Graphics component Windows Privilege Escalation

The vulnerability of the Graphics component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Sudo Windows Spoofing

The vulnerability of the system administration tool Sudo in Windows operating systems is related to improper restrictions on communication channels for potential targets. Exploiting this vulnerability allows attackers to perform spoofing attacks...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems relates to the unrestricted and unregulated distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Base64 Upload Code Execution

The vulnerability of the library for converting files to the base64 format, which is used to upload files to the web application’s server, relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute...

Media Router Component Data Compromise

The vulnerability of the Media Router component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

AI software platforms GitLab Data Compromise

The vulnerability of AI-based software platforms built on Git for collaborative code development on GitLab is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

Microsoft Outlook iOS Auth Bypass Information Disclosure

The vulnerability of the Microsoft Outlook email client for iOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

D-Link DI-8004W Router Arbitrary Command Execution

The vulnerability of the upgradefilterasp function in D-Link DI-8004W router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

VMware vCenter Server Privilege Escalation

The vulnerability of VMware vCenter Server’s software management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted malware packages remotely...

TOTOLINK EX1200L setLanguageCfg() Function XSS

The vulnerability of the setLanguageCfg function /www/cgi-bin/cstecgi.cgi of the TOTOLINK EX1200L router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel io_uring Poll DoS

The vulnerability of the iouring/poll component in the Linux operating system’s kernel is related to the state of the race condition during multi-address request operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

Firefox Authentication Data Compromise

The vulnerability in the Firefox web browser is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

NILFS Block Dirty Buffer DoS

The vulnerability of the blockdirtybuffer component in the NILFS file system of Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link CGI Get Fullscreen Photos Arbitrary Command Execution

The vulnerability of the cgigetfullscreenphotos function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345,...

D-Link DNS-120 Arbitrary Command Execution

The vulnerability of the cgiFMTStd2R1DiskMGR function /cgi-bin/hdconfig.cgi in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04...

Apache Tomcat JK Connector Disclosure DoS

The vulnerability of the JkShmFile directive in the modjk module of the Apache Tomcat JK Connector is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to disclose information about the modjk module or cause service failures...

Extensions Component UI Replacement

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

HDF5 H5VM memcpy buffer overflow

The vulnerability of the H5VMmemcpyvv function in the H5VM.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux DRM Nouveau Memory Leak DoS

The vulnerability of the DRM/Nouveau kernel component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause a service failure...

OpenVSwitch Control Flow DoS

The vulnerability of the OpenVSwitch multi-level switch program is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

Magento Path Traversal

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to incorrect path name restrictions for access to restricted catalogs. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

WPML Code Execution

The vulnerability of WPML, the content management system for WordPress, relates to the implementation of the Twig template on the server side. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

.NET Development Platform DoS

The vulnerability of the .NET development platform used by Microsoft Visual Studio is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Tenda i22 Router Data Compromise

The vulnerability of the formApPortalOneKeyAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

netshop CMS Netcat XSS

The vulnerability of the “file” parameter in the netshop CMS system’s Netcat module exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute any arbitrary JavaScript code in the user’s browser remotely...

WebAssembly Code Execution

The vulnerability of the WebAssembly component in Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Kernel Streaming WOW Thunk Service Driver Privilege Escalation

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Django QuerySet JSONField Code Execution

The vulnerability of the QuerySet.values and valueslist methods of the Django web application’s JSONField model is related to the lack of security measures for handling SQL queries. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted SQL query...

Juniper Networks RPD DoS

The vulnerability of the Daemon Routing Protocols RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ManageEngine Exchange Reporter Plus SQL Injection

The vulnerability of the Reports module in the ManageEngine Exchange Reporter Plus software for monitoring, analysis, and report generation is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL...

Accutech Manager Buffer Overflow DoS

The vulnerability of the software for configuring and managing Accutech Manager lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending specially crafted...

PT Application Inspector Privilege Escalation

The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to incorrect definition of the link before accessing a file. Exploiting this vulnerability allows an attacker to enhance their privileges and gain unauthorized access to protected...

OpenDKIM Fake Authentication Result Handler

The vulnerability of the Fake Authentication Result Handler component in the DKIM-filtering software OpenDKIM is related to the lack of checks for sequence numbers during the deletion of fake fields. Exploiting this vulnerability allows a malicious actor to influence the integrity of the protecte...

Zemana AntiLogger IOCTL Handler DoS

The vulnerability of the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in the Zemana AntiLogger software is related to improper checking of ownership of critical resources. Exploiting this vulnerability allows an attacker to cause a service failure by executing the IOCTL...

Cisco Webex Teams File Protocol Handler Disclosure

The vulnerability of the File Protocol Handler component in Cisco Webex Meetings and Teams software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to disclose confidential information through a specially crafted link...

Siemens RUGGEDCOM CROSSBOW Firmware Upload Handler Code Execution

The vulnerability of the Firmware Upload Handler component of the Siemens RUGGEDCOM CROSSBOW access control system is related to incorrect external manipulation of file names or files. Exploiting this vulnerability allows a malicious actor to upload arbitrary files and execute arbitrary code...

MicroLogix 1400 PLC Operational Data Access

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

NVIDIA GPU Display Driver Heap Buffer Overflow Privilege Escalation

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrar...

Juniper Networks Packet Forwarding Engine Module Data Compromise

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS networking devices of the EX4300 series is related to the absence of blocking mechanisms for outgoing traffic when certain actions are performed in the wrong order. Exploiting this vulnerability can allow a...

SolarWinds Access Rights Manager Connect Code Execution

The vulnerability of the Connect method in the SolarWinds Access Rights Manager software lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

LOV Component Data Access

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or...

Splunk Web XSS

The vulnerability of the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Docker Desktop Communication Restriction Unauthorized Access

The vulnerability of the Docker Desktop platform for developing and delivering container applications stems from insufficient restrictions on communication channels between specified endpoints. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

Updates Service Local File Read

The vulnerability of the “Updates Service” software’s web request handler lies in the lack of limits on authentication attempts. Exploiting this vulnerability can allow a malicious actor to gain read access to local files...

Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the getip.addrdetails function /view/vpn/autovpn/sxhvpnlic.php in Ruijie RG-UAC router software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the getipaddrdetails function /view/dhcp/dhcpConfig/commit.php in Ruijie RG-UAC router software exists due to the failure to address special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via th...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

Media Session Application Code Execution

The vulnerability of the Media Session application interface in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by loading a specially created malicious HTML page...

VMware ESXi Storage Controller Code Execution

The vulnerability of storage controller devices in VMware ESXi, VMware Workstation, and VMware Fusion lies in the ability to read/write data beyond the allowed range. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dawn Component Code Execution

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...