The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system allows a hacker to execute arbitrary commands on behalf of the dbus user.

The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicious acto...

Vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to memory usage after memory is released, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft’s software platforms, such as the .NET Framework, .NET, and Microsoft Visual Studio, relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the secondscreen.gateway service on the LG WebOS operating system for LG TVs allows a hacker to create a privileged user account.

The vulnerability of the secondscreen.gateway service on the LG WebOS operating system for LG TVs involves exploiting a authentication mechanism by modifying configuration settings. Exploiting this vulnerability allows an attacker to create a privileged user account remotely...

The vulnerability of the CampaignEvents extension of the software platform for implementing the hypertext environment of MediaWiki allows a hacker to perform cross-site scripting attacks.

The vulnerability of the CampaignEvents extension of the software for implementing the hypertext environment in MediaWiki is related to improper input validation during the creation of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

The vulnerability of the decode_uncompressed_image() function, a decoder and file format encoder for the libheif library, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the decodeuncompressedimage function, a decoder and file format encoder for the libheif library, is related to a segmentation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the CGI script nas_sharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L NAS devices allows a hacker to execute arbitrary code.

The vulnerability of the CGI script nassharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L devices lies in the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code ...

The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean arises from insufficient verification of the communication channel source. This vulnerability allows attackers to trigger service failures.

The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the Downloads component of the Google Chrome web browser allows a hacker to replace the user interface.

The vulnerability of the Downloads component in the Google Chrome web browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to replace the user interface through a specially created URL address...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory. This allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the operation of writing data beyond the buffer in memory when processing STP format files with the ASMIMPORT228A.dll library. Exploiting this vulnerability can allow an attacker to gain unauthorized...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary code with root user privileges.

The vulnerability of the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root user privileges...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Message Queuing MSMQ queue service on Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the DCRegister function in the SoftEther VPN client allows a hacker to cause a service failure.

The vulnerability of the DCRegister function in the SoftEther VPN client involves executing a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the microprogrammed control units Saho ADM100 and ADM-100FP lies in the possibility of unlimited loading of dangerous files, allowing a intruder to execute arbitrary commands.

The vulnerability of the microprogrammed control units Saho ADM100 and ADM-100FP lies in the ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely by introducing specially crafted files...

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the SolarWinds Access Rights Manager software relates to the possibility of bypassing the restricted access catalog, allowing a violator to execute arbitrary code.

The vulnerability of the SolarWinds Access Rights Manager ARM software relates to the possibility of bypassing the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the command-line interface of the Cisco Identity Services Engine (ISE) management platform allows a hacker to increase their privileges.

The vulnerability of the command-line interface of the Cisco Identity Services Engine ISE management platform relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the correctMkdir component in the npm package manager allows a attacker to circumvent existing security restrictions.

The vulnerability of the correctMkdir component in the npm package manager is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

The vulnerability of the packet-filtering filter in TC Flower software for multi-level switches like Open vSwitch (OvS) allows a hacker to cause a service failure.

The vulnerability of the packet-based flow control filter in TC Flower software multi-level switches like Open vSwitch OvS is related to deficiencies in handling exceptional states due to incorrect processing of packet metadata by Geneve. Exploiting this vulnerability can allow an attacker to cau...

The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to gain unauthorized access to any arbitrary page.

The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to any arbitrary page...

The vulnerability of the microprogrammed software in wireless alarm systems such as IQ Panel 4 and IQ4 Hub, related to insufficient protection of operational data, allows a intruder to alter the settings of the device.

The vulnerability of the microprogrammed wireless signaling systems IQ Panel 4 and IQ4 Hub lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an intruder to alter the settings of the device...

Microsoft Edge’s vulnerability, related to security configuration errors, allows a hacker to bypass the sandbox protection mechanism and execute arbitrary code.

The vulnerability of Microsoft Edge relates to errors in security settings when processing HTML content. Exploiting this vulnerability allows a malicious actor to bypass sandbox protections and execute arbitrary code using a specially created file or web page...

The vulnerability of the set_buf_break() function in the Indent code editor allows a hacker to trigger a service failure.

The vulnerability of the setbufbreak function in the Indent code editor is related to the execution of operations outside the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools used in production lines allows a intruder to gain unauthorized access to the database.

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...

The vulnerability of the Rapid SCADA system, related to the use of open redirection, allows a hacker to redirect a user to any arbitrary URL address.

The vulnerability of the SCADA system Rapid SCADA is related to the use of open redirection as a result of incorrect data cleaning on the user input page. Exploiting this vulnerability allows an attacker to redirect the user to any desired URL address...

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesPrevValueLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrar...

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesTimeLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary cod...

The vulnerability of microprogrammed software in network video recorders like SystemK NVR 504/508/516 arises from the lack of measures taken to clean data at the control level. This allows intruders to execute arbitrary commands.

The vulnerability of microprogrammed network video recorders like SystemK NVR 504/508/516 lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an intruder operating remotely to execute arbitrary commands...

The vulnerability of the RGXUnbackingZSBuffer() function in the PowerVR GPU driver for Android and ChromeOS systems allows attackers to exploit their privileges.

The vulnerability of the RGXUnbackingZSBuffer function in the PowerVR GPU driver for Android and ChromeOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the setSmartPowerManagement function in the microprogramming software of Tenda AC10U allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setSmartPowerManagement function in the Tenda AC10U router’s microprogramming system is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the Apache Solr search server, related to the lack of protection for operational data, allows attackers to disclose protected information.

The vulnerability of the Apache Solr search server is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the loginAuth function (/cgi-bin/cstecgi.cgi) in the Totolink N350RT router software allows a hacker to execute arbitrary code.

The vulnerability of the loginAuth function /cgi-bin/cstecgi.cgi in the Totolink N350RT router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Spreadsheet::ParseExcel library for working with XLS files lies in its inability to eliminate instructions in dynamically executed code, allowing attackers to execute arbitrary code.

The vulnerability of the Spreadsheet::ParseExcel library for working with XLS files is related to the lack of measures taken to eliminate instructions in the dynamically executed code. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the QNAP QVR surveillance system arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the QNAP QVR video surveillance system exists due to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the DHCP server service in the Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the DHCP server service in Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the UMC software product management components, including Opcenter Quality, SIMATIC PCS neo, SINUMERIK Integrate RunMyHMI/Automotive, Totally Integrated Automation Portal (TIA Portal), allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the UMC software product management components, including Opcenter Quality, SIMATIC PCS neo, SINUMERIK Integrate RunMyHMI/Automotive, Totally Integrated Automation Portal TIA Portal, is related to the use of an unauthorized intermediate policy file. Exploiting this...

The vulnerability of the icmpping function in the universal monitoring system Zabbix allows a intruder to execute arbitrary code.

The vulnerability of the icmpping function in the Zabbix universal monitoring system is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the implementation of extended classes in the Java framework for creating and optimizing Google Web Toolkit (GWT) applications allows a malicious individual to gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the implementation of extended classes in the Java framework for creating and optimizing Google Web Toolkit GWT browser applications is related to deficiencies in the deserialization mechanism when using the Base64 encoding standard. Exploiting this vulnerability may allow an...

The vulnerability of the `build_open_gop_key_points` function in the `libavformat/mov.c` component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buildopengopkeypoints function in the libavformat/mov.c component of the multimedia library FFmpeg is related to integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the OpenSSH cryptographic protection lies in the possibility of introducing or modifying arguments, allowing attackers to execute arbitrary commands.

The vulnerability of the SSH protocol lies in the fact that it relies on the execution or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Apache OFBiz resource planning software lies in its incorrect code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Apache OFBiz resource planning software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the structure of web pages, allows attackers to disclose protected information.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the 5G mobile communication network organization software free5GC, related to the lack of authentication for critical functions, allows attackers to disclose protected information.

The vulnerability of the software for managing fifth-generation mobile communication networks 5G, free5GC, is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

The vulnerability of the web application development framework web2py arises from the lack of measures taken to eliminate special elements used in the operating system’s command line. This allows attackers to execute arbitrary commands.

The vulnerability of the web2py web application development framework exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerabilities of the OPC-server software products such as KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, ThingWorx Kepware Edge, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, and Software Toolbox TOP Server are related to errors in the certificate validation process. These vulnerabilities allow attackers to bypass the certificate validation checks.

The vulnerabilities of the OPC-server software products such as KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, ThingWorx Kepware Edge, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, and Software Toolbox TOP Server are...

The vulnerability of the Object Attribute Handler component in the cross-platform FTP server CrushFTP allows a hacker to execute arbitrary code.

The vulnerability of the Object Attribute Handler component in the cross-platform FTP server CrushFTP is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests containing AS2 headers...

The vulnerability of the xtrans_interpolate function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xtransinterpolate function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to...

The vulnerability of the JWT implementation in Python PyJWT, related to the use of cryptographic algorithms containing defects, allows attackers to compromise the integrity of the data.

The vulnerability of the JWT implementation in Python PyJWT is related to the absence of blocking for certain formats of the secret key. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...