98239 matches found
D-Link tgfile.htm Code Execution
The vulnerability of the tgfile.htm function in the microprogramming software for D-Link routers such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allo...
Oracle HTTP Server Unauthorized Access
The vulnerability of the Web Listener component of the Oracle HTTP Server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Juniper Networks’ Junos OS DoS
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Inductive Automation Ignition XSS
The vulnerability of Inductive Automation Ignition’s software for industrial automation is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...
SonicWall Secure Mobile Access Bypass Authentication
The vulnerability of the SonicWall Secure Mobile Access SMA 1000 security access device lies in its ability to bypass authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to arbitrary files and directories stored outside of the root web directory...
LG Simple Editor Crop Image File Deletion
The vulnerability of the cropImage function in the software for creating and distributing content with LG Simple Editor arises due to a typing error during the processing of command-line arguments that handle directory traversal. Exploiting this vulnerability allows an attacker to send specially...
Google Chrome Downloads Bypass
The vulnerability of the Downloads component in the Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...
Advantech EKI-1524 Industrial Switches XSS
The vulnerability of the microprogrammed software in Advantech EKI-1524, EKI-1522, and EKI-1521 industrial switches exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the...
LuCI XSS
The vulnerability in the LuCI web interface of the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Vim ins-compl_get_exp Code Execution
The vulnerability of the ins-complgetexp function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to perform arbitrary commands...
Azure DevOps Server Code Execution
The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially created data...
SCADA Data Gateway Code Execution
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute any code in the root context remotely...
SolarWinds Orion Platform SaveUserSetting Command Execution
The vulnerability of the SaveUserSetting component in the SolarWinds Orion Platform software lies in the improper execution of certain actions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Rockwell Automation Enhanced HIM CSRF
The vulnerability of the application software interface for process control and automation system monitoring software from Rockwell Automation, Enhanced HIM, is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack...
Splunk SOAR Code Execution
The vulnerability of Splunk SOAR’s software for orchestration, automation, and security incident response is related to improper processing of output data from registration logs. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
Cobalt Ashlar-Vellum Buffer Overflow
The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the escape of operations from memory buffers during the processing of CO-files. Exploiting this vulnerability allows an attacker to execute arbitrary code...
D-Link DIR-895 Router Privilege Escalation
The vulnerability of the phpcgimain function in the D-Link DIR-895 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
RUGGEDCOM ROX MX5000 XSS
The vulnerability of the web interface of microprogramming software for routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remot...
RUGGEDCOM ROX MX5000 Privilege Escalation Command Execution
The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the...
RUGGEDCOM ROX MX5000 XSS
The vulnerability of the web interface of microprogramming software for routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 arises from the lack of protection for the web page structure during the processing of the getelements parameter...
Bluetooth chipset Unisoc Unauthenticated Access Disclosure
The vulnerability of Bluetooth microprogrammed chipset devices from Unisoc lies in the lack of permission checking. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
Oracle Hyperion Workspace Unauthorized Access
The vulnerability of the UI and visualization components of the Oracle Hyperion Workspace reporting application relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, to modify, add, or delete data,...
Jupyter Core Privilege Escalation
The vulnerability in the Jupyter Core environment for interactive code development and execution is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, upload and execute code with elevated privileges...
WebRTC Code Execution
The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
operating systems for managing Privilege Escalation
The vulnerability of operating systems for managing cloud applications related to Sealos stems from deficiencies in authentication procedures due to the use of Role-Based Access Control RBAC policies. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the flsetgeneveopt function in the net/sched/clsflower.c module, within the net/sched scheduling subsystem of the Linux operating system’s kernel, is related to incorrect calculations of buffer boundaries during writing operations. Exploiting this vulnerability may allow a...
Go CSS Code Execution
The vulnerability of the Go programming language is related to errors in processing special symbols "" within CSS contexts. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Moodle Improper Access Control
The vulnerability in the virtual learning environment Moodle is related to insufficient restrictions in the settings of the “startpage”. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to limited functions...
Apache Traffic Server Information Disclosure
The vulnerability of the Apache Traffic Server web server is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
Server Oracle MySQL Privilege Escalation
The vulnerability of the Server component, specifically the Security: Privileges section of the Oracle MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL...
Gravity Forms Plugin Unauthenticated RCE
The vulnerability of the maybeunserialize function in the Gravity Forms plugin of the WordPress content management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to files, or execute...
Kinetix 5500 Unauthorized Access
The vulnerability of the Kinetix 5500 servo-controller software-related microprogramming systems is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating locally, to gain unauthorized access to the device using network protocols like telnet or...
HMI/SCADA CONPROSYS HMI Plaintext Storage Unauthorized Access
The vulnerability of HMI/SCADA CONPROSYS HMI lies in the storage of account data in plain text. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
Teltonika RMS Sensitive Code Execution
The vulnerability of the Teltonika RMS Remote Management System relates to the activation of the web function from an unreliable source. Exploiting this vulnerability allows a malicious actor to disclose sensitive information and execute arbitrary code using a specially crafted web page...
Juniper Networks Junos OS Auth Bypass
The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary commands using the sysmanctl command...
MalwareFox AntiMalware drivers Privilege Escalation
The vulnerability of the zam64.sys and zam32.sys drivers in the MalwareFox AntiMalware software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Mozilla Firefox Focus Android Information Disclosure
The vulnerability of Mozilla Firefox and Focus for Android browsers is related to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks using a specially created cookie file...
HNAP1 Protocol Arbitrary Command Execution
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-846 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command processing for handling the tomographypingaddress parameter. Exploiting this...
TP-Link TL-WPA4530 V2 Code Execution
The vulnerability of the httpRpmPlcDeviceAdd and httpRpmPlcDeviceRemove functions in the TP-Link TL-WPA4530 V2 adapter’s microprogramming software is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability can allow a remote attacker to execute...
ftusbbus2.sys Driver Failure
The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...
NTLM Security Support Provider Unauthorized Access
The vulnerability of the NTLM Security Support Provider in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
SQL ODBC Plugin DoS
The vulnerability of the SQL ODBC plugin for the cross-platform development framework for Qt software relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially created data...
GRUB Code Execution
The vulnerability of the GRand Unified Bootloader GRUB in Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 9000 Series is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Libde265 Heap Buffer Overflow DoS
The vulnerability of the ffhevcputhevcqpelpixels8sse function in the H.265 Libde265 video codec implementation is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...
TP-Link Archer AX21 Web Interface Command Execution Root Privileges
The vulnerability in the web interface for managing TP-Link Archer AX21 AX1800 routers is related to the lack of measures taken to clean data at the management level when processing a symbolic link /cgi-bin/luci/stok=/locale. Exploiting this vulnerability allows an attacker to execute arbitrary...
Nighthawk WiFi Router CSRF
The vulnerability of Nighthawk WiFi 6 Router RAX30’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...
Adobe Experience Manager Redirection
The vulnerability of the Adobe Experience Manager content and media data management system lies in the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Secure Access Management System IED Siemens RUGGEDCOM CROSSBOW SQL Injection
The vulnerability of the audit log management mechanism of the Secure Access Management System for IED Siemens RUGGEDCOM CROSSBOW is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL...
WebAdmin Cyber Threats Arbitrary Command Execution
The vulnerability of the WebAdmin component in the hardware-software security system for handling network threats, Sophos SG UTM Unified Thread Management, is related to the failure to take measures to neutralize specific elements used in operating system processes. Exploiting this vulnerability...
TOTOLINK T8 Telnet Component Compromise
The vulnerability of the /webcste/cgi-bin/product.ini component of the Telnet service in TOTOLINK T8 microprogramming router software is related to the use of pre-installed user credentials. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...