C-more Programming Software Buffer Overflow

The vulnerability of the C-more Programming Software for programming and configuring sensor panels EA9 Series is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created EAP9 format files...

FortiWeb web applications Network Firewall Bypass Command Execution

The vulnerability of FortiWeb web applications’ network firewalls is related to the improper processing of syntaxically incorrect structures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands by sending specially crafted HTTP/S...

IPP DoS

The vulnerability of the Internet Printing Protocol IPP implementation in microprogrammed multifunctional devices like HP LaserJet MFP is related to improper handling of unexpected types of data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending...

Microsoft Office Memory Use After Free Code Execution

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerability eliminated

...

Linux kernel IPMB Dev Int RCE

The vulnerability of the rtlpciprobe function in the driver drivers/char/ipmi/ipmbdevint.c of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

clpctlWrapper Privilege Escalation

The vulnerability of the clpctlWrapper command in the server and CloudPanel management panel is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability can allow attackers to increase their privileges...

PDF-XChange Editor Heap Buffer Overflow

The vulnerability of PDF-XChange Editor, a program for viewing and editing PDF documents, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created U3D file...

Tenda AC10 setSchedWifi() Code Execution

The vulnerability of the setSchedWifi function in the Tenda AC10 router’s microprogramming software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failur...

Telnet Protocol Information Disclosure

The vulnerability of the Telnet protocol implementation for the MIR KT-51 controller and the MIR controller configuration software is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Mongoose Library SQL Injection

The vulnerability of the Mongoose library relates to the lack of protection for the SQL query structure when the $where operator is used. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain access to read and modify data...

HP LaserJet Printer Buffer Overflow Privilege Escalation

The vulnerability of Microprogrammed Software in HP LaserJet Pro, EHP LaserJet Enterprise, and HP LaserJet Managed printers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges by sending data in...

Hickory DNS DNSSEC Bypass Unauthorized Access

The vulnerability of the verifydnskeyrrset function in the Hickory DNS client formerly Trust-DNS is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected informati...

microprogramming software CSRF

The vulnerability of the web interface of microprogramming software for programmable logic controllers SIMATIC S7-1200 is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to execute a CSRF attack remotely...

PowerChute DoS

The vulnerability in the software web interface for controlling power supply units like PowerChute Serial Shutdown is related to improper authentication. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...

Online Store Platforms XSS

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows attackers to perform...

D-Link DIR-816A Router Code Execution

The vulnerability of the form2WlanBasicSetup.cgi microprogramming system of the D-Link DIR-816A2 router is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTP POST request...

Accounts Component Unauthorized Access

The vulnerability of the Accounts component in MacOS, iOS, and iPadOS is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

python-multipart parser Regular Expression DoS

The vulnerability of the python-multipart streaming multi-component parser is related to insufficient input validation when processing the HTTP header “Content-Type” value using regular expressions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

i2c Component DoS

The vulnerability of the i2c component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel TTY driver Privilege Escalation

The vulnerability of the gsmdlciconfig function in the TTY driver drivers/tty/ngsm.c of the Linux kernel is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Elasticsearch Authorization Access

The vulnerability of the Elasticsearch search engine is related to incorrect authentication. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

VSP Elevation Privilege Escalation

The vulnerability of the VSP Elevation function in the hardware virtualization layer of Windows Hyper-V operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

IBM Cognos Controller Error Report Unauthorized Access

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...

AMD Secure Processor Input Validation

The vulnerability of AMD Secure Processor ASP microprogramming software relates to improper validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cisco Common Services Platform Collector XSS

The vulnerability in the web interface for collecting device information on Cisco Common Services Platform Collector CSPC is related to the failure to remove unacceptable symbols from identifiers on web pages. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...

Netis Wi-Fi Router Disclosure

The vulnerability of the web-based management interfaces for Netis microprogramming systems, including Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360, is related to insufficient protection for sensitive data. Exploiting this...

SonicOS SSL VPN Unauthorized Access

The vulnerability of the SSL VPN remote access technology implemented on SonicOS operating systems is related to the use of a insecure random number generator program. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

Cisco Crosswork Network Controller XSS

The vulnerability in the web interface of the Cisco Crosswork Network Controller CNC management interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Netis Wi-Fi Router Privilege Escalation

The vulnerability of the web-based management interfaces for Netis microprogramming systems, including Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360, lies in the ability to read data beyond the permitted range in memory. Exploitin...

bcachefs ioctl Heap Buffer Overflow DoS

The vulnerability of the bch2ioctlsubvolumecreate function in the fs/bcachefs/fs-ioctl.c module of the bcachefs component of the Linux operating system is related to a crash due to repeated resource blocking. Exploiting this vulnerability could allow an attacker to cause service failures...

PwnDoc Asynchronous Interface DoS

The vulnerability of the asynchronous interface function of the PwnDoc automation tool for generating report documents is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Fortinet FortiClient Unauthorized Access

The vulnerability of the Fortinet FortiClient security device’s VPN component lies in the fact that confidential information is stored in unencrypted form in its memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

Intel Core Ultra Processor DoS

The vulnerability of Intel Core Ultra microprogramming software is related to the locking of the processor due to discrepancies between the instruction set architecture ISA and the processor’s logic. Exploiting this vulnerability can allow an attacker to cause a service failure...

MediaTek Heap Buffer Overflow

The vulnerability of MediaTek’s microprogramming software lies in the fact that operations are performed outside the buffer in memory when processing DA files. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel Advanced Link Analyzer Privilege Escalation

The vulnerability of the Intel Advanced Link Analyzer, a tool for analyzing and optimizing network connections, is related to errors in privilege assignment. Exploiting this vulnerability can allow attackers to enhance their privileges...

VMware Aria Operations Privilege Escalation

The vulnerability of the monitoring tool for VMware Aria Operations is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...

SINEC INS Session Management

The vulnerability in the web interface for managing SINEC INS software-related network infrastructure is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to maintain a session after deleting the account...

Siemens Solid Edge Buffer Overflow

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PAR file...

SCALANCE M-800 Path Traversal

The vulnerability of microprogrammed software in industrial routers of the SCALANCE M-800 family including S615, MUM-800, and RM1224 is related to incorrect restrictions on path names in the limited-access catalog. Exploiting this vulnerability can allow a malicious actor to influence the integri...

Siemens Tecnomatix Plant Simulation Buffer Overflow

The vulnerability of the software environment for simulation modeling of systems and processes in Siemens Tecnomatix Plant Simulation lies in the issue of buffer overflow attacks. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created WRL files...

Google Chrome Views Escape Isolated Environment

The vulnerability of the Views component in Google Chrome is related to improper implementation. Exploiting this vulnerability can allow an attacker to escape from a isolated environment using a specially crafted HTML page...

Adaptive Substance 3D Painter Buffer Overflow

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

Portal for ArcGIS XSS

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created web page...

Linux DRM AMD Display Kernel DoS

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to the assignment of the NULL pointer in the edpsetreplayallowactive function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

Linux serial kernel DoS

The vulnerability of the Linux operating system’s serial kernel component is related to the assignment of the NULL pointer in the function uartttyportshutdown. Exploiting this vulnerability can allow an attacker to cause a service failure...

ASMKERN228A.dll ASMdatax229A.dll AutoCAD Code Execution

The vulnerability of the ASMKERN228A.dll and ASMdatax229A.dll libraries, which are software for simulation, design, and drafting in AutoCAD, exists due to a boundary error in processing unreliable input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Node.js fs.mkdtemp Arbitrary Directory Creation

The vulnerability of the fs.mkdtemp and fs.mkdtempSync methods in the Node.js software platform is related to incorrect path name restrictions for restricted-access directories. Exploiting this vulnerability could allow an attacker to create arbitrary directories remotely...

NuPoint Unified Messaging Privilege Escalation

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to increase their privileges...

D-Link DIR-605L Router Form Set Domain Filter XSS

The vulnerability of the formSetDomainFilter function /goform/formSetDomainFilter of the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...