98239 matches found
OpenSUSE Data Compromise
The vulnerability of the mono-extras package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...
openSUSE Compromise Protected Information
The adm8211-kmp-xenpae package of the OpenSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the udev-udeb package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...
OpenSUSE Data Compromise
The vulnerability of the kdelibs3 package on the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the tetex-bin package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
Multiple vulnerabilities exist in the kernel-image-2.4.27-4-sparc32-smp operating system from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the cups-php-1.4.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the acpid-1.0.4 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
SUSE Linux Enterprise Compromise Protected Information
Multiple vulnerabilities exist in the ext4dev-kmp-default package of the SUSE Linux Enterprise operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Aquarius L311 Driver Access Control
The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...
TOPAZ Metron PTS Time Synchronization Command Injection
The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...
Ascon.Pilot.WinService Authentication Bypass
The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...
Test IT SSRF
The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
Test IT testing system Command Execution
The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Adobe Campaign Classic for
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
PyJWT _load() DoS
The vulnerability of the PyJWS.load function in the jwt/apijws.py file of the PyJWT library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...
netfilter Heap Buffer Overflow DoS
The vulnerability of the nfosfmatchone function in the net/netfilter/nfnetlinkosf.c module of the netfilter component of the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to access...
AI assistant Gemini Confidential Data Access
The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential da...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ODBC Driver SQL Server Privilege Escalation
The vulnerability of the ODBC driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...
Microsoft Entra ID Deserialization Code Execution
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in deserialization mechanisms. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Firefox Thunderbird DoS
The vulnerability of the JavaScript Engine component in the Firefox web browser and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Component DoS
The vulnerability of the drivers/misc/uacce/uacce.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...
Tenda AC12 Router Use-After-Free
The vulnerability of the formSetRebootTimer function in the Tenda AC12 router’s file USAC1206V1.0RTLV15.03.06.23multiTD01.bin is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
Content Credentials SDK Insufficient Validation Privilege Escalation
The vulnerability of Content Credentials SDK library libraries is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
GeoTools jsonArrayContains() Disclosure Code Execution
The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure during the processing of the CQLFILTER parameter...
Online Store Authentication Bypass Privilege Escalation
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
Microsoft Malware Protection Engine Privilege Escalation
The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, relates to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability can allow attackers to increase their privileges...
Azure SRE Agent Authentication Privilege Escalation
The vulnerability of the AI-based tool for automatic analysis of root causes and effective response to incidents in Azure SRE Agents is related to the lack of authentication. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
EDAC Driver Heap Buffer Overflow DoS
The vulnerability of the pcigetdevwrapper function in the drivers/edac/i10nmbase.c file of the EDAC driver for the Linux operating system is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...
amdgpu_amdkfd_gpuvm Heap Buffer Overflow DoS
The vulnerability of the kfdmemdmamapuserptr function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper memory release mechanisms memory leaks. Exploiting this...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Message Queuing Queue Service Code Execution
The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Direct Rendering Infrastructure Heap Buffer Overflow DoS
The vulnerability of the mdp5piperelease function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...
NFS Network File System DoS
The vulnerability of the nfsdopenlocalfh function in the fs/nfsd/localio.c module, which is part of the NFS network file system support in Linux kernel, is related to the use of an invalid file descriptor. Exploiting this vulnerability could allow an attacker to cause service failures...
Qualcomm Buffer Overflow
The vulnerability of microprogramming software in embedded Qualcomm chips lies in the ability to write any value anywhere and to overflow the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Exim Buffer Overflow Info Disclosure
The vulnerability of the Exim mail server is related to reading data from buffer beyond the allowed limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
ClamAV PESpin File Processing DoS
The vulnerability of the PESpin-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...
GitLab EE Unauthorized Access
The vulnerability of the software interface of a Git-based software platform for collaborative code development on GitLab EE is related to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an intruder, operating remotely, to gain...
GitLab EE Unauthorized Access
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
GitLab CI/CD Unauthorized Access
The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
Remote Function Call module Information Disclosure
The vulnerability of the Remote Function Call module in the SAP Operational Data Provisioning Data Replication API ODP-RFC infrastructure is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...
NGINX Plus/Open Source Unauthorized Access
The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...
Netty DNS Codec Utilization DoS
The vulnerability of the io.netty.handler.codec.dns.DnsCodecUtil component in the Netty framework, which is used for developing network applications, servers, and clients, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...
Linux USB audio driver Heap Buffer Overflow DoS
The vulnerability of the sndusbcreatestreams function in the Linux operating system’s USB audio driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Windows Bluetooth Port Driver Exploit
The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
Microsoft Cryptographic Services Privilege Escalation
The vulnerability of Microsoft Cryptographic Services in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to gain increased privileges...
Remote Desktop Client Code Execution
The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...