D-Link DIR-809 Function Code Execution

The vulnerability of the FUN8004776c function /formVirtualApp of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system via the created POST request...

Cisco Small Business LLDP Switches Buffer Overflow RCE

The vulnerability of Cisco Small Business LLDP switches lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

WhatsApp Buffer Overflow Code Execution

The vulnerability of the WhatsApp messaging and video call application is related to the issue of the operation outside the buffer during the processing of SRTCP packets. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially created SRTCP packets...

Cisco Intersight Virtual Appliance Command Execution

The vulnerability of the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems is related to insufficient cleaning of input data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Word Automation Services, and the Microsoft Word text editor is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow...

Kaspersky Endpoint Security Path Restriction DoS

The vulnerability of Kaspersky Endpoint Security for Windows relates to errors during path limitation for restricted access directories. Exploiting this vulnerability can allow a malicious actor to cause a service failure when the operating system is loaded...

LLHTTP NodeJS Privilege Escalation

The vulnerability of the LLHTTP component in the NodeJS object manipulation software lies in inconsistencies during the interpretation of HTTP request headers. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Fortinet FortiClient Enterprise Management Server Privilege Escalation

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server is related to errors in device management. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

VMware vCenter Server XML Parsing DoS

The vulnerability of the VMware vCenter Server virtual infrastructure management tool is related to incorrect syntactic analysis of XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...

VAPI Service DoS

The vulnerability of the VAPI service vCenter API, a management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Google Chrome Safe Browsing RCE

The vulnerability of Google Chrome’s Safe Browsing service is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

GitLab Uncontrolled Resource Consumption DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger service interruptions by using a specially created proble...

NukeViet Shops SQL Injection

The vulnerability of the Shops module in the NukeViet content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code through the listid parameter in the detail.php script, ...

Google Chrome Autofill Auth Bypass

The vulnerability of Google Chrome’s Autofill component is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to confidential information...

Google Chrome Navigation Authorization

The vulnerability of Google Chrome’s navigation function is related to the insufficient implementation of security policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

Google Chrome Same Origin Policy Information Disclosure

The vulnerability of Google Chrome’s API is related to improper implementation. Exploiting this vulnerability can allow a remote attacker to access confidential information...

FortiMail SQL Injection

The vulnerability of the FortiMail email protection system lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes or commands using specially crafted HTTP requests...

Apache Traffic Server URL Fragment Data Compromise

The vulnerability of the Apache Traffic Server web server is related to the improper processing of URL fragments. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

ImageMagick ReadBMPImage Infinite Loop DoS

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...

libpng Heap Buffer Overflow DoS

The vulnerability of the pngconvertfromtimet function in the libpng library is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

LOCMAN WorkFlow Designer Code Execution

The vulnerability of the module responsible for creating, editing, and saving diagrams of typical and working business processes, as well as defining properties of these processes, and creating lists of associated objects in the “LOZMAN Workflow Designer” system for managing engineering data and...

Moodle DoS

The vulnerability in the virtual training environment Moodle is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Ellipse APM Asset Management XSS

The vulnerability of the Ellipse APM asset management platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack...

Cisco Adaptive Security Appliance Buffer Overflow

The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to compromise the...

Buffer Overflow DoS

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot or caus...

Shopping Cart Component Oracle iStore Privilege Escalation

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

Apache Guacamole RCE

The vulnerability of the Apache Guacamole software for remote administration of client machines is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

1C:Enterprise Open Data Access Unauthorized Access

The vulnerability of the 1C:Enterprise web application relates to the storage and transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Tor Function Use-After-Free

The vulnerability of the dirvoteaddsignaturestopendingconsensus function in the Tor browser is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure remotely...

SLURM Confidential Data Access

The vulnerability of the SLURM resource manager is related to the insecure storage of confidential information. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

Apache OFBiz Resource Planning Data Restoration Data Compromise

The vulnerability of Apache OFBiz’s resource planning software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Node.js localhost6 Whitelist Access Confidential Data Compromise

The vulnerability of the Node.js software platform is related to the presence of localhost6 in the white list. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Containerd execution environment Unauthenticated Access

The vulnerability of Containerd’s execution environment is related to improper processing of the image manifest file. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...

Jackson-databind Unreliable Data Restoration

The vulnerability of the Jackson-databind library in the FasterXML project relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

Dollibarr Software SQL Injection

The vulnerability of Dollibarr’s software lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

Intel PROSet/Wireless WiFi Connection Utility Information Disclosure

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

Cisco DNA Center Archiving Function Unauthorized Access

The vulnerability of the archiving function of the Cisco DNA Center relates to the unencrypted storage of confidential information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

Cisco Immunet DLL Loading Code Execution

The vulnerability of the DLL library loading mechanism used by Cisco Immunet and Cisco Advanced Malware Protection is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a attacker to execute arbitrary code with elevated privileges...

Windows Remote Process Execution Arbitrary Code

The vulnerability of the execution environment for remote process execution in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cisco Unified Communications Manager Unauthorized Access

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service web interface is related to input validation errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Cisco Smart Software Manager On-Prem Arbitrary Command Execution

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...

Cisco Smart Software Manager On-Prem Arbitrary Command Execution

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

KTS Mayak SQL Injection

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

KTS Mayak SQL Injection

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

EKRA 200 Microprocessor Heap Buffer Overflow Information Disclosure

The vulnerability of the term.arh and core.arh components of the EKRA microprogramming system lies in the presence of pre-installed registration data. Exploiting this vulnerability can allow attackers to access confidential information and create new configuration files...

Microsoft SharePoint Server Memory Object Processing Unauthorized Access

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Intel Computing Improvement Program Privilege Escalation

The vulnerability of the Intel Computing Improvement Program’s data collection tool is due to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

WildFly Security Bypass

The vulnerability of the WildFly application server relates to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Microsoft SharePoint Server Operational Data Access

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

File type detection utility do_bid_note Heap Buffer Overflow

The vulnerability of the docorenote function in the File type-detection utility readelf.c involves reading data beyond the allocated buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...