vulnerability of the NotificationStation.java file in the Android operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, who operates remotely, to enhance their privileges...

The vulnerability of Grafana Pyroscope’s continuous profiling software relates to the disclosure of information, which allows a perpetrator to access confidential data.

The vulnerability of Grafana Pyroscope’s continuous profiling software is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to gain access to and delete data.

The vulnerability of Google Chrome’s Blink rendering module is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access and delete data by using a specially created HTML page...

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

The vulnerability of the formPictureUrl component in the microprogramming software for UTT HiPER 840G allows a attacker to cause a service failure.

The vulnerability of the formPictureUrl component in the UTT HiPER 840G router microprogramming system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of software for the design, operation, and maintenance of technological installations—including COMOS, Simcenter 3D, and Simcenter Femap—is related to errors in the authentication process. These errors allow attackers to carry out “man-in-the-middle” attacks.

The vulnerabilities of the software for designing, operating, and maintaining technological installations—COMOS, Simcenter 3D, and Simcenter Femap—are related to errors in the authentication process. Exploiting these vulnerabilities can allow a remote attacker to carry out a “man-in-the-middle”...

The vulnerability of the Pillow image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Pillow image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Case Display Page component of the FoxCMS content management system allows a hacker to execute arbitrary code.

The vulnerability of the Case Display Page component of the FoxCMS content management system is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of PLC NLcon-CE-485-C, related to the lack of measures taken to encrypt confidential data, allows attackers to gain access to confidential information.

The vulnerability of PLC NLcon-CE-485-C is related to the lack of measures taken to encrypt confidential data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the developer tool “1C:Standard Subsystems Library” relates to deficiencies in code generation process management, allowing a hacker to execute arbitrary code.

The vulnerability of the developer tool “1C:Standard Subsystems Library” is related to deficiencies in process management for code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the "Health check-up" platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows a perpetrator to access confidential information.

The vulnerability of the "Health check-up" patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability of the “Health check-up” platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows unauthorized access by attackers to protected information.

The vulnerability of the “Health check-up” patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the formWsc() function in TOTOLINK N300RT router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the formWsc function in TOTOLINK N300RT router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the targetAPSsid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the software solutions for managing privileged sessions, such as Zoho ManageEngine Access Manager Plus, the software for control, management, and auditing, Zoho ManageEngine Password Manager Pro, and the software for managing privileged access, ManageEngine Privileged Access Manager 360 (PAM360), stems from incorrect path name restrictions. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Zoho ManageEngine Access Manager Plus, a software solution for controlling, managing, and auditing privileged sessions; the Zoho ManageEngine Password Manager Pro, a software solution for controlling access privileges; and the ManageEngine Privileged Access Manager 360...

The vulnerability of the NVIDIA GPU Display Driver lies in its uncontrolled search path, which allows attackers to trigger system failures, gain elevated privileges, execute arbitrary code, and forge protected information.

The vulnerability of the NVIDIA GPU Display Driver is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, and forge protected information...

Vulnerability of the system configuration module of automation systems The “BUK TS-G” system, due to the lack of measures taken to protect SQL queries, allows for the execution of arbitrary code.

The vulnerability of the configuration module of the automation system “BUK TS-G” is related to the failure to protect SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted SQL query...

The vulnerability of the Punycode character transformation method, which is used to process domain names, allows attackers to increase their privileges.

The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the web interface of the script /htdocs/cgibin/hedwig.cgi, a microprogramming system for D-Link DIR-852 routers, allows a attacker to execute arbitrary commands.

The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

The vulnerability of the debug logging function in the audit log of the Cisco Duo Authentication Proxy allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the debug logging function in the audit log of the Cisco Duo Authentication Proxy is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to integer overflow. This vulnerability allows a malicious actor to trigger a service failure.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to buffer overflows in dynamic memory. This vulnerability allows attackers to cause system failures, gain unauthorized access to protected information, and execute arbitrary code.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, gain unauthorized access...

The vulnerability of the strongSwan microprogramming software firewall solution developed by Ruijie RG-EG306MG-P allows a intruder to disclose protected information.

The vulnerability of the strongSwan microprogramming software firewall solution from Ruijie RG-EG306MG-P lies in the lack of encryption for confidential data during the processing of the parameter “idontcareaboutsecurityanduseaggressivemodepsk”. Exploiting this vulnerability can allow a remote...

The vulnerability of the snd_usb_get_audioformat_uac3() function (sound/usb/stream.c) in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the sndusbgetaudioformatuac3 function in the Linux kernel’s sound/usb/stream.c file is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `net/ipv4/udp_offload.c` module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/ipv4/udpoffload.c module of the Linux operating system is related to incorrect data type conversion. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `update-ldcache` function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the update-ldcache function of software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, arises from an improper definition of symbolic references before accessing files. Exploiting this vulnerabili...

The vulnerability in the Apache HTTP Server’s web server lies in improper checking of the return value of a function, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache HTTP Server is related to improper checking of the return value of a function. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of D-Link DHP-W310AV router’s microprogramming software lies in its ability to bypass the authentication mechanism, allowing attackers to execute a “man-in-the-middle” attack.

The vulnerability of D-Link DHP-W310AV router microprogramming software is related to the possibility of bypassing the authentication mechanism. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability of the vCard component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code under the root user’s context.

The vulnerability of the vCard component of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...

The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to errors in the certificate validation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web interface of the microprogrammed software routers DIR-615 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface of the microprogrammed software router DIR-615 arises from the lack of checks on input data in the pingipaddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the IBM Aspera Faspex file-sharing application, related to the implementation of security functions at the client side, allows attackers to compromise the integrity of the protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information from a remote location...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the AI-based code editor Cursor lies in its lack of measures to neutralize special elements used in the operating system command. This allows a perpetrator to execute arbitrary code.

The vulnerability of the AI-based code editor Cursor relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...