Apache CloudStack Privilege Escalation

The vulnerability of the software platform that manages virtual machine environments in Apache CloudStack relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Mbed TLS Heap Buffer Overflow DoS

The vulnerability of the mbedtlsx509stringtonames function in Mbed TLS is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Advanced Notification Service HarmonyOS Data Compromise

The vulnerability of the Advanced Notification Service ANS management service in the HarmonyOS operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

Netgear JWNR2000v2 Sub Function Buffer Overflow

The vulnerability of the sub4238E8 function in Netgear JWNR2000v2 microprogrammed software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...

Netgear JWNR2000v2 Sub Function DoS

The vulnerability of the sub41A914 function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to cause service interruption...

NVIDIA Virtual GPU Manager Unauthorized Access

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

NVIDIA Graphics Processor Information Disclosure

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the disclosure of system data by unauthorized individuals. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected information...

D-Link DIR-619L formSetEmail Buffer Overflow

The vulnerability of the formSetEmail function /goform/formSetEmail of the D-Link DIR-619L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Kerberos Helper DoS

The vulnerability of the Kerberos Helper component in operating systems like macOS is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a attacker to cause service interruptions...

Linux kernel AMD GPU driver Heap Overflow DoS

The vulnerability of the amdgpuunmapstaticcsa function in the drivers/gpu/drm/amd/amdgpu/amdgpucsa.c file of the Linux kernel’s Direct Rendering Infrastructure DRI AMD GPU driver is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system failure...

D-Link DCS-932L IP camera software Arbitrary Command Execution

The vulnerability of the setSystemWizard and setSystemControl functions in D-Link DCS-932L IP cameras exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PROTECH System Privilege Escalation

The system’s vulnerability for analysis and monitoring of PROTECH production exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain increased privileges...

Alerts & IRM Platform Disclosure

The vulnerability of the Alerts & IRM platform’s notification service for monitoring and surveillance in Grafana relates to insufficient protection of operational data when connected to the DingDing contact point. Exploiting this vulnerability can allow a malicious actor to disclose protected...

Yandex Music

...

Consul Service Configuration Unvalidated Security Restriction Bypass

The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an unvalidated returned value. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions from a remote location...

HashiCorp Vault Storage Bypass Authentication

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to bypass authentication processes...

Unified Audit Oracle Database Server Access Disclosure

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to read, modify, and delete data...

Sensedia API Platform Tools Jenkins Unencrypted Token Storage

The vulnerability of the Sensedia Api Platform tools for Jenkins servers relates to the storage of tokens in an unencrypted form within the file com.sensedia.configuration.SensediaApiConfiguration.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...

Sherpa Orchestrator XSS

The vulnerability of the Sherpa Orchestrator component of the Sherpa RPA process automation platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS scripting across sites by sending specially crafted...

Adobe Illustrator Buffer Overflow RCE

The vulnerability of Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

PDF Reader Heap Buffer Overflow Privilege Escalation

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow...

ABB RMC-100 MQTT Protocol DoS

The vulnerability of the MQTT protocol implementation in the web interface of the microprogramming-based controllers ABB RMC-100 and RMC-100-LITE lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

Public Update Page Privilege Escalation

The vulnerability of the Public Update Page component in microprogramming software for Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privilege...

WISE-4010LAN JTAG Firmware Modification

The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to access control deficiencies. Exploiting this vulnerability can allow attackers to implant or modify the firmware...

Belkin Wi-Fi range expansion software DoS

The vulnerability of the formBSSetSitesurvey function /goform/formBSSetSitesurvey of the Wi-Fi range extender software by Belkin F9K1122 is caused by buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

HarmonyOS PDF Preview DoS

The vulnerability of the PDF Preview module in the HarmonyOS operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

HarmonyOS PDF Preview DoS

The vulnerability of the PDF Preview module in the HarmonyOS operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

HarmonyOS Stack Buffer Overflow DoS

The vulnerability of the HarmonyOS operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel Pageattr Component DoS

The vulnerability of the pageattr.c component in the Linux operating system’s kernel is related to the use of blocking code in a single-threaded, non-blocking context. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/regulator/rtq2208-regulator.c DoS

The vulnerability of the drivers/regulator/rtq2208-regulator.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

Totolink A3002R FormWlanMultipleAP Code Execution

The vulnerability of the formWlanMultipleAP function in the microprogramming software of the Totolink A3002R router is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Freescale Linux enetc_clear_bdrs Buffer Overflow

Vulnerability of the enetcclearbdrs function in the drivers/net/ethernet/freescale/enetc/enetc.c module – The driver for supporting Ethernet adapter devices in the Freescale Linux operating system has a vulnerability that leads to uncontrolled resource consumption. Exploiting this vulnerability...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

WAGO Device Manager Unauthorized Access

The vulnerability of the WAGO Device Manager software for configuring and parameterizing controllers is related to errors in configuring CORS policies. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the file system by sending specially crafted requests...

Termide Virtual Desktops Connection Manager Disclosure

The vulnerability of the “Termide Virtual Desktops Connection Manager” software suite is related to deficiencies in the testing mechanisms for integrations. Exploiting this vulnerability allows a malicious actor to disclose sensitive information...

Polarion ALM DOCX Import File Read

The vulnerability of the DOCX import function in the Polarion ALM application lifecycle management software is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

Dell PowerProtect Cyber Recovery Information Disclosure

The vulnerability of Dell PowerProtect Cyber Recovery’s data storage and protection software lies in the exposure that occurs during data transmission. Exploiting this vulnerability can allow an attacker operating remotely to expose the protected information...

Linux dmaengine DoS

The vulnerability of the dmaengine kernel component in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the property.c component in the Linux operating system’s kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

WAVLINK QUANTUM D2G Plugin Code Execution

The vulnerability of the syslogin function in the /cgi-bin/login.cgi script of the WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3, and WL-WN576K1 routers is related to the copying of buffers without checking the size of the input data during the processing of the loginpage...

Atheros Wireless DoS

The vulnerability of the ath12kstationassoc function in the Atheros/Qualcomm wireless adapter support driver for Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Monitouch V-SFT VS6EditData!VS4_SaveEnvFile Heap Buffer Overflow Privilege Esc

The vulnerability of the VS6EditData!VS4SaveEnvFile function of the HMI configuration software for Monitouch V-SFT lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

DRI driver Heap Buffer Overflow DoS

The vulnerability of the dcdmubsrvcmdrunlist function in the DRI driver for AMD graphics cards with Linux operating systems is related to the lack of checking the return value. Exploiting this vulnerability can allow an attacker to cause a service failure...

Intel Arc Graphics Processor Uncontrolled Search Path

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software relates to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Moodle course_can_delete_section Privilege Bypass

The vulnerability of the coursecandeletesection function in the virtual learning environment Moodle is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

MySQL Server Replication DoS

The vulnerability of the MySQL Server database management system’s replication component is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

AnyDesk Remote Access Privilege Escalation

Уязвимость программного обеспечения для удалённого доступа и управления AnyDesk связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии до уровня root...

KROON-TM Cryptographic Key Unauthorized Access

The vulnerability of the multi-platform SCADA system KROON-TM is related to the use of a rigidly encrypted cryptographic key for the SSL certificate. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fortinet FortiOS Authentication Bypass

The vulnerability of Fortinet FortiOS operating systems is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to gain access to device configuration information and bypass existing security measures...