92710 matches found
The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary code with root user privileges.
The vulnerability of the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root user privileges...
The vulnerability of the DCRegister function in the SoftEther VPN client allows a hacker to cause a service failure.
The vulnerability of the DCRegister function in the SoftEther VPN client involves executing a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability in the Apache Kafka cluster management web interface, kafka-ui, allows a attacker to execute arbitrary code.
The vulnerability in the Apache Kafka cluster management web interface, named “kafka-ui”, is related to incorrect code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by using a specially crafted request to the endpoint...
The vulnerability of the microprogrammed control units Saho ADM100 and ADM-100FP lies in the possibility of unlimited loading of dangerous files, allowing a intruder to execute arbitrary commands.
The vulnerability of the microprogrammed control units Saho ADM100 and ADM-100FP lies in the ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely by introducing specially crafted files...
The vulnerability of the SolarWinds Access Rights Manager software relates to the possibility of bypassing the restricted access catalog, allowing a violator to execute arbitrary code.
The vulnerability of the SolarWinds Access Rights Manager ARM software relates to the possibility of bypassing the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the command-line interface of the Cisco Identity Services Engine (ISE) management platform allows a hacker to increase their privileges.
The vulnerability of the command-line interface of the Cisco Identity Services Engine ISE management platform relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the correctMkdir component in the npm package manager allows a attacker to circumvent existing security restrictions.
The vulnerability of the correctMkdir component in the npm package manager is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
The vulnerability of the packet-filtering filter in TC Flower software for multi-level switches like Open vSwitch (OvS) allows a hacker to cause a service failure.
The vulnerability of the packet-based flow control filter in TC Flower software multi-level switches like Open vSwitch OvS is related to deficiencies in handling exceptional states due to incorrect processing of packet metadata by Geneve. Exploiting this vulnerability can allow an attacker to cau...
The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to gain unauthorized access to any arbitrary page.
The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to any arbitrary page...
The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools used in production lines allows a intruder to gain unauthorized access to the database.
The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...
The vulnerability of the Rapid SCADA system, related to the use of open redirection, allows a hacker to redirect a user to any arbitrary URL address.
The vulnerability of the SCADA system Rapid SCADA is related to the use of open redirection as a result of incorrect data cleaning on the user input page. Exploiting this vulnerability allows an attacker to redirect the user to any desired URL address...
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesPrevValueLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrar...
The vulnerability of the RGXUnbackingZSBuffer() function in the PowerVR GPU driver for Android and ChromeOS systems allows attackers to exploit their privileges.
The vulnerability of the RGXUnbackingZSBuffer function in the PowerVR GPU driver for Android and ChromeOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesTimeLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary cod...
The vulnerability of the Jenkins GitLab Branch Source Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to confidential information.
The vulnerability of the Jenkins GitLab Branch Source Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...
The vulnerability of microprogrammed software in network video recorders like SystemK NVR 504/508/516 arises from the lack of measures taken to clean data at the control level. This allows intruders to execute arbitrary commands.
The vulnerability of microprogrammed network video recorders like SystemK NVR 504/508/516 lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an intruder operating remotely to execute arbitrary commands...
The vulnerability of the loginAuth function (/cgi-bin/cstecgi.cgi) in the Totolink N350RT router software allows a hacker to execute arbitrary code.
The vulnerability of the loginAuth function /cgi-bin/cstecgi.cgi in the Totolink N350RT router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Spreadsheet::ParseExcel library for working with XLS files lies in its inability to eliminate instructions in dynamically executed code, allowing attackers to execute arbitrary code.
The vulnerability of the Spreadsheet::ParseExcel library for working with XLS files is related to the lack of measures taken to eliminate instructions in the dynamically executed code. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the icmpping function in the universal monitoring system Zabbix allows a intruder to execute arbitrary code.
The vulnerability of the icmpping function in the Zabbix universal monitoring system is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the `build_open_gop_key_points` function in the `libavformat/mov.c` component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the buildopengopkeypoints function in the libavformat/mov.c component of the multimedia library FFmpeg is related to integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the Apache OFBiz resource planning software lies in its incorrect code generation management, allowing attackers to execute arbitrary code.
The vulnerability of the Apache OFBiz resource planning software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerabilities of the OPC-server software products such as KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, ThingWorx Kepware Edge, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, and Software Toolbox TOP Server are related to errors in the certificate validation process. These vulnerabilities allow attackers to bypass the certificate validation checks.
The vulnerabilities of the OPC-server software products such as KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, ThingWorx Kepware Edge, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, and Software Toolbox TOP Server are...
Vulnerability of the MySQL Server component of the database management system: This component allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Object Attribute Handler component in the cross-platform FTP server CrushFTP allows a hacker to execute arbitrary code.
The vulnerability of the Object Attribute Handler component in the cross-platform FTP server CrushFTP is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests containing AS2 headers...
The vulnerability of the xtrans_interpolate function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the xtransinterpolate function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to...
The vulnerability of the JWT implementation in Python PyJWT, related to the use of cryptographic algorithms containing defects, allows attackers to compromise the integrity of the data.
The vulnerability of the JWT implementation in Python PyJWT is related to the absence of blocking for certain formats of the secret key. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...
The vulnerability of the `brcmfmac/cfg80211.c` file within the wireless communication driver module `brcm80211` in the `drivers/net/wireless/broadcom` directory of the Linux kernel allows a malicious actor to cause a system failure.
The vulnerability of the brcmfmac/cfg80211.c file within the wireless communication driver module brcm80211 in the drivers/net/wireless/broadcom directory of the Linux kernel is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the PDF component in the Google Chrome web browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created PD...
The vulnerability of the Check Email function in the OpenCATS workforce management system allows a hacker to perform cross-site scripting attacks.
The vulnerability of the Check Email function in the OpenCATS workforce management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the email parameter...
The vulnerability of the dompdf library in the PDF Generator plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.
The vulnerability of the dompdf library in the PDF Generator plugin of the WordPress content management system is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
The vulnerability of the LinuxASMCallGraph software development tool, related to the unlimited loading of dangerous files, allows a hacker to execute arbitrary code.
The vulnerability of the LinuxASMCallGraph graph-building software lies in the ability to download unlimited quantities of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading a specially created ZIP file remotely...
The vulnerability of the Connectivity Fault Management function in Juniper Networks’ Junos OS-based MX routers allows a attacker to cause a service failure.
The vulnerability of the Connectivity Fault Management CFM function in Juniper Networks’ Junos OS routers of the MX series is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the Samba networking communication package lies in the overflow of buffers in dynamic memory, allowing an attacker to cause a service failure.
The vulnerability of the Samba networking communication package is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Routing Protocol Demon (RPD) in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved operating systems allows a attacker to cause a service failure.
The vulnerability of the Routing Protocol Data RPD in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of Siemens Solid Edge, a design and modeling tool, relates to the use of an uninitialized pointer, allowing an attacker to execute arbitrary code.
The vulnerability of Siemens Solid Edge’s design and simulation tools is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow attackers to execute arbitrary code using specially created PAR files...
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created DWG files...
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing attackers to disclose protected information.
The vulnerability of Siemens Solid Edge’s design and modeling tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow attackers to disclose sensitive information using specially created STL files...
The vulnerability of the DestroyWindow function in the xorg-x11-server package allows a hacker to trigger a service failure.
The vulnerability of the DestroyWindow function in the xorg-x11-server package is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, and Adobe Acrobat 2017 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting...
The vulnerability of the Downloads component of the Google Chrome browser, which allows attackers to perform spear-phishing attacks
The vulnerability of the Downloads component of the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...
The vulnerability of the `update_read_cache_bitmap_v3_order` function in the RDP client FreeRDP allows a hacker to trigger a service failure.
The vulnerability of the updatereadcachebitmapv3order function in the RDP client FreeRDP is related to a memory reclamation error. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Threat Intelligence service of the Nozomi Guardian detection and monitoring network activity tool, as well as the Nozomi Central Management Console (CMC) – a centralized security management tool – allows attackers to carry out cross-site scenario attacks.
The vulnerability of the Threat Intelligence service of the Nozomi Guardian detection and monitoring network activity tool, as well as the Nozomi Central Management Console CMC, relates to the lack of protective measures taken for the web page structure during the processing of threat analysis...
The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a intruder to execute arbitrary code.
The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster is related to the execution of operations outside the buffer in memory when processing XML data. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the hybrid cloud management platform Acronis Cloud Manager lies in insufficient validation of input data, allowing arbitrary commands to be executed.
The vulnerability of Acronis Cloud Manager, a platform for managing hybrid clouds, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...
The vulnerability of the ArgoCD repo-server component of the GitOps continuous delivery tool for Kubernetes Argo CD allows a attacker to trigger a service failure.
The vulnerability of the ArgoCD repo-server component of the GitOps continuous delivery tool for Kubernetes Argo CD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the graphical interface of FortiOS operating systems and the proxy server used for protecting against Internet attacks, FortiProxy, arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute arbitrary JavaScript code.
The vulnerability of the graphical interface of FortiOS operating systems and the proxy server used for protecting against Internet attacks FortiProxy exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute...
The vulnerability of the handle_interface_acl function in Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the handleinterfaceacl function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the set_qos function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...