95883 matches found
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing a malicious actor to execute arbitrary code.
The vulnerability of Siemens Solid Edge’s design and simulation tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...
The vulnerability of the Downloads component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Downloads component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...
The vulnerability of Google Chrome’s Payments component allows a hacker to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of Google Chrome’s Payments component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, and Adobe Acrobat 2017 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting...
The vulnerability of the BIG-IP access control and remote authentication configuration tool allows a perpetrator to execute arbitrary commands.
The vulnerability of the BIG-IP access control and remote authentication configuration tool lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Vulnerability of microprogrammed programmable logic controllers MELSEC-F: related to authentication breaches, allowing attackers to circumvent existing security restrictions
The vulnerability of MELSEC-F programmable logic controllers’ microprogramming software is related to authentication breaches. Exploiting this vulnerability allows an attacker, operating remotely, to circumvent existing security restrictions...
The vulnerability of the Workbench search system component in Oracle Commerce Guided Search allows a perpetrator to gain unauthorized access to protected data or to modify, add, or delete protected data.
The vulnerability of the Workbench search engine component of Oracle Commerce Guided Search is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected data or to modify, add, or delete protected data...
The vulnerability of Weintek’s cMT3000 HMI Web CGI panel’s microprogramming software arises from buffer overflow in the stack. This allows a malicious actor to bypass the authentication process.
The vulnerability of Weintek’s cMT3000 HMI Web CGI panel software lies in buffer overflow attacks within the stack. Exploiting this vulnerability could allow an attacker to bypass the authentication process...
The vulnerability of the formSetWanNonLogin function in the D-Link DIR-619L router software allows a hacker to cause a service failure.
The vulnerability of the formSetWanNonLogin function in the D-Link DIR-619L router microprogramming system is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...
The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to bypass existing security restrictions.
The vulnerability of the Downloads component in the Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...
The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.
The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software relates to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system is related to the issue where operations are performed outside the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to compromise the...
The vulnerability of the Metabase data visualization and reporting software, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the Metabase data visualization and reporting software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Eclipse Jetty servlet containers relates to syntax validation errors in input checks. This allows attackers to inject one cookie into another and affect its processing.
The vulnerability of Eclipse Jetty servlet containers is related to syntax validation errors in input checks. Exploiting this vulnerability allows a malicious actor to inject one cookie into another and affect their processing...
The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c of the Linux operating system’s kernel, which allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c in the Linux operating system’s system daemon colord is related to a memory release error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of Google Chrome’s Autofill function for Android allows attackers to circumvent existing security restrictions.
The vulnerability of Google Chrome’s Autofill function for Android relates to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...
The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from incorrect restrictions on the name of the path to the restricted access catalog. This allows a intruder to execute arbitrary code.
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute any code in the root context remotely...
The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a hacker to gain access to confidential information.
The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to access confidential information...
The vulnerability of the ASD service of the IQ Engine wireless access point operating system allows a hacker to escalate their privileges and execute arbitrary code.
The vulnerability of the ASD service of the IQ Engine HiveOS wireless access point operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...
The vulnerability of CODESYS software products, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions by sending a specially crafted request...
The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the DevTools set of tools for web development in Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to enhance their privileges and execute arbitrary commands.
The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 lies in the lack of measures to neutralize special elements during the processing of URL parameters when connecting to the...
The vulnerability of the microprogramming software of the Link DIR-885L, which allows a hacker to increase their privileges
The vulnerability of the Link DIR-885L router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
The vulnerability of the Manage Journal Entry Template component of the SAP S/4HANA software platform allows a malicious individual to gain access to read, modify, or delete files.
The vulnerability of the Manage Journal Entry Template component of the SAP S/4HANA software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to files...
The vulnerability of Splunk SOAR’s software for orchestration, automation, and incident response lies in its improper handling of output data from registration logs, allowing attackers to execute arbitrary code.
The vulnerability of Splunk SOAR’s software for orchestration, automation, and security incident response is related to improper processing of output data from registration logs. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to perform cross-site scripting attacks.
The vulnerability of the web interface of microprogramming software for routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remot...
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the execution of operations beyond the buffer boundaries in memory when processing STP files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Jupyter Core environment for interactive code development and execution allows attackers to expose protected information, upload and execute code with elevated privileges.
The vulnerability in the Jupyter Core environment for interactive code development and execution is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, upload and execute code with elevated privileges...
The vulnerability of the WebRTC technology implementation in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a perpetrator to cause service failures...
The vulnerability of the ABB eSOMS software for managing production processes allows a attacker to carry out XSS attacks.
The vulnerability of the ABB eSOMS production process management software is related to the absence of the X-XSS-Protection header in HTTP responses. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...
The vulnerability of the Essential Addons plugin for Elementor, a content management system for WordPress, allows attackers to increase their privileges.
The vulnerability of the Essential Addons plugin for Elementor, a content management system for WordPress, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of D-Link DSL-3782 router’s microprogramming software allows a hacker to bypass the authentication process and gain access to confidential information.
The vulnerability of the D-Link DSL-3782 router’s microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to confidential information through a specially crafted...
The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to the lack of standard permission mechanisms, allows attackers to modify existing files or execute arbitrary commands on behalf of users.
The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to modify existing files or execute arbitrary commands on behalf of the user...
The vulnerability of the monitoring tool for VMware Aria Operations, related to deficiencies in access control, allows a perpetrator to execute arbitrary code and increase their privileges.
The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and increase their privileges...
The vulnerability of Emerson Rosemount X-STREAM Enhanced flow analyzers’ microprogramming software lies in the possibility of sending a cookie session file, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of Emerson Rosemount X-STREAM Enhanced flow analyzers’ microprogramming software relates to the ability to send a cookie session file. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information...
The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, allows a malicious actor to cause a service failure.
The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the ksmbd module in Linux operating systems allows a hacker to execute arbitrary code.
The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the SMB2SESSIONSETUP command...
The vulnerability of the microprogramming software in Cisco Business Wireless Access Points allows a intruder to gain access to the guest portal without authentication.
The vulnerability of microprogrammed software in Cisco Business Wireless Access Points involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to the guest portal without being authenticated...
The vulnerability of Backup Exec’s software for backup and data restoration lies in its lack of authentication procedures. This allows attackers to elevate their privileges and execute arbitrary commands.
The vulnerability of Backup Exec’s backup and recovery software is related to deficiencies in authentication procedures when using the SHA cryptographic algorithm. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...
The vulnerability of the shared host device Bluetooth function with VMware Workstation and VMware Fusion allows a attacker to execute arbitrary code.
The vulnerability of the shared-host Bluetooth device function with VMware Workstation and VMware Fusion lies in the possibility of buffer overflow attacks based on the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the decode_NXAST_RAW_ENCAP() function in the Open vSwitch software multi-level switch allows a hacker to execute arbitrary code.
The vulnerability of the decodeNXASTRAWENCAP function in the Open vSwitch software multi-level switch lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the web interface for managing TP-Link Archer AX21 (AX1800 routers allows a hacker to execute arbitrary commands with root privileges.
The vulnerability in the web interface for managing TP-Link Archer AX21 AX1800 routers is related to the lack of measures taken to clean data at the management level when processing a symbolic link /cgi-bin/luci/stok=/locale. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the /web_cste/cgi-bin/product.ini component of the Telnet service in TOTOLINK T8 microprogramming device allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the /webcste/cgi-bin/product.ini component of the Telnet service in TOTOLINK T8 microprogramming router software is related to the use of pre-installed user credentials. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the application for blocking advertisements and Pi-hole internet trackers arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows a violator to execute arbitrary code.
The vulnerability of the Pi-hole ad blocking app exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the `swift/common/middleware/s3api/etree.py` file of the S3 API interface for distributed object storage systems allows a perpetrator to gain unauthorized access to read any arbitrary files.
The vulnerability in the swift/common/middleware/s3api/etree.py file of the S3 API interface for distributed object storage systems in Swift is related to the use of files and directories accessible to external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malware file or a specially crafted...
The vulnerability of the Microsoft SQL Server database management system, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...