92710 matches found
The vulnerability of the cdrom_ioctl_timed_media_change() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cdromioctltimedmediachange function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the microprogramming software of Moxa devices such as EDR-8010, EDR-G9004, EDR-G9010, EDR-G1002-BP, NAT-102 OnCell G4302-LTE4, and TN-4900 stems from the absence of authentication for a critical function. This allows attackers to gain full access to the device’s configuration.
The vulnerability of the microprogramming software in Moxa devices such as EDR-8010, EDR-G9004, EDR-G9010, EDR-G1002-BP, NAT-102 OnCell G4302-LTE4, and TN-4900 lies in the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker operating remotely to...
The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.
The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the OpenSSH cryptographic protection mechanism for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the OpenSSH cryptographic security mechanism for Windows operating systems is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the fromqossetting() function (/goform/qossetting) in the Tenda FH1206 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromqossetting function /goform/qossetting of the Tenda FH1206 router’s microprogramming system is related to the operation that occurs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the fastrpc component in the Linux operating system’s kernel allows for attacks that can affect the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the fastrpc component in the Linux operating system’s kernel is related to a race condition that occurs after memory is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the upgrade_filter_asp function in D-Link DI-8004W router software allows a hacker to execute arbitrary commands.
The vulnerability of the upgradefilterasp function in D-Link DI-8004W router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows a hacker to execute arbitrary code, cause a service failure, or disclose protected information.
The vulnerability of the PDFium PDF-content processor in Google Chrome browser involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, cause service failures, or disclose protected information by sending a...
The vulnerability of the Skia graphic library used by Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.
The vulnerability of the Skia graphic library in Microsoft Edge and Google Chrome exists due to a boundary error in processing untrusted HTML content. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of the WebRTC component in Google Chrome browsers, related to recording beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WebRTC component in the Google Chrome web browser is related to memory corruption beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...
The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in the lack of mechanisms for generating error reports. This allows attackers to gain unauthorized access to protected information.
The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities can allow attackers operating remotely to...
The vulnerability of the OptFeature() function in the objdetect/src/cascadedetect.hpp component of the computer vision algorithm library OpenCV, which involves reading data beyond the allowed buffer limits, allows a malicious actor to cause a service failure.
The vulnerability of the OptFeature function in the objdetect/src/cascadedetect.hpp component of the computer vision library OpenCV involves reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of open-source development environments for UEFI EDK2, related to configuration errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of open-source development environments for UEFI EDK2 is related to configuration errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Netcat module in CMS systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the messaging module in the CMS system Netcat is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to the protected information from the database...
The vulnerability of the Dell Peripheral Manager software relates to an uncontrolled search path element, which allows a perpetrator to escalate their privileges or execute arbitrary code.
The vulnerability of the Dell Peripheral Manager software relates to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code...
The vulnerability of the smc_cdc_tx_handler() function in the net/smc component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the smccdctxhandler function in the net/smc component of the Linux operating system’s kernel is related to kernel errors caused by the race condition in smcsock. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of tools for working with arrays and objects. RobinWeser Fast-Loops platform for event monitoring, threat detection, and security analytics. IBM QRadar Suite and IBM Cloud Pak for Security enable attackers to execute arbitrary code.
The vulnerability of tools for working with arrays and objects in RobinWeser Fast-Loops, as well as in event monitoring, threat detection, and security analytics platforms like IBM QRadar Suite and IBM Cloud Pak for Security, is related to uncontrolled changes in object prototype attributes...
The vulnerability of the sysinfo.cgi script implemented in the Webmin hosting control panel allows a hacker to execute arbitrary scripts.
The vulnerability in the sysinfo.cgi script of the Webmin hosting panel exists because measures are not taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts remotely...
The vulnerability of the GL Accounts component of the Oracle Trade Management software, a part of the Oracle E-Business Suite, allows an attacker to gain unauthorized access to read, modify, or delete data.
The vulnerability of the GL Accounts component of the Oracle Trade Management software, a part of the Oracle E-Business Suite, relates to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data...
The vulnerability of the integrated service module of Dell iDRAC in remote access controllers iDRAC, related to the execution of operations outside the buffer in memory, allows a intruder to execute arbitrary code or cause a service failure.
The vulnerability of the Dell iDRAC Service Module integrated service module controllers in remote access controllers involves an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious individual to execute arbitrary code or cause service failures...
The vulnerability of the Wi-Fi Protected Access Point’s WPA Supplicant, related to an uncontrolled element in the search process, allows attackers to increase their privileges.
The vulnerability of the Wi-Fi WPA Supplicant for secure access clients is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Junos Telemetry Interface interface of Juniper Networks’ Junos OS allows a attacker to cause a service failure.
The vulnerability of the Junos Telemetry Interface interface of Juniper Networks’ Junos OS is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the TIFFReadEncodedStrip function in the LibTIFF library, which allows a hacker to trigger a service failure.
The vulnerability of the TIFFReadEncodedStrip function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Work Definition component in the Oracle Enterprise Asset Management application for enterprise asset management systems within the Oracle E-Business Suite allows a malicious actor to gain unauthorized access to read, modify, or delete data.
The vulnerability of the Work Definition component in the Oracle Enterprise Asset Management application for enterprise asset management is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to rea...
The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause a service failure
The vulnerability of the InnoDB component in the MySQL Database Management System is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures using the MySQL protocol...
The vulnerability of the software for detecting vulnerabilities and errors in PT Application Inspector, due to improper checking of query parameters, allows a perpetrator to execute arbitrary code.
The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to improper checking of query parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to trigger a service failure.
The vulnerability of the Oracle Solaris operating system’s file system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the mp_unescape03() function in the Mplayer media player, related to writing beyond the memory boundaries, allows a hacker to cause a service failure.
The vulnerability of the mpunescape03 function in the Mplayer media player is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems allows a perpetrator to escalate their privileges.
The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems stems from an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the NVIDIA GPU Display Driver relates to the execution of operations beyond the buffer boundaries in memory. This allows an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause system failures.
The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrar...
The vulnerability of Clang’s tooling interface for developing, optimizing, and compiling software using the LLVM framework allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of Clang’s toolset for developing, optimizing, and compiling software involves an operation that occurs outside the buffer in memory when processing LR registers, due to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code o...
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software lies in the use of cookies for storing confidential information without the HttpOnly flag. This allows a hacker to disclose the protected information.
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software relates to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows a perpetrator to execute arbitrary code on the target system.
The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially created HTML page...
The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...
The vulnerability of the unflattendtnodes() function in the Linux kernel’s Device Tree driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the unflattendtnodes function in the drivers/of/fdt.c module of the Linux kernel’s Device Tree driver is related to a single-issue error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the br_nf_local_in() function in the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the brnflocalin function in the net/bridge/brnetfilterhooks.c module of the Linux kernel’s netfilter component is related to improper handling of packets. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the platform for monitoring, managing, and improving LLM applications arises from the lack of a password recovery mechanism, allowing attackers to use the token for repeatedly changing user passwords.
The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows an attacker who operates remotely to use the token for repeatedly changing user passwords...
The vulnerability of the postx_presets_callback() function in the PostX plugin of the WordPres content management system allows a hacker to escalate their privileges and gain access to read, modify, or delete data.
The vulnerability of the postxpresetscallback function in the PostX plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges and gain access to read, modify,...
The vulnerability of the Remote_help-cgi file in the microprogramming software for network storage devices Zyxel NAS326 and NAS542 allows a intruder to execute arbitrary code.
The vulnerability of the Remotehelp-cgi file in the microprogramming software for network storage devices Zyxel NAS326 and NAS542 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor ...
The vulnerability of TP-Link Archer C5400X(EU) Wi-Fi routers’ microprogramming software lies in the lack of measures taken to clean data at the control level. This allows attackers to execute arbitrary commands with elevated privileges.
The vulnerability of TP-Link Archer C5400XEU Wi-Fi routers’ microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with elevated privileges...
The vulnerability of Omron CX-Programmer software, which involves reading beyond the buffer in memory, allows a malicious actor to cause an unexpected termination of the application or expose protected information.
The vulnerability of Omron CX-Programmer software for programming logic controllers is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or expose sensitive information through a specially...
The vulnerability of the Windows RRAS operating system’s routing and remote access service, related to numerical truncation errors, allows a hacker to execute arbitrary code.
The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to numerical truncation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the mtk_spi_interrupt() function in the drivers/spi/spi-mt65xx.c file of the Mediatek SPI kernel for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mtkspiinterrupt function in the drivers/spi/spi-mt65xx.c file of the Mediatek SPI kernel for the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Windows operating system’s DNS server allows a hacker to execute arbitrary code.
The vulnerability of the Windows operating system’s DNS server is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Tutor LMS plugin for the WordPress content management system allows a hacker to execute arbitrary SQL queries and gain unauthorized access to protected information.
The vulnerability of the Tutor LMS plugin for the WordPress content management system is related to the lack of protection for the SQL query structure when processing the questionid parameter. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries and gain unauthorized...
Vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to memory usage after memory is released, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft’s software platforms, such as the .NET Framework, .NET, and Microsoft Visual Studio, relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system allows a hacker to execute arbitrary commands on behalf of the dbus user.
The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicious acto...
The vulnerability of the secondscreen.gateway service on the LG WebOS operating system for LG TVs allows a hacker to create a privileged user account.
The vulnerability of the secondscreen.gateway service on the LG WebOS operating system for LG TVs involves exploiting a authentication mechanism by modifying configuration settings. Exploiting this vulnerability allows an attacker to create a privileged user account remotely...
The vulnerability of the CampaignEvents extension of the software platform for implementing the hypertext environment of MediaWiki allows a hacker to perform cross-site scripting attacks.
The vulnerability of the CampaignEvents extension of the software for implementing the hypertext environment in MediaWiki is related to improper input validation during the creation of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...
The vulnerability of the decode_uncompressed_image() function, a decoder and file format encoder for the libheif library, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the decodeuncompressedimage function, a decoder and file format encoder for the libheif library, is related to a segmentation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...