92710 matches found
The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to perform cross-site scripting attacks.
The vulnerability of the web interface of microprogramming software for routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 arises from the lack of protection for the web page structure during the processing of the getelements parameter...
The vulnerability of the function com.imc.iview.utils.CUtils.checkSQLInjection() in the system for centralized control of network devices and ports of Advantech iView allows a attacker to execute arbitrary SQL commands.
The vulnerability of the com.imc.iview.utils.CUtils.checkSQLInjection function in the system for managing network devices and ports of Advantech iView is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...
The vulnerabilities of SAP Plant Connectivity and Production Connector software components, which are used for managing production operations and processes in SAP Digital Manufacturing, allow attackers to execute arbitrary code.
The vulnerability of SAP Plant Connectivity and Production Connector software components, which are used for managing production operations and processes in SAP Digital Manufacturing, stems from the lack of authentication for a critical function. Exploiting this vulnerability could allow an...
The vulnerability of the clearAlertByIds function in the system for managing, diagnosing, and optimizing the operation of network devices. The ProSafe Network Management NMS300 allows a hacker to increase their privileges.
The vulnerability of the clearAlertByIds function in the system for managing, diagnosing, and optimizing network device operations is related to the lack of protection for the SQL query structure. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of Google Chrome’s Picture In Picture technology, which allows hackers to carry out phishing attacks
The vulnerability of Google Chrome’s Picture In Picture technology is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to conduct phishing attacks using a specially created HTML page...
The vulnerability of the Jenkins server plugin “Dimensions” in automation tools stems from insufficient protection of service data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Jenkins server plugin “Dimensions” relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the backtrack_insn() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the backtrackinsn function in the kernel/bpf/verifier.c module of the Linux operating system is related to calls outside of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the Bad plugin (gst-plugins-bad) in the Gstreamer multimedia framework allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.
The vulnerability of the Bad gst-plugins-bad plugin in the Gstreamer multimedia framework is related to insufficient protection of service data due to the absence of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability in the isolated iframe of the Google Chrome browser allows a perpetrator to circumvent existing restrictions on file downloads.
The vulnerability in the isolated iframe environment of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on file downloads by using a specially created HTML page...
The vulnerability of the 6LoWPAN kernel driver of the RIOT operating system, which allows a hacker to cause a service failure.
The vulnerability of the 6LoWPAN kernel in the RIOT operating system’s graphics driver relates to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router software allows a hacker to execute arbitrary code.
The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router software allows a hacker to execute arbitrary code.
The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
The vulnerability of the ABB eSOMS software for managing production processes allows a hacker to expose accounting data for authentication purposes and carry out clickjacking attacks.
The vulnerability of the ABB eSOMS production process management software lies in the absence of the X-Frame-Options header in HTTP responses. Exploiting this vulnerability allows a remote attacker to obtain authentication credentials and perform clickjacking attacks...
The vulnerability of the Teltonika RMS remote management system lies in the fact that enabling the web function from an unreliable source allows a perpetrator to disclose sensitive information and execute arbitrary codes.
The vulnerability of the Teltonika RMS Remote Management System relates to the activation of the web function from an unreliable source. Exploiting this vulnerability allows a malicious actor to disclose sensitive information and execute arbitrary code using a specially crafted web page...
The vulnerability of the command-line interface (CLI) of microprogramming software for Cisco TelePresence Collaboration Endpoint devices and Cisco RoomOS operating systems, related to access control deficiencies, allows a perpetrator to rerecord arbitrary files.
The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint devices and Cisco RoomOS operating systems is related to access control deficiencies. Exploiting this vulnerability could allow a attacker to re-record arbitrary files...
The vulnerability of the /goform/formTcpipSetup component in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the /goform/formTcpipSetup component in D-Link DIR-605L router microprogramming software exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the application software interface of D-Link DIR-2150 router software allows a hacker to circumvent existing security restrictions.
The vulnerability of the application software interface for D-Link DIR-2150 routers is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server component, specifically the Security: Privileges section of the Oracle MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL...
The vulnerabilities of D-Link DIR-550A and DIR-604M router microprogramming software allow attackers to enhance their privileges.
The vulnerability of D-Link DIR-550A and DIR-604M router microprogramming software is related to insecure resource initialization. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
The vulnerability of the drivers zam64.sys and zam32.sys in the MalwareFox AntiMalware antivirus software allows a hacker to gain increased privileges.
The vulnerability of the zam64.sys and zam32.sys drivers in the MalwareFox AntiMalware software is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to enhance their privileges...
The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to deficiencies in authentication procedures, allows attackers to execute arbitrary commands.
The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary commands using the sysmanctl command...
The vulnerability of the monitoring tool for VMware Aria Operations, related to deficiencies in access control, allows a perpetrator to execute arbitrary code and increase their privileges.
The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and increase their privileges...
Vulnerability of the Server component: Security: Roles of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server component: Security: Roles of the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to cause service interruptions using the MySQL protocol...
The vulnerability of the Schema Handler component in the PostgreSQL database management system allows attackers to circumvent security restrictions.
The vulnerability of the Schema Handler component in the PostgreSQL database management system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
The vulnerability of the built-in software of the ARIS controller, related to access control errors, allows a intruder to increase their privileges within the system.
The vulnerability of the built-in software of the ARIS controller is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges within the system...
The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code.
The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code using a specially crafted request...
The vulnerability of the built-in software of the ARIS controller, related to the use of cryptographic algorithms that contain defects and risks, allows a perpetrator to gain access to critical information.
The vulnerability of the built-in software of the ARIS controller is related to the use of cryptographic algorithms that contain defects and risks. Exploiting this vulnerability could allow a malicious actor to gain access to critical information...
The vulnerability of the Microsoft Windows Sysmon system service in Windows operating systems allows a hacker to bypass security restrictions and gain increased privileges.
The vulnerability of the Microsoft Windows Sysmon system service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to bypass security restrictions and increase their privileges...
The vulnerability of the microprogramming software of the Parks Fiberlink 210 exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands, allowing attackers to execute arbitrary commands on the server.
The vulnerability of the Parks Fiberlink 210 router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the server using t...
The vulnerability of the microprogramming software in Cisco Business Wireless Access Points allows a intruder to gain access to the guest portal without authentication.
The vulnerability of microprogrammed software in Cisco Business Wireless Access Points involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to the guest portal without being authenticated...
The vulnerability of the SSLVPN service on FortiOS operating systems and the proxy servers for protecting against Internet attacks by FortiProxy allows attackers to execute arbitrary commands.
The vulnerability of the SSLVPN service on FortiOS operating systems and FortiProxy proxy servers for protecting against Internet attacks is related to writing data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending special...
The vulnerability of the SQL ODBC plugin for the cross-platform development framework for Qt software allows a hacker to induce a service failure.
The vulnerability of the SQL ODBC plugin for the cross-platform development framework for Qt software relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially created data...
The vulnerability of the shared host device Bluetooth function with VMware Workstation and VMware Fusion allows a attacker to execute arbitrary code.
The vulnerability of the shared-host Bluetooth device function with VMware Workstation and VMware Fusion lies in the possibility of buffer overflow attacks based on the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created TIFF file...
The vulnerability of the seq_buf_putmem_hex() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the seqbufputmemhex function in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel power management function allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Linux operating system’s kernel power management function relates to the use of hidden time channels for data transmission during the processing of model-specific registers MSRs. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability in the web interface for managing TP-Link Archer AX21 (AX1800 routers allows a hacker to execute arbitrary commands with root privileges.
The vulnerability in the web interface for managing TP-Link Archer AX21 AX1800 routers is related to the lack of measures taken to clean data at the management level when processing a symbolic link /cgi-bin/luci/stok=/locale. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the UPSMON Pro monitoring system, related to errors in processing the relative path to the restricted-access catalog, allows a perpetrator to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the UPSMON Pro monitoring system is related to errors in processing the relative path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer in memory, allowing an attacker to exploit this to disclose protected information.
The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...
The vulnerability of the SCADA system ProMIS InSCADA, related to improper protection of error messages sent out, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SCADA system ProMIS InSCADA is related to improper protection of error messages sent out. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the AMD KVM subsystem for supporting embedded virtualization in Linux kernel allows a hacker to induce a service failure.
The vulnerability of the AMD KVM subsystem for supporting embedded virtualization in Linux operating systems’ kernels is related to improper handling of embedded termination processes. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the NGINX software configuration, which manages the Discourse mailing list, allows a hacker to cause a service failure.
The vulnerability of the NGINX software-based Discourse mailing list management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the application for blocking advertisements and Pi-hole internet trackers arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows a violator to execute arbitrary code.
The vulnerability of the Pi-hole ad blocking app exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Apex One NT RealTime Scan service (ntrtscan.exe), an antivirus software solution provided by Trend Micro’s Apex One, exposes the system to potential threats. This vulnerability allows attackers to gain increased privileges.
The vulnerability of the Apex One NT RealTime Scan ntrtscan.exe component of Trend Micro’s Apex One and Apex One as a Service antivirus programs is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their...
The vulnerability of the BIOS microprogramming system of AMD processors allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of AMD microprocessor BIOS microprogramming systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...
The vulnerability of Dell Enterprise SONiC operating systems, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of Dell Enterprise SONiC operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Microsoft SQL Server database management system, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability of the Symantec Endpoint Protection antivirus software lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.
The vulnerability of the Symantec Endpoint Protection antivirus software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the application package for configuring BIOS using Dell Command Configure, related to improper handling of permissions, allows a malicious individual to increase their privileges.
The vulnerability of the BIOS configuration application for Dell Command Configure is related to improper handling of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...