98239 matches found
IDrive Backup Privilege Escalation
The vulnerability of IDrive backup software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...
Consul Service Configuration Unvalidated Security Restriction Bypass
The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an unvalidated returned value. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions from a remote location...
Adobe InDesign Buffer Overflow RCE
The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...
Input Method Editor (IME) Privilege Escalation
The vulnerability of the Input Method Editor IME component in Microsoft Windows is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...
Sudo Privilege Escalation
The vulnerability of the system administration program Sudo is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to increase their privileges...
Maxima Praidex SQL Injection
The vulnerability of the “Maxima Praidex” electronic queue management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL query remotely...
OpenSearch Code Execution
The vulnerability of the OpenSearch software package is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
WISE-4010LAN JTAG Firmware Modification
The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to access control deficiencies. Exploiting this vulnerability can allow attackers to implant or modify the firmware...
ABB RMC-100 MQTT Protocol DoS
The vulnerability of the MQTT protocol implementation in the web interface of the microprogramming-based controllers ABB RMC-100 and RMC-100-LITE lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...
PDF-XChange Editor Buffer Overflow Information Disclosure
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality is related to the occurrence of operations outside the buffer during the processing of PRC files. Exploiting this vulnerability can allow an attacker to disclose protected information...
Linux userfaultfd DoS
The vulnerability of the userfaultfd component in Linux operating systems is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Totolink A3002R FormWlanMultipleAP Code Execution
The vulnerability of the formWlanMultipleAP function in the microprogramming software of the Totolink A3002R router is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Linux drivers net ethernet intel ice ice_sriov_set_msix_vec_count Heap Buffer Overflow
The vulnerability of the icesriovsetmsixveccount function in the drivers/net/ethernet/intel/ice/icesriov.c file of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibili...
Nuance Digital Engagement Platform Windows XSS
The vulnerability of the Windows operating system-based version of the Nuance Digital Engagement Platform’s web server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
WAGO Device Manager Unauthorized Access
The vulnerability of the WAGO Device Manager software for configuring and parameterizing controllers is related to errors in configuring CORS policies. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the file system by sending specially crafted requests...
Termide Virtual Desktops Connection Manager Disclosure
The vulnerability of the “Termide Virtual Desktops Connection Manager” software suite is related to deficiencies in the testing mechanisms for integrations. Exploiting this vulnerability allows a malicious actor to disclose sensitive information...
AT+MNNETSP Command Privilege Escalation
The vulnerability of the AT+MNNETSP command in the microprogramming software for Industrial Routers Microhard IPn4Gii-NA2 and BulletLTE-NA2 is related to the implementation or modification of certain arguments. Exploiting this vulnerability can allow attackers to enhance their privileges...
Siemens User Management Component DoS
The vulnerability of the Siemens User Management Component UMC, which is found in products such as SIMATIC PCS neo, SINEC NMS, and Totally Integrated Automation Portal TIA Portal, relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability could allow a maliciou...
LlamaIndex DuckDBVectorStore Code Execution
The vulnerability of the DuckDBVectorStore class in the LlamaIndex framework for working with large language models involves a lack of protection for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Linksys Wireless Signal Amplifier Command Execution
The vulnerability of the RPcheckFWByBBS function in the microprogramming software for Linksys wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...
Pult.online Authentication Brute Force
The vulnerability of the SCADA system Pult.online is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor operating remotely to carry out an attack using brute-force methods...
Linux dmaengine DoS
The vulnerability of the dmaengine kernel component in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
Git Utilities Module Drupal Data Access
The vulnerability of the Git Utilities module for Drupal CMS systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, or delete data, or execute arbitrary code...
WAVLINK QUANTUM D2G Plugin Code Execution
The vulnerability of the syslogin function in the /cgi-bin/login.cgi script of the WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3, and WL-WN576K1 routers is related to the copying of buffers without checking the size of the input data during the processing of the loginpage...
Monitouch V-SFT VS6EditData!VS4_SaveEnvFile Heap Buffer Overflow Privilege Esc
The vulnerability of the VS6EditData!VS4SaveEnvFile function of the HMI configuration software for Monitouch V-SFT lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...
VS6File!CTxSubFile::get_ProgramFile_name() HMI Configuration Software Monitouch V
The vulnerability of the VS6File!CTxSubFile::getProgramFilename function in the HMI configuration software for Monitouch V-SFT relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
Atheros Wireless DoS
The vulnerability of the ath12kstationassoc function in the Atheros/Qualcomm wireless adapter support driver for Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
PLANET Technology web_tacplus_serverEdit_post() Data Compromise
The vulnerability of the webtacplusserverEditpost function in the microprogramming software for PLANET Technology relates to the issue of the operation exceeding the buffer boundaries in memory when processing the tacIp parameter. Exploiting this vulnerability could allow an attacker to compromis...
Linux DRI GPUVA Unmap Heap Buffer Overflow DoS
The vulnerability of the pvrvmgpuvaunmap function in the DRI support driver for the Linux kernel relates to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
DRI driver Heap Buffer Overflow DoS
The vulnerability of the dpcdcdextendaddressrange function in the DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux UFS kernel driver Heap Buffer Overflow DoS
The vulnerability of the ufshcdremove function in the UFS driver of the Linux operating system is related to an unvalidated return value, which leads to pointer dereferencing. Exploiting this vulnerability could allow a attacker to cause a service failure...
SCALANCE W-700 ICMP DoS
The vulnerability of the ICMP service of industrial switches SCALANCE W-700 IEEE 802.11ax is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
FortiOS FortiGate 200F Brute Force
The vulnerability of the FortiOS operating system for the FortiGate 200F network firewall is related to security mechanism flaws. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack remotely...
AES-128-CBC Buffer Overflow DoS
The vulnerability of the AES-128-CBC encryption algorithm in the microprogramming-based router software Tenda RX2 Pro relates to the storage of encryption keys in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
Solar appScreener Platform SSRF
The vulnerability of the Solar appScreener platform is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the kzalloc function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PCMan FTP Server Buffer Overflow DoS
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the verbose parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
PCMan FTP Server Buffer Overflow DoS
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory when processing the prompt parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
PCMan FTP Server Buffer Overflow DoS
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the mdelete parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Zabbix universal monitoring system Unauthorized Access
The vulnerability of the Zabbix universal monitoring system relates to the use of uncontrolled format strings in processing HttpRequest objects. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Moodle Authentication Bypass
The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user data...
Server MySQL DoS
Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Linux kernel Media DoS
The vulnerability of the Linux operating system’s kernel media component is related to defects in exception handling in the MODULEPARMDESC function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Apache HttpComponents CSRF
The vulnerability of the PSL validation mechanism in the Apache HttpClient client module of Apache HttpComponents is related to errors in the certificate authentication process. Exploiting this vulnerability can allow a malicious actor to execute a CSRF attack remotely...
LockBufferingSettings Method Data Compromise
The vulnerability of the LockBufferingSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow an attacker to compromise th...
AnyDesk Remote Access Privilege Escalation
Уязвимость программного обеспечения для удалённого доступа и управления AnyDesk связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии до уровня root...
Local Security Authority Privilege Escalation
The vulnerability of the Local Security Authority LSA service, which is responsible for verifying identities and managing user policies on Windows operating systems, is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to gain increased...