95883 matches found
The vulnerability of the tls_decrypt_ticket function in the OpenSSL library exists due to insufficient validation of input data, allowing attackers to trigger a service failure.
The vulnerability of the tlsdecryptticket function in the OpenSSL library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the exif_process_ifd_in_makernote function (ext/exif/exif.c) in the PHP programming language allows a attacker to cause a service failure, disclose protected information, or potentially have other adverse effects.
The vulnerability of the exifprocessifdinmakernote function ext/exif/exif.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to cause service failures, disclose sensitive information, or potentially have other adverse effect...
The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P router software allows a hacker to cause service interruptions.
The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P microprogrammed software routers lies in the absence of restrictions on file loading. Exploiting this vulnerability can allow a malicious actor to cause service failures by loading arbitrary files onto...
The vulnerability of the ext/snmp/snmp.c component of the PHP programming language interpreter allows a attacker to cause a service failure or potentially have other adverse effects.
The vulnerability of the ext/snmp/snmp.c component of the PHP programming language interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially have other effects through specially created...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P allows a perpetrator to execute arbitrary commands.
The vulnerability of the web-based management interface for Cisco Small Business RV340, RV340W, RV345, and RV345P microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a...
The vulnerability of FTP servers for microprogrammed software controllers such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus allows a hacker to cause service failures or execute arbitrary codes.
The vulnerability of the FTP servers of the microprogrammed control devices CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors during the verification of the PWD/XPWD command length. Exploiting this vulnerability can allow an attacke...
The vulnerability of the Display Key Combination Fast Access swhkd in the Wayland display server protocol allows a hacker to access protected information or cause a service failure.
The vulnerability of the Display Key Combination daemon swhkd in the Wayland display server protocol implementation relates to the ability to save the PID of a process in the file /tmp/swhkd.pid and incorporate the PID of an existing process into it. Exploiting this vulnerability can allow a remo...
The vulnerability of the Atlassian Confluence Server web server, related to authentication errors, allows a hacker to read arbitrary files.
The vulnerability of the Atlassian Confluence Server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files...
The vulnerability of the vlc_input_attachment_New component in the VLC Media Player software allows a hacker to gain access to confidential data and also cause a service failure.
The vulnerability of the vlcinputattachmentNew component in the VLC Media Player software is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a speciall...
The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.
The vulnerability of the HEVC Video Extension is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...
The vulnerability of the virtual learning environment Moodle, related to the lack of access control, allows a violator to modify course icons using criteria in the profile field.
The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to modify course badges using criteria in the profile field...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain privileged access
Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...
The vulnerability in the set of libraries for Mojo browser-based applications on Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Mojo browser libraries for Google Chrome and Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment lies in insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to improper code generation, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
The vulnerability of the embedded software of NETGEAR routers such as EX6100v2, EX6150v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, EX7700, LBR1020, LBR20, RBK352, RBK50, RBR350, RBR50, RBS350 lies in the lack of protection for service data. This allows attackers to disclose the protected information.
The vulnerability of the embedded software of NETGEAR routers such as EX6100v2, EX6150v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, EX7700, LBR1020, LBR20, RBK352, RBK50, RBR350, RBR50, and RBS350 lies in the lack of protection for service data. Exploiting this...
The vulnerability of NETGEAR’s integrated router software, including models R6400, R6400v2, R6700v3, R7000, R6900P, R7000P, and R8000, stems from the lack of measures to sanitize input data. This allows attackers to execute arbitrary commands.
The vulnerability of the embedded software of NETGEAR routers such as R6400, R6400v2, R6700v3, R7000, R6900P, R7000P, and R8000 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
The vulnerability of the software interface for processing 3D graphics and computing with the WebGPU browser of Mozilla Firefox and Focus allows a perpetrator to execute arbitrary code.
The vulnerability of the software interface for processing 3D graphics and computing WebGPU by Mozilla Firefox and Focus relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of NETGEAR’s integrated routing software for models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in the lack of measures to sanitize input data. This allows attackers to execute arbitrary commands.
The vulnerability of NETGEAR’s integrated routing software, including models such as CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability in the web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices allows a hacker to execute arbitrary code as a root user.
The vulnerability of the Web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices is related to insufficient checking of the command arguments entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary code as a root user remotely...
The vulnerability of NETGEAR’s integrated routing software, including models like RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. This allows attackers to execute arbitrary commands.
The vulnerability of NETGEAR’s integrated routing software, including models like RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of NETGEAR RAX200 router’s built-in software, related to code errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of NETGEAR RAX200 router’s built-in software is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Adobe Premiere Elements’ video editing software arises from the possibility of writing operations beyond the buffer limits in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of Adobe Premiere Elements’ video editing software arises from the possibility of writing operations beyond the buffer limits in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of theutils.cfc component in the ColdFusion software platform allows attackers to execute arbitrary code.
The vulnerability of theutils.cfc component in the ColdFusion software platform allows unauthenticated attackers to execute arbitrary code by connecting to any LDAP server via the verifyldapserver parameter...
The vulnerability of the Adobe Photoshop graphic editor, related to data writing beyond the buffer, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer during the processing of PSD files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious PSD file...
The vulnerability of the contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c components of the QEMU hardware emulation software is related to improper memory release before deleting last references. This allows a malicious actor to trigger a service failure.
The vulnerability of the contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c components of the QEMU hardware emulation software is related to improper memory release before deleting last references. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the BBCode parser in the vBulletin commercial web forum, related to the lack of protection for the website structure, allows a violator to execute arbitrary JavaScript.
The vulnerability of the BBCode parser in the vBulletin commercial web forum is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript by injecting code into messages using embedded BBCodes...
The vulnerability of Cisco Small Business LLDP switches, related to copying buffers without checking input data, allows a perpetrator to execute arbitrary code.
The vulnerability of Cisco Small Business LLDP switches lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the GDI component in Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the Windows Graphics Device Interface GDI component in operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...
The vulnerability of the deployment application for the QUSBCam2 monitoring system arises from the operation that goes beyond the buffer in memory, allowing a intruder to execute arbitrary code.
The vulnerability of the deployment application for the QUSBCam2 monitoring system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the IOMobileFramebuffer extension in iOS, iPadOS, watchOS, and macOS allows a hacker to execute arbitrary code.
The vulnerability of the IOMobileFramebuffer extension in iOS, iPadOS, watchOS, and macOS relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Synergia operating system, related to errors in access control policies of SELinux, allows a perpetrator to gain read access to system files.
The vulnerability of the Synergia operating system is related to errors in access control policies of SELinux. Exploiting this vulnerability can allow an attacker to gain read access to system files...
The vulnerability of the POST request processing mechanism of the enhanced qualified electronic signature service for operating systems “EMIAS” allows a perpetrator to execute arbitrary code.
The vulnerability of the POST request processing mechanism of the enhanced qualified electronic signature service for operating systems “EMIAS” exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a...
The vulnerability of the Media Foundation Dolby Digital Atmos Decoders in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Media Foundation Dolby Digital Atmos Decoders in the Windows operating system is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Adobe Genuine Service application checking mechanism lies in its insecure method of searching for DLL libraries. This allows attackers to load malicious executable files and increase their privileges.
The vulnerability of the Adobe Genuine Service application checking mechanism is related to a insecure procedure for locating DLL libraries. Exploiting this vulnerability could allow an attacker to load malicious executable files and increase their privileges...
The vulnerability of the iOS operating system’s kernel allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the iOS operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context or cause a service failure using a specially created application...
The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient verification of session tokens. This allows attackers to increase their privileges.
The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient verification of session tokens. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Cypress WICED BT Bluetooth Classic stack implementation for the CYW20735B1 device arises due to insufficient validation of input data. This allows a malicious actor to trigger a service failure.
The vulnerability of the Cypress WICED BT Bluetooth Classic stack implementation for the CYW20735B1 device exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failure...
The vulnerability of the TSWbPrxy component in Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the TSWbPrxy component in Windows operating systems is related to deficiencies in path validation for restricted access directories. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
The vulnerability of the VPXD service (Virtual Provisioning X Daemon), a management tool for virtual infrastructure in VMware vCenter Server, allows a attacker to cause a service failure.
The vulnerability of the VPXD service Virtual Provisioning X Daemon, a management tool for VMware vCenter Server’s virtual infrastructure, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a...
The vulnerability of Honeywell’s industrial portable computer operating system exists due to the failure to take measures to neutralize certain special elements, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of Honeywell’s industrial portable computer operating systems exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
The vulnerability of the Adobe Genuine Service application checking service, related to errors in processing symbolic links, allows a perpetrator to re-record arbitrary files and increase their privileges.
The vulnerability of the Adobe Genuine Service application checking service is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to rewrite arbitrary files and increase their privileges...
The vulnerability of Microsoft Edge browser, related to insufficient validation of input data, allows attackers to bypass existing security restrictions.
The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
The vulnerability of the rhttpproxy service, a management tool for virtual infrastructure, such as VMware vCenter Server and VMware Cloud Foundation, allows attackers to circumvent existing security restrictions.
The vulnerability of the rhttpproxy service in the vmware vcenterserver software is related to errors in the authentication process. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger service interruptions by using a specially created proble...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader, related to information disclosure, allow attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2019, and Adobe Acrobat Reader 2019 are related to information disclosure. Exploiting these vulnerabilities can allow unauthorized actors to gain...
The vulnerability of Google Chrome’s V8 engine, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential information or cause service failures.
The vulnerability of Google Chrome’s V8 engine is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers, related to the use of memory after it is freed, allows attackers to access confidential information or cause service interruptions.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service interruptions...
The vulnerability of the Mozilla Thunderbird email client, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Mozilla Thunderbird email client is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by creating a special web page...