The vulnerability of the mptcp_recvmsg() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mptcprecvmsg function in the Linux operating system is related to the lack of input validation for cyclic operations. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the remote image blocking function in the RoundCube Webmail client allows attackers to disclose protected information.

The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the `setUpgradeFW()` function in the `cgi-bin/cstecgi.cgi` script of the TOTOLINK N300RH router’s microprogramming software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the setUpgradeFW function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router microprogramming system is related to the escape operation from memory buffers when processing the FileName variable. Exploiting this vulnerability allows an attacker to execute arbitrar...

The vulnerability of the GC component in the Firefox web browser and the Thunderbird email client allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the GC component in the Firefox web browser and the Thunderbird email client is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise...

The vulnerability of the __unmap_hugepage_range() function in the mm/hugetlb.c file of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the unmaphugepagerange function in the mm/hugetlb.c file, belonging to the memory management subsystem of the Linux kernel, is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.

The vulnerability of the ShareFile content-sharing software’s storage controller relates to the unlimited download of files of a malicious nature. Exploiting this vulnerability could allow an attacker to remotely alter system configurations and execute arbitrary code...

The vulnerability of the /api/v1/attachments component of the software platform for creating custom interfaces based on Language Models (LLMs) from Flowise allows a malicious actor to gain access to the ability to upload any files.

The vulnerability of the /api/v1/attachments component of the software platform for creating user interfaces based on Language Models LLM from Flowise is related to the ability to download files of a dangerous type without restrictions. Exploiting this vulnerability could allow an attacker...

The vulnerability of the elem_size() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the elemsize function in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework is related to the occurrence of interpretation conflicts when processing HTTP header names and values. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access systems lies in the fact that they allow functions to be accessed from an untrusted controlled area, enabling attackers to compromise the confidentiality of protected information.

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access lies in the fact that these systems enable functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to compromise the confidentiality of protected information...

The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale involve the exposure of information through registration files, allowing attackers to gain unauthorized access to protected data and enhance their privileges.

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the exposure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information and enhance their privileges...

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass security restrictions.

The vulnerability of the DevTools suite for web development in Google Chrome relates to a data protection mechanism flaw. Exploiting this vulnerability allows an attacker to circumvent security restrictions by downloading malicious extensions remotely...

The vulnerability of the WebML component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the GNU Binutils development tool, related to reading beyond the buffer boundaries in memory, allows an attacker to disclose protected information or cause system failures.

The vulnerability of the GNU Binutils development tool lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

The vulnerability of the msm_dsi_host_init() function in the drivers/gpu/drm/msm/dsi/dsi_host.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmdsihostinit function in the drivers/gpu/drm/msm/dsi/dsihost.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the /goform/form2Wl5RepeaterStep2.cgi file of the goahead component of D-Link DIR-816 router software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/form2Wl5RepeaterStep2.cgi file of the goahead component of the D-Link DIR-816 router software lies in buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the pch_request_dma() function in the drivers/tty/serial/pch_uart.c module of the console TTY driver in the Linux kernel’s serial port allows a attacker to cause a service failure.

The vulnerability of the pchrequestdma function in the drivers/tty/serial/pchuart.c file of the TTY driver in the Linux kernel’s serial port module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ReadTIMImage function in the TIM image analyzer software (PSX TIM), a console-based image editing tool from ImageMagick, allows a hacker to cause a service failure.

The vulnerability of the ReadTIMImage function in the TIM image analyzer and the ImageMagick console-based graphics editor involves the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the smbd_negotiate() function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...

The vulnerability of the `__sanitizer::internal_strlen` function in the `binutils/nm.c` component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the sanitizer::internalstrlen function in the binutils/nm.c component of the GNU Binutils development environment is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a servic...

The vulnerability of the can_follow_write_pte() function (mm/gup.c) and can_follow_write_pmd() function (mm/huge_memory.c) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the canfollowwritepte function mm/gup.c and canfollowwritepmd function mm/hugememory.c in the Linux kernel is related to improper handling of states during memory management. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the formWebTypeLibrary() function in the microprogramming software for Tenda FH1202 allows a hacker to execute arbitrary code.

The vulnerability of the formWebTypeLibrary function in the microprogramming software for Tenda FH1202 is related to the execution of an operation outside the buffer in memory when processing the webSiteId parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the corporate messaging system Squadus, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the corporate messaging system Squadus is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the formGetRebootTimer() function in the Tenda AC9 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formGetRebootTimer function in the Tenda AC9 router’s microprogramming software is related to the issue of data being written outside the buffer in memory when processing the parameters sys.schedulereboot.starttime/sys.schedulereboot.endtime. Exploiting this vulnerability...

The vulnerability of the n8n automation platform lies in its improper name restriction for paths to the restricted catalog. This allows a malicious actor to execute arbitrary code.

The vulnerability of the n8n automation platform exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by processing uploaded files and transmitting them to remote servers via SSH...

The vulnerability of the complex video surveillance system “Video Surveillance Platform” arises from the lack of measures taken to protect the SQL query structure, allowing a perpetrator to execute arbitrary code.

The vulnerability of the complex video surveillance system “Video Surveillance Platform” lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the sub_4211C8() function in D-link DIR-823X router microprogramming software allows a hacker to execute any command they desire.

The vulnerability of the sub4211C8 function /goform/setfiltering of the D-link DIR-823X router’s microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the `ksmbd_session_rpc_open()` function in the `fs/smb/server/mgmt/user_session.c` module of the SMB server support in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ksmbdsessionrpcopen function in the fs/smb/server/mgmt/usersession.c module, which is part of the SMB server support in Linux operating systems, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the kube-apiserver component, a software component for managing clusters of virtual machines in Kubernetes, allows a attacker to cause a service failure.

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer memory limit, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software lies in the incorrect limitation of the path name to the directory. This allows a intruder to gain unauthorized access to the protected information.

The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the KLogic SCADA system’s virtual controller “KASCAD” allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the KLogic SCADA system “KASCAD” lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getfilesindir parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the idmrshr parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getdoc parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, which stems from the use of strictly encrypted user credentials, allows a hacker to escalate their privileges.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the SSL-VPN technology for FortiOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SSL-VPN technology for FortiOS operating systems is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS operating systems allows attackers to enhance their privileges.

The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Adobe Dreamweaver HTML editor lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Android Frameworks Base repository of the Android operating system allows attackers to enhance their privileges.

The vulnerability of the NotificationStation.java file in the Android operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, who operates remotely, to enhance their privileges...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the User Management Engine component of the SAP NetWeaver Java Application Server web application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the User Management Engine component of the SAP NetWeaver Java Application Server web application server is related to insufficiently secure data encryption. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Case Display Page component of the FoxCMS content management system allows a hacker to execute arbitrary code.

The vulnerability of the Case Display Page component of the FoxCMS content management system is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of PLC NLcon-CE-485-C, related to deficiencies in the authorization process of the Codesys v2 service, allows a perpetrator to gain full access to the Codesys v2 execution environment.

The vulnerability of PLC NLcon-CE-485-C is related to deficiencies in the authentication process of the Codesys v2 service. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full access to the Codesys v2 execution environment...

The vulnerability of the library for creating and editing PDF documents in OpenPDF, related to insufficient validation of input data, allows a hacker to read arbitrary files.

The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...

Vulnerability of 1C software: 1C:ERP Business Management, 1C:Comprehensive Automation, 1C:Commerce Management – due to the lack of authorization, allowing attackers to execute arbitrary requests.

Vulnerabilities of 1C software: 1C:ERP Business Management, 1C:Comprehensive Automation, 1C:Commerce Management involve a lack of authentication. Exploiting these vulnerabilities can allow remote attackers to execute arbitrary requests...

The vulnerability of the Password Manager component in the Google Chrome browser allows a hacker to disclose protected information and execute arbitrary codes.

The vulnerability of the Password Manager component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to disclose sensitive information and execute arbitrary code...

The vulnerability in the driver `drivers/input/keyboard/cros_ec_keyb.c` of the keyboard driver for the ChromeOS embedded controller EC of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems involves a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...