Hyper-V Windows Privilege Escalation

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to incorrect code generation. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

iOS Kernel Privilege Escalation

The vulnerability of the iOS operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context or cause a service failure using a specially created application...

Emerson WirelessHART Gateways Code Execution

The vulnerability of the microprogramming software in Emerson WirelessHART Gateways models 1420, 1410D, and 1410 is related to insufficient verification of the data entered by the user in the recovery file. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

VMware vCenter Server XML Parsing DoS

The vulnerability of the VMware vCenter Server virtual infrastructure management tool is related to incorrect syntactic analysis of XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Adobe Genuine Service Symbolic Link Privilege Escalation

The vulnerability of the Adobe Genuine Service application checking service is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to rewrite arbitrary files and increase their privileges...

Siemens Solid Edge Viewer Code Execution

The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...

Input Method Editor (IME) Privilege Escalation

The vulnerability of the Input Method Editor IME component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by exiting from the isolated software environment using a specially created...

VMware vCenter Server Privilege Escalation

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient verification of session tokens. Exploiting this vulnerability can allow attackers to increase their privileges...

Moxa MXView Insecure Transmission Unauthorized Access

The vulnerability of the Moxa MXView network control software is related to the insecure transmission of credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Adobe Genuine Service DLL Loading Privilege Escalation

The vulnerability of the Adobe Genuine Service application checking mechanism is related to a insecure procedure for locating DLL libraries. Exploiting this vulnerability could allow an attacker to load malicious executable files and increase their privileges...

Adobe AIR SDK Out-of-Buffer

The vulnerabilities of Adobe Flash Player, Adobe Integrated Runtime AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler are related to the execution of operations beyond the buffer boundaries. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failur...

VAPI Service DoS

The vulnerability of the VAPI service, a component of the VMware vCenter Server virtual infrastructure management tool, involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted HTTP...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the Indexed DB API for browser-based structured data storage in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially...

Lrzip stream.c Heap Buffer Overflow DoS

The vulnerability of the lzmadecompressbuf function in the stream.c component of the Lrzip compression program relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created compressed file...

SonicOS Code Execution

The vulnerability of the SonicOS operating system is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure by using a specially created malicious request...

Elastic Cloud Enterprise analytics Platform Access Disclosure

The vulnerability of the Elastic Cloud Enterprise analytics platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

Google Chrome Extension Information Disclosure

The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

Ark archive viewer Job::onEntry pathname restriction Directory Data Compromise

The vulnerability in the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

ImageMagick PDF Component Heap Overflow DoS

The vulnerability of the RestoreMSCWarning function in the ImageMagick console-based graphics editor’s /coders/pdf.c component is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created PDF file...

Avaya Aura Device Services Temporary File Permissions

The vulnerability of the Avaya Aura Device Services toolset relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Apache OpenOffice Hypertext Error Code Execution

The vulnerability of the Apache OpenOffice office software is related to errors in processing hypertext links. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted link within a document...

System Platform Confidential Information Storage

The vulnerability of the production automation system’s platform lies in the storage of confidential information in an unencrypted form. Exploiting this vulnerability could allow attackers to gain access to user account information...

PDF viewer PDF editing Uncontrolled Resource Consumption DoS

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service interruptions...

Buffer Overflow DoS

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot or caus...

CNCSoft ScreenEditor Buffer Overflow Info Disclosure

The vulnerability of the CNCSoft ScreenEditor relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Procedure Call Runtime Windows Code Execution

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

Tor Function Use-After-Free

The vulnerability of the dirvoteaddsignaturestopendingconsensus function in the Tor browser is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure remotely...

ImageMagick DoS

The vulnerability of functions in the MagickCore/colorspace-private.h and MagickCore/quantum.h files of the console-based graphic editor ImageMagick is related to errors in division by zero. Exploiting this vulnerability may allow a malicious actor to cause a service failure...

Net-SNMP usm_free_usmStateReference Heap Buffer Overflow DoS

The vulnerability of the usmfreeusmStateReference function in the software for deploying and using the SNMP protocol Net-SNMP is due to repeated memory release. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted GetBulk requests...

Google Chrome Font Component Data Compromise

The vulnerability of Google Chrome’s Font component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

jviews-framework-all.jar Code Execution

The vulnerability of the jviews-framework-all.jar component of the corporate-level platform for extracting, transforming, and loading Jviews data is related to insufficient access control checks for projects. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Sailfish PresentationAvailabilityObserver::AvailabilityChanged DoS

The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application for the Aurora operating system is related to the use of dynamic memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Windows Code Execution

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft SharePoint XSS

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attack...

Microsoft SharePoint XSS

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attack...

Oracle Database Server Application Express Data Access

The vulnerability of the Application Express component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, add, or delete access to data...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

NETGEAR Router Registration Information Disclosure

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient...

Adobe Bridge Buffer Overflow Code Execution

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

Ansible Configuration Management System Unauthorized Access

The vulnerability of the Ansible configuration management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

WpcDesktopMonSvc Privilege Escalation

The vulnerability of the WpcDesktopMonSvc component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Google Chrome Memory Leak Unauthorized Access

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

Google Chrome Authentication Bypass

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

JasPer Heap Buffer Overflow DoS

The vulnerability of the jasicctxtdescinput function in the JasPer library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

Microsoft Graphics Components Code Execution

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Symfony Input Validation Data Compromise

The vulnerability of the Symfony software development and management platform is related to an application error where unvalidated user input is passed as a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

Google Chrome Data Compromise

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

Junos JDHCPD Privilege Escalation

The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system is related to the failure to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root...