95883 matches found
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...
The vulnerability of the NPAPI plugin in browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to perform cross-site forgery attacks.
The vulnerability of the NPAPI plugin for Firefox ESR, Firefox, and the Thunderbird email client relates to exploiting the Cross-origin Resource Sharing CORS mechanism. Exploiting this vulnerability allows a remote attacker to perform cross-origin requests...
The vulnerability in the FortiOS operating system’s web interface allows a hacker to perform cross-site fraudulently.
The vulnerability in the FortiOS operating system’s web interface is related to the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests to pages like /logindisconnect/disconnectadmins or...
The vulnerability in the web interface for managing Cisco Small Business Series 220 routers allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability in the web interface for managing Cisco Small Business Series 220 routers allows a perpetrator to execute arbitrary commands with root privileges by sending specially crafted HTTP or HTTPS requests depending on the device configuration...
The vulnerabilities of the functions smp_task_timedout() and smp_task_done() in the Linux kernel’s drivers/scsi/libsas/sas_expander.c file allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions smptasktimedout and smptaskdone in the Linux kernel’s drivers/scsi/libsas/sasexpander.c file are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code using ...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to cause the system to freeze or partially fail to operate.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or partially fail to operate...
The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode
The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...
The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows attackers to exploit it to disclose sensitive information or cause system failures during maintenance.
The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...
The vulnerability of the kalmiabind handler in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the kalmiabind implementation in Linux kernel drivers drivers/net/usb/kalmia.ko is related to a memory allocation error. Exploiting this vulnerability can allow an attacker to cause a service failure when connecting a Samsung Kalmia-based LTE USB modem. This creates an...
The vulnerability of the maxiradioremove handler’s implementation in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the maxiradioremove implementation for loading the drivers/media/radio/radio-maxiradio.ko module into the Linux kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure by repeatedly connecting and disconnecting the...
The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router’s web management interface, related to input processing errors, allows a perpetrator to trigger a service failure.
The vulnerabilities of the Cisco RV110W Wireless-N VPN Firewall, the Cisco RV130W Wireless-N Multifunction VPN Router, and the Cisco RV215W Wireless-N VPN Router involve input handling errors. Exploitation of these vulnerabilities can allow a malicious actor to trigger a Denial-of-Service attack...
The vulnerability of the web access module of the DIRECTUM electronic document management system allows a hacker to obtain the name of the last authorized user.
The vulnerability of the web access module of the DIRECTUM electronic document management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to obtain the name of the last authorized user who accessed the system remotely...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object processing, allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing objects in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code in the context of the current user...
The vulnerability of the rdp_in_unistr function in the RDP client rdesktop, related to integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of the rdpinunistr function in the RDP client rdesktop is related to a numerical overflow that causes buffer overflow based on heap. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Vulnerability of the Server component: The Oracle MySQL database management system’s options, which allow a hacker to cause a service failure.
The vulnerability of the Server component involves deficiencies in access control of the Oracle MySQL database management system. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool, which allows a hacker to gain full control over the application
The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system allows a hacker to circumvent security policies set by the system, due to configuration errors in the password policies for user domain accounts.
The vulnerability of the component for integrating various authentication methods in the Astra Linux operating system is related to configuration errors in password policies, which result in the lack of checks to ensure that the specified restrictions on user domain account passwords are met...
The vulnerability of the WEB interface of the microprogramming software for Pelco Sarix Enhanced cameras allows a intruder to execute arbitrary commands.
The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands through the WEB interface...
The vulnerability of the Samba networking communication software lies in the lack of requirements for signing and encrypting SMB traffic when using DFS redirection. This allows a attacker to execute a “man-in-the-middle” attack.
The vulnerability of the Samba networking communication package is related to the lack of requirements for signing and encrypting SMB traffic when using DFS redirection. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack and gain access to read and modi...
The vulnerability of the xmlParsePEReference component in the libxml2 library, which is used for working with XML and HTML files, allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the xmlParsePEReference component in the libxml2 XML parsing library is related to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures through a specially...
The vulnerability of the Windows Data Sharing Service, a data exchange service for the Windows operating system, allows attackers to escalate their privileges.
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of Cisco Email Security Appliances arises from deficiencies in the mechanisms for detecting malicious content in executable files. This allows attackers to circumvent security restrictions.
The vulnerability of Cisco Email Security Appliances’ security systems stems from deficiencies in the mechanisms for detecting malicious content in executable files EXE files. Exploiting this vulnerability allows a malicious actor to send messages containing malicious files remotely...
The vulnerability of the Kernel component of the Solaris operating system, which allows a hacker to trigger a service failure
The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...
The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a hacker to gain full control over the application.
The vulnerability of the API framework components of the Sun ZFS Storage Appliance Kit AK is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application by using network protocols...
The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.
The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...
The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.
The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or...
The vulnerability of the `lim_send_sme_probe_req_ind` function in the Qualcomm WLAN operating system’s Android component from the CAF repository allows a hacker to escalate their privileges.
The vulnerability of the limsendsmeprobereqind function in the Qualcomm WLAN operating system’s Android component, as found in the CAF repository, is due to a buffer overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
The vulnerability of the User Interface component of the Trade Management business platform allows a perpetrator to gain unauthorized access to protected data.
The vulnerability of the User Interface component of the Trade Management business platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
The vulnerability of the WLS-Web Services component of the WebLogic Server application server allows a attacker to gain full control over the application.
The vulnerability of the WLS-Web Services component of the WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP protocol...
The vulnerability of the Qualcomm WLAN operating system driver for Android from the CAF repository allows a hacker to execute arbitrary code.
The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Policy Builder interface of the Cisco Policy Suite software management tool allows a perpetrator to access the interface and make changes to existing repositories.
The vulnerability of the Policy Builder interface of the Cisco Policy Suite management software is related to the absence of a mechanism for authenticating the Policy Builder interface. Exploiting this vulnerability could allow an attacker to gain access to the interface and make changes to...
The vulnerability of the “diagnostics” component of the CGI application for the web interface of the Sonicwall Secure Remote Access system management console allows a hacker to execute arbitrary commands.
The vulnerability of the “diagnostics” component /cgi-bin/diagnostics of the CGI application for the web interface of the Dell Inc. Sonicwall Secure Remote Access SRA system management application is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a...
The vulnerability of JavaScript handlers in the Microsoft Edge browser for the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...
The vulnerability of the RW-message structure in the Aerospike Database Server of the Oracle Database database management system allows a perpetrator to execute arbitrary code.
The vulnerability of the RW-message structure in the Aerospike Database Server of the Oracle Database database management system is related to unvalidated array indexing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code read from beyond the memory limit using a...
The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...
The vulnerability in the Chakra JavaScript engine of the Microsoft Edge browser allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability in the Chakra JavaScript engine of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a specially crafted...
The vulnerability of the xdr_bytes and xdr_string functions in the library that handles system calls and core glibc functions allows a attacker to cause a service failure.
The vulnerabilities of the xdrbytes and xdrstring functions in the library that handles system calls and core glibc functions are related to the reclamation of unreliable data stored in memory after deserialization of buffers. Exploiting these vulnerabilities allows a remote attacker to cause a...
The vulnerability of the ReadICONImage function in the console-based image editing tool ImageMagick allows a hacker to cause an unexpected termination of the application.
The vulnerability of the ReadICONImage function coders\icon.c in the console-based graphic editor ImageMagick is related to a memory leak. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to terminate abnormally lead to a memory exhaustion conditio...
The vulnerability of the sctp_sf_ootb function in the Linux operating system allows a hacker to cause a service failure or exert other effects.
The vulnerability of the sctpsfootb function in the Linux kernel’s net/sctp/smstatefuns.c file allows for data to be read beyond the specified buffer. Exploiting this vulnerability can enable a malicious actor to cause service failures or exert other effects using specially crafted SCTP data...
The vulnerability of the Android operating system, which allows a violator to compromise data privacy
The vulnerability of the libmpeg2 service in the Mediaserver application of the Android operating system is related to the lack of protection for service-related data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...
The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain information about the integration platform and the operating system, enabling them to carry out UXSS attacks.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating...
The vulnerability in the built-in software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900, NETGEAR WNDR4500v2, NETGEAR R6200v2, NETGEAR WNDR3400v2, NETGEAR D6220, NETGEAR D6400, NETGEAR C6300, NETGEAR R6200, NETGEAR R6300, NETGEAR VENG2610, NETGEAR AC1450, NETGEAR WNDR1000v3, NETGEAR WNDR3700v3, NETGEAR WNDR4000, NETGEAR WNDR4500, NETGEAR D6300, NETGEAR D6300B, NETGEAR DGN2200Bv4, and NETGEAR DGN2200v4, allows a hacker to obtain user password information.
The vulnerability of the embedded software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900,...
The vulnerability of the Android operating system, which allows a hacker to trigger a buffer overflow.
The vulnerability in the trusted execution environment of Android’s operating system’s access control API arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a buffer overflow due to lack of size checking for the buffer...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the ethtoolgetwol function in the net/core/ethtool.c file of Linux kernels up to version 4.7 in the Android operating system is related to the absence of initialization of the data structure. Exploiting this vulnerability could allow a remote attacker to obtain confidential...
The vulnerability of the Internet Explorer browser allows a malicious attacker to execute arbitrary code or cause a service failure.
A vulnerability that allows a remote attacker to execute arbitrary code or trigger a service denial using a specially crafted website...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the kernel-image-2.6.8-3-64 operating system of the Debian GNU/Linux distribution. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotel...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality and integrity of protected information
The ltsp-client package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality and integrity of protected information. These vulnerabilities can be exploited by malicious individuals...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-3-s390x operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-3-powerpc-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...