LOV Component Data Access

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or...

Splunk Web XSS

The vulnerability of the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Docker Desktop Communication Restriction Unauthorized Access

The vulnerability of the Docker Desktop platform for developing and delivering container applications stems from insufficient restrictions on communication channels between specified endpoints. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

Updates Service Local File Read

The vulnerability of the “Updates Service” software’s web request handler lies in the lack of limits on authentication attempts. Exploiting this vulnerability can allow a malicious actor to gain read access to local files...

Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the getip.addrdetails function /view/vpn/autovpn/sxhvpnlic.php in Ruijie RG-UAC router software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the getipaddrdetails function /view/dhcp/dhcpConfig/commit.php in Ruijie RG-UAC router software exists due to the failure to address special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via th...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

Media Session Application Code Execution

The vulnerability of the Media Session application interface in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by loading a specially created malicious HTML page...

Netcat Unrestricted File Execution Code Execution

The vulnerability of the CMS system Netcat is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VMware ESXi Storage Controller Code Execution

The vulnerability of storage controller devices in VMware ESXi, VMware Workstation, and VMware Fusion lies in the ability to read/write data beyond the allowed range. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dawn Component Code Execution

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

WDAC OLE DB Driver Code Execution

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

DCH-compatible Thunderbolt Driver Privilege Escalation

The vulnerability of the DCH-compatible Thunderbolt driver is related to access control deficiencies. Exploiting this vulnerability can allow attackers to gain increased privileges...

SIMATIC CP 343-1 DoS

The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow a malicious actor ...

libv2_sdk.so Heap Buffer Overflow Privilege Escalation

The vulnerability of the v2packarraytomsg function in the libv2sdk.so library of the DJI Mavic 3 Pro, DJI Mavic 3, DJI Mavic 3 Classic, DJI Mavic 3 Enterprise, DJI Matrice 300, DJI Matrice M30, and DJI Mavic Mini 3 Pro quadricopters is related to the execution of operations outside the buffer in...

wolfSSH Authentication Defect

The vulnerability of the SSH library wolfSSH is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Pulsar Function Worker Code Execution

The vulnerability of the Pulsar Function Worker module on the cloud platform for distributed messaging and Apache Pulsar streaming involves insufficient control over resources with dynamic management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Chrome Downloads UI Replacement

The vulnerability of the Downloads component in the Google Chrome web browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to replace the user interface through a specially created URL address...

Tenda FH1202 addWifiMacFilter Function Use-After-Free

The vulnerability of the addWifiMacFilter function /goform/addWifiMacFilter in the Tenda FH1202 router software lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

minizip-ng Heap Buffer Overflow RCE

The vulnerability of the mzpathhasslash function in the minizip-ng library for working with zip files is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge relates to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to carry out spear-phishing attacks using a specially created malicious web page...

Argo CD Caching Brute Force

The vulnerability of the caching mechanism for the declarative delivery tool in GitOps for Kubernetes Argo CD lies in the absence of restrictions on authentication attempts when processing the defaultMaxCacheSize parameter. Exploiting this vulnerability allows a malicious actor to bypass security...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the putepelhvfallback function implemented in fallback-motion.cc of the h.265 Libde265 codec is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

Windows Message Queuing Privilege Escalation

The vulnerability of Windows’ Message Queuing system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Schneider Electric EcoStruxure IT Gateway Privilege Escalation

The vulnerability of Schneider Electric EcoStruxure IT Gateway software for communication with controlled devices is related to the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...

TC Flower Packet Filtering DoS

The vulnerability of the packet-based flow control filter in TC Flower software multi-level switches like Open vSwitch OvS is related to deficiencies in handling exceptional states due to incorrect processing of packet metadata by Geneve. Exploiting this vulnerability can allow an attacker to cau...

IQ Panel 4 Wireless Alarm Insufficient Protection

The vulnerability of the microprogrammed wireless signaling systems IQ Panel 4 and IQ4 Hub lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an intruder to alter the settings of the device...

OpenSSH macOS Unauthorized Access

The vulnerability of the OpenSSH package for the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a hacker to gain unauthorized access to SSH password credentials...

Photos Component macOS Authentication Bypass

The vulnerability of the macOS operating system is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to access the “Photos Album” album without being authenticated...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

ServiceNow Data Flow Code Execution

The vulnerability of the Data Flow management platform ServiceNow is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Rapid SCADA Unencrypted Password Storage

The vulnerability of the SCADA system Rapid SCADA is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a intruder to gain unauthorized access to protected information...

Tenda W9 formAddSysLogRule Code Execution

The vulnerability of the formAddSysLogRule function in the wireless access point software Tenda W9 involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

FeverWarn Privilege Escalation

The vulnerabilities of the microprogramming software for thermal scanning systems—FeverWarn ESP32, FeverWarn RaspberryPi, and the centralized data storage and management system FeverWarn DataHub RaspberryPi—are related to deficiencies in access control during the processing of Wi-Fi interfaces...

PowerVR GPU Driver Heap Buffer Overflow

The vulnerability of the RGXUnbackingZSBuffer function in the PowerVR GPU driver for Android and ChromeOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...

MachineSense Unauthorized Access

The vulnerability of the MachineSense microprogramming software components in FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi systems is related to the absence of authentication procedures for critical functions. Exploiting this vulnerability could allow an attacker ...

SystemK NVR Software Arbitrary Command Execution

The vulnerability of microprogrammed network video recorders like SystemK NVR 504/508/516 lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an intruder operating remotely to execute arbitrary commands...

Intel HID Event Filter driver Privilege Escalation

The vulnerability of the Intel HID Event Filter driver in Intel NUC laptops is related to inherited permission errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

GNU Core Utilities Heap Buffer Overflow DoS

The vulnerability of the linebytessplit function src/split.c in the GNU Core Utilities suite is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Citrix StoreFront XSS

The vulnerability of the Citrix StoreFront application exists because measures are not taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

SIMATIC CN 4100 IP Configuration DoS

The vulnerability of the SIMATIC CN 4100 communication gateway’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to alter the IP configuration and cause service failures...

Microsoft Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows Defender operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Office Microsoft 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by having the user open a specially crafted malicious file...

GWT Extended Classes RCE

The vulnerability of the implementation of extended classes in the Java framework for creating and optimizing Google Web Toolkit GWT browser applications is related to deficiencies in the deserialization mechanism when using the Base64 encoding standard. Exploiting this vulnerability may allow an...

FortiWeb web applications Output Processing

The vulnerability of FortiWeb web applications’ network firewalls is related to improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to replace traffic logs through a specially created web page...

Adobe Experience Manager Code Execution

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager Code Execution

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Phoenix Contact Automation Worx Software Suite Permission Bypass

The vulnerability of the microprogramming software for Phoenix Contact Automation Worx Software Suite, AXC 1050, AXC 1050 XC, AXC 3050, Config+, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 3xx, PC Worx, PC Worx Express, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC...

SysMain Privilege Escalation

The vulnerability of the SysMain service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...