92710 matches found
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems involves a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
The vulnerability of the PingAlert application server, related to access control deficiencies, allows attackers to increase their privileges.
The vulnerability of the PingAlert application server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the ttm_lru_bulk_move_del function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ttmlrubulkmovedel function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the setWiFiMultipleConfig function in the Totolink N600R router microprogramming system, which allows a hacker to cause a service failure.
The vulnerability of the setWiFiMultipleConfig function in the Totolink N600R router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges
The vulnerability of the Digital Media component of Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Agere Modem Driver for Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Agere Modem Driver for Windows operating systems is related to the misuse of a non-secure pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerability of the HTTP protection library for inter-site request tampering, gorilla/csrf, allows a perpetrator to carry out a CSRF attack.
The vulnerability of the HTTP protection library against cross-site request forgery, gorilla/csrf, is related to cross-site request forgery attacks. Exploiting this vulnerability can allow attackers to execute a CSRF attack...
The vulnerability of the Storage Manager software, a microprogramming-based system used in industrial digital gas analyzers like MEAC300-FNADE4, allows attackers to execute brute-force attacks.
The vulnerability of the Storage Manager software in the MEAC300-FNADE4 industrial digital gas analyzer is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack...
The vulnerability of “Laboratory Kasper” antivirus protection, related to an error in processing certain expressions, allows attackers to execute arbitrary code with privileges of SYSTEM.
The vulnerability of “Labyrinth Kasper” antivirus protection is related to an error in the processing of certain expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with SYSTEM privileges...
The vulnerability of the setRIP() function in the mod_form.so script of Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the setRIP function in the modform.so script of Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the output of the operation goes beyond the buffer in memory when processing parameters like RIPmode and RIPpasswd. Exploiting this...
The vulnerability of the software for deploying and executing AI models developed with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) allows a malicious actor to trigger a service failure. This vulnerability is related to zero-division errors.
The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server formerly TensorRT Inference Server is related to division by zero errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted request...
The vulnerability of the usbhs_probe() function in the Linux kernel’s USB component allows a hacker to induce a service failure.
The vulnerability of the usbhsprobe function in the Linux kernel’s USB component is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the meeting-join function in Cisco WebEx Meetings software allows a perpetrator to carry out a “man-in-the-middle” attack.
The vulnerability of the meeting-join function in Cisco WebEx Meetings software is related to improper verification of certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...
The vulnerability of the REST API implementation of the monitoring and network equipment management system called Cisco Prime Infrastructure, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to execute arbitrary code.
The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager EPNM, relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows...
The vulnerability of the data collection and aggregation application from Cisco Spaces Connectors lies in the lack of measures taken to neutralize special elements used in operating system teams. This allows attackers to enhance their privileges and execute arbitrary code with root privileges.
The vulnerability of the data collection and aggregation application from Cisco Spaces Connector relates to the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary...
The vulnerability of the AVRCP protocol implementation in the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.
The vulnerability of the AVRCP protocol implementation in the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the API interface of the 5G HPE Aruba Networking Private 5G Core platform allows a attacker to disclose protected information.
The vulnerability of the API interface of the 5G HPE Aruba Networking Private 5G Core platform relates to the insecure storage of confidential information. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the system() function in the bin/goahead software for D-Link DIR-816 A2 wireless routers allows a hacker to execute arbitrary code.
The vulnerability of the system function in the bin/goahead microprogramming software for D-Link DIR-816 A2 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system allows a violator to execute arbitrary code within the context of the root user.
The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...
The vulnerability of the IBM Aspera Faspex file-sharing application, related to the implementation of security functions at the client side, allows attackers to compromise the integrity of the protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information from a remote location...
The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.
The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the default_version_is_new() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the defaultversionisnew function in Netgear’s JWNR2000v2 router software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrit...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.
The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the sub_41A914() function in Netgear JWNR2000v2 software allows a hacker to cause a service failure.
The vulnerability of the sub41A914 function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to cause service interruption...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the sub_435E04() function in Netgear JWNR2000v2 software allows a hacker to execute arbitrary commands.
The vulnerability of the sub435E04 function in Netgear JWNR2000v2 microprogrammed software lies in the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...
The vulnerability of the microprogramming software of the Aitemi M300 wireless signal amplifiers (MT02) arises from the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability of the microprogramming software of the Aitemi M300 MT02 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the SSID identifier. Exploiting this vulnerability can allow a remote attacker...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.
The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications. This vulnerability allows attackers to gain unauthorized access to protected information.
The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications, exposes security flaws in access control for personal information. Exploiting this vulnerability could allow unauthorized actors to gain unauthorized access to...
The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the NVIDIA Virtual GPU Manager driver allows a hacker to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause a service failure.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to operations that occur outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause...
The vulnerability of the CFNetwork component allows attackers to escalate their privileges on operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS.
The vulnerability of the CFNetwork component in operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability in the web interface for managing Microprogramming Software on Intelbras RX 1500 and RX 3000 allows attackers to carry out cross-site scripting attacks.
The vulnerability of the web interface for managing Microprogramming Software on Intelbras RX 1500 and RX 3000 is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sendi...
The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems allows a perpetrator to execute arbitrary commands.
The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
The vulnerability of the Wlan STA Driver microprogramming software microcircuit from MediaTek allows a hacker to disclose protected information.
The vulnerability of the Wlan STA Driver microprogramming software from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the software...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows unauthorized users to gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the driver module drivers/net/vxlan/vxlan_core.c of Linux operating systems allows a attacker to compromise the integrity of protected information.
The vulnerability in the drivers/net/vxlan/vxlancore.c module of Linux operating systems is related to the state of the network competition. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...
The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos OS allows a attacker to trigger a service failure.
The vulnerability of the SIP ALG layer application-level firewall on Juniper Networks Junos OS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the command-line interface (CLI) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows attackers to increase their privileges.
The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the native code library for analyzing and linearizing PGF grammars lies in its memory management after deallocation. This allows attackers to gain elevated privileges within the system.
The vulnerability of the native code library for analyzing and linearizing PGF grammars is related to the use of memory after deallocation in Decoder.cpp. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.
The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.
The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Sensedia API Platform Tools for Jenkins servers, related to the storage of tokens in unencrypted form, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Sensedia Api Platform tools for Jenkins servers relates to the storage of tokens in an unencrypted form within the file com.sensedia.configuration.SensediaApiConfiguration.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...
The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN allows intruders to implant or modify the firmware.
The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to access control deficiencies. Exploiting this vulnerability can allow attackers to implant or modify the firmware...
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of PRC files. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of PRC files. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...
The vulnerability of the `static_key_fast_inc_not_disabled()` function in the `net/ipv4/tcp_ao.c` component of the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the statickeyfastincnotdisabled function in the net/ipv4/tcpao.c component of the Linux kernel relates to the disclosure of information. Exploiting this vulnerability could allow an attacker to cause a service failure...