98239 matches found
SAP NetWeaver AS ABAP Authentication Bypass Privilege Escalation
The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to deficiencies in the authentication process due to incorrect processing of user information via RFC messages, thereby compromising the security between SAP systems. Exploiting this vulnerability...
RUGGEDCOM ROX MX5000 Unauthorized Access
The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 is related to the use of an unreliable cryptographic algorithm. Exploiting this vulnerability can allow an unauthorize...
VMware SD-WAN Edge Web Interface Bypass
The vulnerability of the web interface of microprogramming software in VMware SD-WAN Edge devices is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain read, modify, or delete access to data by downloading the...
SAP S/4HANA Manage Journal Entry Template Access Disclosure
The vulnerability of the Manage Journal Entry Template component of the SAP S/4HANA software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to files...
operating systems for managing Privilege Escalation
The vulnerability of operating systems for managing cloud applications related to Sealos stems from deficiencies in authentication procedures due to the use of Role-Based Access Control RBAC policies. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full...
Autodesk 3dsMax Code Execution
The vulnerability of the software for 3D modeling, animation, and visualization in Autodesk 3dsMax is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SKP format file...
D-Link DIR-601 Router Bypass
The vulnerability of D-Link DIR-601 router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
Google Chrome Microsoft Edge Code Execution
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Rockwell Automation ThinManager Encryption Weakness
The vulnerability of the application software interface of Rockwell Automation’s ThinManager platform relates to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to compromise the target system remotely...
D-Link DIR-615 XSS
The vulnerability of the D-Link DIR-615 T1 network device’s microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
D-Link DIR-550A Router Privilege Escalation
The vulnerability of D-Link DIR-550A and DIR-604M router microprogramming software is related to insecure resource initialization. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
Essential Addons Plugin Privilege Escalation
The vulnerability of the Essential Addons plugin for Elementor, a content management system for WordPress, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
HMI/SCADA CONPROSYS HMI Plaintext Storage Unauthorized Access
The vulnerability of HMI/SCADA CONPROSYS HMI lies in the storage of account data in plain text. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
MalwareFox AntiMalware drivers Privilege Escalation
The vulnerability of the zam64.sys and zam32.sys drivers in the MalwareFox AntiMalware software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Juniper Networks’ Junos OS Evolved Privilege Escalation
The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to modify existing files or execute arbitrary commands on behalf of the user...
VMware Aria Operations Monitoring Tool Code Execution
The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-LINK DIR-300 Router Data Compromise
The vulnerability of the /model/langmsg.php microprogrammed software in D-LINK DIR-300 routers is related to incorrect external control of file names or files. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
D-Link DIR-2150 Router Code Execution
The vulnerability of the SetNTPServerSettings function in the application software interface of D-Link DIR-2150 router microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
ARIS controller Resource Exhaustion DoS
The vulnerability of the built-in software of the ARIS controller is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted network packet...
ksmbd Module Code Execution
The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the SMB2SESSIONSETUP command...
SetAccessPointMode.php Arbitrary Command Execution
The vulnerability of the SetAccessPointMode.php script in D-Link router microprogramming software such as DIR-822 Rev.B, DIR-822 Rev.C, DIR-860L Rev.B, DIR-868L Rev.B, DIR-880L Rev.A, and DIR-890L Rev.A exists due to the failure to take measures to neutralize the special elements used in the...
GRUB Code Execution
The vulnerability of the GRand Unified Bootloader GRUB in Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 9000 Series is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Libde265 Heap Buffer Overflow DoS
The vulnerability of the ffhevcputhevcqpelpixels8sse function in the H.265 Libde265 video codec implementation is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...
QEMU RDMA Hardware Emulation Data Compromise
The vulnerability of the RDMA hardware emulation device implemented by QEMU is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...
Arris Router Code Execution
The vulnerability of the microprogrammed software of Arris routers such as TG2482A, TG2492, and SBG10 is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted request...
WebAdmin Cyber Threats Arbitrary Command Execution
The vulnerability of the WebAdmin component in the hardware-software security system for handling network threats, Sophos SG UTM Unified Thread Management, is related to the failure to take measures to neutralize specific elements used in operating system processes. Exploiting this vulnerability...
NGINX DoS
The vulnerability of the NGINX software-based Discourse mailing list management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
S3 API Unauthenticated File Read
The vulnerability in the swift/common/middleware/s3api/etree.py file of the S3 API interface for distributed object storage systems in Swift is related to the use of files and directories accessible to external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized...
iSNS Windows Unauthorized Access
The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
Microsoft .NET Framework Code Execution
The vulnerability of Microsoft .NET Framework and .NET software platforms is related to insufficient protection of sensitive data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code...
Azure Data Box Gateway Code Execution
The vulnerability of the Azure Data Box Gateway is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
BIG-IP DoS
The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...
Protected Extensible Authentication Protocol Code Execution
The vulnerability of the Protected Extensible Authentication Protocol PEAP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Adobe Experience Manager Code Execution
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created link...
Windows kernel Privilege Escalation
The vulnerability of Windows operating system kernels is related to insufficient validation of input data during object processing. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Windows Sysmon Privilege Escalation
The vulnerability of the Microsoft Windows Sysmon system service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the malidpcrtcreset function in the Linux kernel’s drivers/gpu/drm/arm/malidpcrtc.c file is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...
Linux fbdev SMSCUFX DoS
The vulnerability in the driver/driver/video/fbdev/smscufx.c file of Linux operating systems is related to the state of the race when a USB device is detected during the call to open. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux driver SYNCLINK_CS DoS
The vulnerability in the drivers/char/pcmcia/synclinkcs.c file of Linux operating systems is related to the behavior during the removal of a PCMCIA device when the ioctl function is called. Exploiting this vulnerability could allow an attacker to cause a service failure...
httpd daemon Code Execution
The vulnerability of the httpd daemon in the NETGEAR R7000P router’s embedded software is related to buffer overflow errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the wandns1sec parameter...
DesignReview.exe Code Execution
The vulnerability of the implementation of the executable file DesignReview.exe of the Autodesk Design Review software for applying electronic annotations is related to writing beyond the buffer boundaries during the processing of .dwf or .pct format files. Exploiting this vulnerability can allow...
Hirschmann BAT-C2 Web Interface Code Execution
The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
Policykit Output Encoding
The vulnerability of the software platform for managing administrative policies and privileges related to Policykit lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...
Microsoft Windows Sysmon Privilege Escalation
The vulnerability of the Microsoft Windows Sysmon system service is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
Cisco AsyncOS DoS
The vulnerability of the Cisco AsyncOS operating system in the Cisco Email Security Appliance ESA security system is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by establishing a large number o...
CorelDRAW Graphics Suite Buffer Overflow
The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor lies in the reading of data beyond the buffer boundaries in memory during the syntax analysis of EMF files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created...
Cisco Email Security Appliance CRLF Response Splitting
The vulnerability of the Cisco Email Security Appliance’s security system and the Cisco Secure Email and Web Manager devices relates to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious actor to perform attacks by splitting HTTP responses using...
Cisco AsyncOS Privilege Escalation
The vulnerability in the web interface for managing the Cisco AsyncOS operating system of the Cisco Email Security Appliance ESA, the Cisco Secure Email and Web Manager, and the Cisco Secure Web Appliance formerly Cisco Web Security Appliance WSA relates to the use of a hard-coded cryptographic...
FortiClient NAC OS Code Execution
The vulnerability of the FortiOS operating system’s FortiClient NAC fcnacd is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by sending a specially crafted request...
Redis XAUTOCLAIM Code Execution
The vulnerability of the XAUTOCLAIM command in the Redis database management system is related to a numerical overflow when processing the COUNT argument. Exploiting this vulnerability can allow an attacker to execute arbitrary code...