97848 matches found
AVEVA PI Server DoS
The vulnerability of the AVEVA PI Server’s data storage, normalization, analysis, and notification functions in real-time is related to improper handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause service failures...
Traffic Analyzer Statistical Command Execution
The vulnerability of the Traffic Analyzer – Statistical function in ASUS’ Wi-Fi router software, the RT-AC86U, exists due to the lack of measures taken to neutralize certain components. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands or cause service...
CODESYS PRNG Cryptographic Defect Decryption Modification
The vulnerability of the PRNG generator used in the development environment for CODESYS V3 applications is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor, operating remotely, to decrypt and modify the loaded...
Cisco Meeting Server DoS
The vulnerability of the Cisco Meeting Server’s API interface relates to insufficient validation of input data during request processing. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...
Symantec Messaging Gateway goform/formEMR30 Code Execution
The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges or execute arbitrary code...
WISE-4060 Adam-6050 D Weak Encryption Full Access
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device with administrator privileges...
Akord-V Role Assignment Bypass Code Execution
The vulnerability of the software-hardware complex for protecting information from unauthorized access, “Akord-V,” is related to the violation of established role assignments. Exploiting this vulnerability allows an intruder to bypass the access restrictions for ARMs of types ABI/AVI for ARM...
MPEG-2 decoder Code Execution
The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Redis Arbitrary Lua Execution
The vulnerability of the deps/lua/src/ldo.c component of the Redis database management system is related to incorrect data type conversion. Exploiting this vulnerability allows a malicious actor to execute any Lua bytecode using a specially crafted eval command...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the fai-kernels package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the opie operating system package from Debian GNU/Linux may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
TrueConf Server Code Execution
The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
Vesta Control Panel Command Execution
The vulnerability of the Vesta Control Panel’s control panel lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the vsftplicense parameter when sending HTTP POST requests to the...
User-Mode Power Service Privilege Escalation
The vulnerability of the User-Mode Power Service UMPS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
NetScaler ADC File Path Access
The vulnerability of NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway access control systems is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
GitLab Authentication Bypass Info Disclosure
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ASPECT Enterprise Path Traversal
The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...
LOV Component Data Access
The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or...
Netgear debuginfo.htm Disclosure
The vulnerability of the debuginfo.htm component in Netgear’s integrated router software, such as Netgear CBR40, Netgear CBK40, and Netgear CBK43, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected ...
D-Link DSL-3782 Code Execution
The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ApacheMDM Service Unauthorized Access
The vulnerability of the ApacheMDM service in the centralized management system for industrial routers and network switches of FL MGUARD DM is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...
Federated Credential Management Component Code Execution
The vulnerability of the Federated Credential Management component in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Adobe InDesign Buffer Overflow RCE
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
DIR846 Firmware Arbitrary Command Execution
The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands using a...
bird Buffer Overflow DoS
The vulnerability in the packet routing protocol implementation in Unix-like operating systems, bird, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
vvdecapp decoder reconstructCoeff Heap Buffer Overflow DoS
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after deallocation when processing specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
Site Isolation Confidential Data Access
The vulnerability of the Site Isolation component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Dawn Component Confidential Data Access
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Picomatch Prototype Modification
The vulnerability of the Picomatch library is related to uncontrolled changes to the attributes of the object’s prototype. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
ASUS RT-N12E Router XSS
The vulnerability of the sysinfo.asp script in ASUS RT-N12E router microprogramming software is related to the lack of measures taken to protect the website structure when processing SSID identifiers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks X...
Realtek SD card drivers Buffer Overflow
The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to read and write data in the PCI configuration space...
Titan SFTP MFT NextGen Server Improper Session Management
The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper session management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by writing the file to any location within the file system...
Sangfor NAF Firewall Tool svpn_html/loadfile.php Disclosure
The vulnerability of the svpnhtml/loadfile.php component of the Sangfor NAF firewall lies in the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
Argo CD Authentication Bypass
The vulnerability of the application programming interface for the declarative delivery tool of GitOps for Kubernetes Argo CD is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established access controls...
Cisco Modeling Labs Web Interface Command Execution
The vulnerability of the Cisco Modeling Labs network modeling tool’s web interface is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Ascon.Pilot.WinService Auth Bypass Code Execution
The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Extensions Component Confidential Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and affect the integrity of that data...
Linux kernel trace event trigger function DoS
The vulnerability of the triggerkthreadfn function in the kernel/trace/traceeventstrigger.c module, which supports kernel tracing in Linux operating systems, relates to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
GitLab Code Generation Data Compromise
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper code generation management. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...
CommuniGate Pro Information Disclosure
The vulnerability of the CommuniGate Pro mail server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to confidential information...
GLPI SSRF
The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a malicious actor to carry out an SSRF attack remotely...
EDIMAX GS-5008PL Unauthenticated Access
The vulnerability of the web-based interface for controlling microprogrammed software in EDIMAX GS-5008PL switches lies in the transmission of critical information in plaintext. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected...
TOTOLINK A6000R Cancel_wps() Function Command Execution
The vulnerability of the apcliCancelwps function /usr/lib/lua/luci/controller/mtkwifi.lua of the TOTOLINK A6000R router’s software is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to...
Adaptive Substance 3D Painter Buffer Overflow
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...
SAP Customer Data Cloud Random Number Generator Information Disclosure
The vulnerability of the SAP Customer Data Cloud data management software is related to the use of a non-safe random number generator program. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information...
MELSEC iQ-F CPU FX5U(C) and FX5UJ Buffer Overflow
The vulnerability of the CPU FX5UC and FX5UJ modules of the MELSEC iQ-F series is related to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted files...
libconfig.so Stack Buffer Overflow
The vulnerability of the configset function in the libconfig.so library, a built-in software library for web servers, is related to buffer overflows in the stack due to insufficient input handling. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary...
Moxa VPORT 06EC-2V series IP cameras Integer Overflow DoS
The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially crafted HTTP request...
D-Link router storage of passwords in unencrypted form
The vulnerability of D-Link router microprogramming software lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the device...