95883 matches found
The vulnerability of the DecodeManager::decodeRect function in the VNC TigerVNC software allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the DecodeManager::decodeRect function in the VNC TigerVNC software is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the libhevc library in the Mediaserver application of the Android operating system allows a hacker to cause service failure, device freezing, and reloading of the device.
The vulnerability of the libhevc library in the Mediaserver application of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots by using a specially created file...
The vulnerability of the Redis database management system allows a hacker to execute arbitrary Lua bytecode.
The vulnerability of the deps/lua/src/ldo.c component of the Redis database management system is related to incorrect data type conversion. Exploiting this vulnerability allows a malicious actor to execute any Lua bytecode using a specially crafted eval command...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Site Isolation component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.
The vulnerability of the Site Isolation component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and influence the integrity of the data.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and affect the integrity of that data...
The vulnerability of Windows operating systems with HID technology allows attackers to disclose sensitive information.
The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) involves unlimited distribution of resources, allowing a hacker to cause a service failure.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability in the web interface for controlling microprogrammed software in EDIMAX GS-5008PL switches allows a intruder to gain unauthorized access to protected information.
The vulnerability of the web-based interface for controlling microprogrammed software in EDIMAX GS-5008PL switches lies in the transmission of critical information in plaintext. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected...
The vulnerability of the software for optimizing performance of cloud and local applications in Intel Granulate, related to deficiencies in access control, allows attackers to enhance their privileges.
The vulnerability of the software for optimizing performance of cloud and local applications in Intel Granulate is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Zangi Private Messenger messaging application, related to deficiencies in the session key generation mechanism, allows a hacker to execute a “man-in-the-middle” attack.
The vulnerability of the Zangi Private Messenger messaging application is related to deficiencies in the mechanism for generating session keys. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack...
The vulnerability of TP-Link Deco M4 Mesh-system’s microprogramming software lies in the lack of measures to neutralize specific elements, allowing attackers to execute arbitrary commands.
The vulnerability of Mesh-system TP-Link Deco M4’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the parse_required_member() function in the protobuf-c data serialization protocol, related to integer overflow, allows a attacker to execute arbitrary code and completely compromise the system.
The vulnerability of the parserequiredmember function in the protobuf-c data serialization protocol is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and cause the system to be completely compromised...
The vulnerability of the PRNG generator in the development environment for programming CODESYS V3 applications, related to the use of cryptographic algorithms with defects, allows a hacker to decrypt and modify the loaded code.
The vulnerability of the PRNG generator used in the development environment for CODESYS V3 applications is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor, operating remotely, to decrypt and modify the loaded...
The vulnerability of D-Link router microprogramming software, related to the storage of passwords in an unencrypted form, allows a hacker to gain full control over the device.
The vulnerability of D-Link router microprogramming software lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the device...
The vulnerability of the Windows operating system’s kernel allows a perpetrator to elevate their privileges and cause service failures.
The vulnerability of the Windows operating system’s kernel is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...
The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the authentication procedures’ flaws, which allow unauthorized access to protected information by intruders.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE lies in improper code generation management, allowing attackers to compromise the integrity of protected information.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper code generation management. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...
The vulnerability of the fromAdvSetMacMtuWan() function in the Tenda AC9 router’s software allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC9 router’s microprogramming software is related to the buffer overflow attack when processing the wanSpeed parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
The vulnerability of the database extension of the OpenRefine software for extracting and cleaning tabular data allows a hacker to execute arbitrary code.
The vulnerability of the database extension of the OpenRefine software for extracting and cleaning tabular data is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the gf_filterpacket_del() function in the gpac/src/filter_core/filter.c file of the multimedia platform GPAC allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gffilterpacketdel function in the gpac/src/filtercore/filter.c file of the multimedia platform GPAC is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability in the web interface for managing D-Link DIR-2640-US microprogramming software allows a hacker to bypass security restrictions.
The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming software is related to deficiencies in the authentication process when processing the LoginPassword parameter. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by sending ...
The vulnerability of the gf_odf_vvc_cfg_read_bs() function on the GPAC multimedia platform allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the gfodfvvccfgreadbs function on the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...
The vulnerability of the transformation function for web applications used in phpMyAdmin administration systems allows attackers to execute cross-site scripting attacks.
The vulnerability of the transformation function for web applications used in phpMyAdmin administration systems is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially...
The vulnerability in the `dns_parse_callback` function in the `network/lookup_name.c` library for the C language, used in Linux-based embedded operating systems, allows a attacker to cause a service failure.
The vulnerability of the dnsparsecallback function in the network/lookupname.c library for the C language, used in Linux-based operating systems, relates to the lack of restrictions on the number of addresses that can be entered. Exploiting this vulnerability could allow a remote attacker to caus...
The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data, related to access control deficiencies, allows attackers to enhance their privileges.
The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...
The vulnerability of the fds_sys_passDebugPasswd_ret() function in the libfds.so library of the Zyxel GS1900 series router microprogramming software allows a attacker to escalate their privileges.
The vulnerability of the fdssyspassDebugPasswdret function in the libfds.so library of the Zyxel GS1900 series router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the libmpeg2 library in the Media Framework component of the Android operating system allows a hacker to induce a service failure.
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to insufficient state checking. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the FFmpeg multimedia library’s component allows a hacker to execute arbitrary code.
The vulnerability of the FFmpeg multimedia library’s component is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using data with incorrect size in the HTTP response...
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability in the web interface for managing Tenda AC7 router micro-program software allows a attacker to perform a CSRF attack.
The vulnerability in the web interface for managing Tenda AC7 router microprogramming software is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...
The vulnerability of the R7-Officer corporate server’s document editor, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.
The vulnerability of the R7-Office corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to carry out XSS attacks...
The vulnerability of the R7-Officer corporate server’s document editor, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.
The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to carry out XSS attacks...
The vulnerability of the User Management Component (UMC) in the web-based industrial process control system SIMATIC PCS neo allows a attacker to trigger a service failure.
The vulnerability of the User Management Component UMC in the web-based system for managing technological processes of SIMATIC PCS neo is related to the violation of a buffer’s initial limit. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...
The vulnerability of microprogrammed software for Intel processors, related to access privilege violations, allows attackers to enhance their privileges.
The vulnerabilities of microprogrammed software in Intel processors are related to access control errors. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
The vulnerability of the SharedFileList component in MacOS operating systems allows a perpetrator to compromise the integrity of protected information.
The vulnerability of the SharedFileList component in MacOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
The vulnerability of the predictOrdered() function in the objdetect/src/cascadedetect.hpp component of the computer vision algorithm library OpenCV, which involves reading data beyond the allowed buffer limits. This vulnerability allows attackers to access confidential data and also trigger a service failure.
The vulnerability of the predictOrdered function in the objdetect/src/cascadedetect.hpp component of the computer vision library OpenCV involves reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as...
The vulnerabilities of the Dell EMC storage integration tool with VMware’s virtualization platform, the Dell Storage Integration Tools for VMware (DSITV); the data storage management tool that manages Dell EMC storage through VMware vSphere Client; the data replay management tool for virtual machines on the virtualization platform, Replay Manager for VMware (RMSV). These vulnerabilities allow attackers to disclose sensitive information.
The vulnerabilities of the Dell EMC storage integration tool with VMware’s virtualization platform, the Dell Storage Integration Tools for VMware DSITV; the data storage management tool that manages Dell EMC storage through VMware vSphere Client; and the virtual machine data replay management too...
The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper session management, allowing attackers to execute arbitrary code.
The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper session management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by writing the file to any location within the file system...
The vulnerability of the Reolink RLC-410W IP camera’s microprogramming software arises from the lack of measures taken to neutralize the special elements used in the operating system’s command set. This vulnerability allows a intruder to execute arbitrary commands.
The vulnerability of the Reolink RLC-410W IP camera’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of software for the development and mass production of printed circuit boards, related to errors in processing uploaded files, allows a perpetrator to gain access to protected information or cause service failures.
The vulnerability of software for the development and mass production of printed circuit boards is related to errors in processing uploaded files. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures by sending a specially...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to create recursive pipeline connections. Exploiting this vulnerability allows a malicious actor to trigger service interruptions remotely...
The vulnerability of the setPrice function in the PriceOracle.sol component of the decentralized price data system, Compound Price Oracle, allows a attacker to increase their privileges.
The vulnerability of the setPrice function in the PriceOracle.sol component of the decentralized price data system Compound Price Oracle is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Intel Unite Client conference communication software arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.
The software for Intel Unite Conference Calling has a vulnerability due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the Cairo vector graphics library, which allows a hacker to cause a service failure
The vulnerability of the fillxrgb32lerpopaquespans function in the Cairo vector graphics library is due to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure such as out-of-memory reading or application termination by setting the length of the interv...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.18-6-all-powerpc package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the software implementing the transport protocols QUIC and HTTP/3 in CloudFlare Quiche allows attackers to cause service interruptions due to unlimited resource distribution.
The vulnerability of the software implementing the transport protocols QUIC and HTTP/3 in CloudFlare Quiche lies in the fact that data is sent at a speed that exceeds the actual path support provided by the system due to unlimited resource distribution. Exploiting this vulnerability can allow a...