98363 matches found
Oracle VM VirtualBox Partial DoS
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a partial service outage...
ChakraCore Microsoft Edge Code Execution
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...
Microsoft.NET Framework Code Execution
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment is related to data processing flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...
BAR.- Database Information Disclosure
The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely...
wfst_run DoS
The vulnerability of the wfstrun application, which is part of the speech-tools speech recognition system, is related to overflow errors in the command line processing. Exploiting this vulnerability can allow an attacker to cause a service failure by submitting commands with specially crafted...
PHP xml_elem_parse_buf Heap Buffer Overflow
The vulnerability of the xmlelemparsebuf function ext/xmlrpc/libxmlrpc/xmlelement.c in the PHP interpreter is related to reading data beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...
Oracle One-to-One Fulfillment Print Server Data Modification
The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment system, a business automation solution from Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...
Network-Based Application Recognition Cisco IOS DoS
The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...
APT RCE
The vulnerability in the software of apt is related to improper cleaning of the redirecting field 302 in the HTTP method. Exploiting this vulnerability allows a remote attacker to perform content injection MITM and execute code on the target machine...
Excel Memory Object Error Access Disclosure
The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...
Android ihevcd_sao_shift_ctb Disclosure
The vulnerability of the ihevcdsaoshiftctb function ihevcdsao.c in the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Solaris Kernel DoS
The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...
VirtualBox DoS
The vulnerability of the Core component of the VirtualBox virtualization software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected data, cause the device to become unresponsive, or lead to service failure...
Script Author Unauthorized Access
The vulnerability of the Script Author component in the scripting software for creating and processing scripts is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
Microsoft Access Memory Code Execution
The vulnerability of the Microsoft Access database management system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
PouchBD MapReduce Code Execution
The vulnerability of the map/reduce function implementation in the PouchBD database is related to deficiencies in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code or system commands remotely...
Qualcomm WLAN Driver Code Execution
The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Grand Central Dispatch Isolated Environment Bypass
The vulnerability of Grand Central Dispatch in the Mac OS X operating system is related to errors in analyzing .plist files during authentication processes. Exploiting this vulnerability can allow attackers to circumvent restrictions in a isolated environment...
Spring AMQP DefaultDeserializer Code Execution
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
Novell GroupWise Code Execution
The vulnerability of Novell GroupWise software for collaborative work is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the long user name or password...
Android Data Compromise
The vulnerability of the libmpeg2 service in the Mediaserver application of the Android operating system is related to the lack of protection for service-related data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the linux-headers-2.6.26-1-all-alpha package of the Debian GNU/Linux operating system may be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Java Platform Data Compromise
The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality and integrity by utilizing the Security sub-component...
Java Platform Data Compromise
The vulnerability of the Java SE software platform allows a malicious actor to compromise data integrity by using subcomponents called Libraries...
Firefox File Deletion
The vulnerability of the Mozilla Maintenance Service updater for the Firefox browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files by manipulating local files...
browsers Internet Explorer and Code Execution
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...
Google Chrome Access Restriction DoS
The vulnerability of the ContainerNode::parserRemoveChild function in the Blink component of Google Chrome is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to circumvent existing access restrictions or cause service failures...
iOS File System Restriction Bypass
The vulnerability of the Location Framework component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on access to file system objects through symbolic links...
Firefox OS Info Disclosure
The vulnerability of the Firefox OS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information contained in system messages, through a specially crafted application...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the tetex-bin package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the kdelibs3 package on the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the acpid-1.0.4 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the cups-php-1.4.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the udev-udeb package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...
OpenSUSE Data Compromise
The multiple vulnerabilities in the libexif-32bit package of the OpenSUSE operating system can be exploited, leading to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the mono-extras package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...
openSUSE Compromise Protected Information
The adm8211-kmp-xenpae package of the OpenSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the mono-data-sqlite package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
Multiple vulnerabilities exist in the kernel-image-2.4.27-4-sparc32-smp operating system from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
SUSE Linux Enterprise Compromise Protected Information
Multiple vulnerabilities exist in the ext4dev-kmp-default package of the SUSE Linux Enterprise operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Aquarius L311 Driver Access Control
The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...
h2 library Resource Consumption DoS
The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
TOPAZ Metron PTS Time Synchronization Command Injection
The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...
Ascon.Pilot.WinService Authentication Bypass
The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...
Test IT SSRF
The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
Test IT testing system Command Execution
The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Adobe Campaign Classic for
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
PyJWT _load() DoS
The vulnerability of the PyJWS.load function in the jwt/apijws.py file of the PyJWT library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...
gf_opus_parse_packet_header() media_tools/av_parsers.c DoS
The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file of the multimedia platform GPAC is related to incorrect numerical calculations when processing values with a comma-separated format. Exploiting this vulnerability could allow an attacker to cause service...
netfilter Heap Buffer Overflow DoS
The vulnerability of the nfosfmatchone function in the net/netfilter/nfnetlinkosf.c module of the netfilter component of the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to access...