Google Chrome Memory Leak Unauthorized Access

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

Google Chrome Authentication Bypass

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

JasPer Heap Buffer Overflow DoS

The vulnerability of the jasicctxtdescinput function in the JasPer library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

Microsoft Graphics Components Code Execution

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Symfony Input Validation Data Compromise

The vulnerability of the Symfony software development and management platform is related to an application error where unvalidated user input is passed as a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

Google Chrome Data Compromise

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

Junos JDHCPD Privilege Escalation

The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system is related to the failure to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root...

Oracle VM Server for SPARC Templates Component Unauthorized Access

The vulnerability of the Templates component of the Oracle VM Server for SPARC platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PeopleSoft Enterprise PeopleTools Data Access

The vulnerability of the PIA Core Technology component in the PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...

Enterprise Manager Base Platform Data Modification Privilege Escalation

The vulnerability of the Repository component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability may allow an attacker operating remotely to modify, add, or delete data, gain unauthorized access to protected information, or cause a partial...

HMI/SCADA Equinox Control Expert SQL Injection Unauthorized Access

The vulnerability in HMI/SCADA Equinox Control Expert relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries to the database...

Brodade IP SAN Network Management System Unauthorized Access

The vulnerability of the Brocade Network Advisor system for managing IP networks and Storage Area Networks is related to deficiencies in data storage. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through access to the JMX console...

SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS

The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Intel Ethernet Series 700 DoS

The vulnerability of Intel Ethernet Controller Series 700 microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

Office Online Server Spoofing

The vulnerability of the Office Online Server web server is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks using specially crafted requests...

NPAPI Plugin CSRF

The vulnerability of the NPAPI plugin for Firefox ESR, Firefox, and the Thunderbird email client relates to exploiting the Cross-origin Resource Sharing CORS mechanism. Exploiting this vulnerability allows a remote attacker to perform cross-origin requests...

Microsoft SharePoint Office 365 Word Code Execution

The vulnerability of Microsoft SharePoint, Microsoft Office, Office 365, and the Microsoft Word text editor relates to the execution of operations outside the buffer in memory. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code on the target system with...

FortiOS Web Interface Cross Site Fraudulently

The vulnerability in the FortiOS operating system’s web interface is related to the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests to pages like /logindisconnect/disconnectadmins or...

secomp RCE

The vulnerability of the secomp component in application management tools and Flatpak environments is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

Cisco Small Business Series 220 RCE

The vulnerability in the Cisco Small Business Series 220 router management web interface is related to errors in checking input data and executing operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to increase their privileges and execute arbitrary code by...

Sound eXchange lsx_make_lpf Heap Buffer Overflow DoS

The vulnerability of the lsxmakelpf function effectidsp.c in the Sound eXchange audio editor is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

HP Support Assistant Access Control Privilege Escalation

The vulnerability of the HP Support Assistant software for centralized device management is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain system privileges and perform unauthorized changes to catalogs or files...

Cisco Unified Communications Manager Unauthorized Access

The vulnerability of the Cisco Unified Communications Manager web framework is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created...

Oracle VM VirtualBox Partial DoS

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a partial service outage...

ChakraCore Microsoft Edge Code Execution

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...

Microsoft.NET Framework Code Execution

The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment is related to data processing flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

BAR.- Database Information Disclosure

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely...

wfst_run DoS

The vulnerability of the wfstrun application, which is part of the speech-tools speech recognition system, is related to overflow errors in the command line processing. Exploiting this vulnerability can allow an attacker to cause a service failure by submitting commands with specially crafted...

PHP xml_elem_parse_buf Heap Buffer Overflow

The vulnerability of the xmlelemparsebuf function ext/xmlrpc/libxmlrpc/xmlelement.c in the PHP interpreter is related to reading data beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...

Oracle One-to-One Fulfillment Print Server Data Modification

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment system, a business automation solution from Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

Network-Based Application Recognition Cisco IOS DoS

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

APT RCE

The vulnerability in the software of apt is related to improper cleaning of the redirecting field 302 in the HTTP method. Exploiting this vulnerability allows a remote attacker to perform content injection MITM and execute code on the target machine...

Android ihevcd_sao_shift_ctb Disclosure

The vulnerability of the ihevcdsaoshiftctb function ihevcdsao.c in the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Solaris Kernel DoS

The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...

Script Author Unauthorized Access

The vulnerability of the Script Author component in the scripting software for creating and processing scripts is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

VirtualBox DoS

The vulnerability of the Core component of the VirtualBox virtualization software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected data, cause the device to become unresponsive, or lead to service failure...

Microsoft Access Memory Code Execution

The vulnerability of the Microsoft Access database management system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

PouchBD MapReduce Code Execution

The vulnerability of the map/reduce function implementation in the PouchBD database is related to deficiencies in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code or system commands remotely...

Qualcomm WLAN Driver Code Execution

The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Grand Central Dispatch Isolated Environment Bypass

The vulnerability of Grand Central Dispatch in the Mac OS X operating system is related to errors in analyzing .plist files during authentication processes. Exploiting this vulnerability can allow attackers to circumvent restrictions in a isolated environment...

Spring AMQP DefaultDeserializer Code Execution

The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

Novell GroupWise Code Execution

The vulnerability of Novell GroupWise software for collaborative work is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the long user name or password...

Android Data Compromise

The vulnerability of the libmpeg2 service in the Mediaserver application of the Android operating system is related to the lack of protection for service-related data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

Java Platform Data Compromise

The vulnerability of the Java SE software platform allows a malicious actor to compromise data integrity by using subcomponents called Libraries...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the linux-headers-2.6.26-1-all-alpha package of the Debian GNU/Linux operating system may be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Java Platform Data Compromise

The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality and integrity by utilizing the Security sub-component...

Firefox File Deletion

The vulnerability of the Mozilla Maintenance Service updater for the Firefox browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files by manipulating local files...

browsers Internet Explorer and Code Execution

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Google Chrome Access Restriction DoS

The vulnerability of the ContainerNode::parserRemoveChild function in the Blink component of Google Chrome is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to circumvent existing access restrictions or cause service failures...