98239 matches found
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Excel Memory Object Error Access Disclosure
The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...
Wizard Component Code Injection
The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...
Windows Driver Authenticity Verification Kernel Load
The vulnerability of the Windows operating system is related to errors in the mechanism for verifying the authenticity of kernel drivers. Exploiting this vulnerability allows an attacker to load improperly signed drivers into the kernel...
Medtronic MyCareLink Patient Monitor Password Reversibility
The vulnerability of Medtronic MyCareLink Patient Monitor relates to the storage of passwords in a reversible format. Exploiting this vulnerability could allow an intruder to disclose protected information...
NVIDIA-GFX Kernel Driver Solaris Unauthorized Access
The vulnerability of the NVIDIA-GFX Kernel driver for the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data and cause service failures using ISCSI...
Oracle VM VirtualBox Full Control
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...
Trade Management UI Unauthorized Access
The vulnerability of the User Interface component of the Trade Management business platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...
Script Author Unauthorized Access
The vulnerability of the Script Author component in the scripting software for creating and processing scripts is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...
QuaZIP extractDir Code Execution
The vulnerability of the extractDir function in the JICompress component JlCompress.cpp from the QuaZIP library is related to deficiencies in checking the path name of the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a...
Microsoft Access Memory Code Execution
The vulnerability of the Microsoft Access database management system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
cURL Buffer Overflow
The vulnerability of the software for interacting with servers via cURL arises due to the overflow of dynamic memory in the buffer when a FTP connection is closed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using long server...
Canon authentication bypass
The vulnerability of Canon printer’s microprogramming software is related to deficiencies in the authentication process when using standard device settings. Exploiting this vulnerability can allow a malicious actor to gain access to the device’s web interface with administrator privileges...
Node.js phpinfo Command Arbitrary Command Execution
The vulnerability of the phpinfo function in Node.js, specifically pdfinfojs, stems from the lack of mechanisms to neutralize special elements in input commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...
Grand Central Dispatch Isolated Environment Bypass
The vulnerability of Grand Central Dispatch in the Mac OS X operating system is related to errors in analyzing .plist files during authentication processes. Exploiting this vulnerability can allow attackers to circumvent restrictions in a isolated environment...
Microsoft DirectX Graphics Kernel Subsystem Privilege Escalation
The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem dxgkrnl.sys in the Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...
Linux ALSA/dev/snd/timer driver Information Disclosure
The vulnerability of the ALSA/dev/snd/timer driver sound/core/timer.c in the Linux operating system is related to the disclosure of information during simultaneous data reading and analysis. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information...
libmpeg2 Media Framework Code Execution
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
Sonicwall Secure Remote Access diagnostics Component Command Execution
The vulnerability of the “diagnostics” component /cgi-bin/diagnostics of the CGI application for the web interface of the Dell Inc. Sonicwall Secure Remote Access SRA system management application is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a...
MPEG-2 decoder Code Execution
The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
libavc Code Execution
The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Android Framework Arbitrary Code Injection
The vulnerability of the software interface of the Android operating system’s Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely, using a local malicious application...
Spring AMQP DefaultDeserializer Code Execution
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
Android Data Compromise
The vulnerability of the libmpeg2 service in the Mediaserver application of the Android operating system is related to the lack of protection for service-related data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...
Internet Explorer Information Disclosure
The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process memory, cause service failures, or otherwise affect the syst...
Android OS Code Execution
The vulnerability of the libvpx library in the mediaserver component of the libwebm framework in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory...
Internet Explorer Code Execution
A vulnerability that allows a remote attacker to execute arbitrary code or trigger a service denial using a specially crafted website...
Microsoft Office Web Apps Code Execution
The Microsoft Office Web Apps software package contains a vulnerability related to errors that occur due to improper processing of specially crafted RTF files. Exploiting this vulnerability could allow an unauthorized intruder to execute arbitrary code with privileges of the current user...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-2-k7 Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-3-mckinley-smp operating system of Debian GNU/Linux may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The ltsp-client package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality and integrity of protected information. These vulnerabilities can be exploited by malicious individuals...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the hostap-modules-2.6.8-3-k7-smp package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The kernel-build-2.6.8-3-power3 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Multimedia Toolkit QuickTime Code Execution
The vulnerability of the Multimedia Toolkit QuickTime is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted file...
MariaDB Server Information Disclosure
The vulnerability in the MySQL Server component of Oracle MySQL allows unauthorized users, after passing authentication, to manipulate data accessibility by using the stored procedure subcomponent...
Java Platform Data Compromise
The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality and integrity by utilizing the Security sub-component...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the libldap-2.3-0 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the snmpd package of the Debian GNU/Linux operating system can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the linux-headers-2.6.18-5-686-bigmem package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information...
Windows Privilege Escalation Execution Code
Vulnerability exists in the Message Queue Service MSMQ, the BthPan.sys and MQAC.sys drivers. This allows a malicious individual to elevate their privileges within the system and execute arbitrary code...
Debian GNU/Linux Data Compromise
Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-4kc-malta package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the linux-headers-2.6.26-1-all package of the Debian GNU/Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Java Platform Data Compromise
The vulnerability of the Java SE software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using a sub-component called Deployment...
Java Runtime Environment Data Compromise
Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality and integrity by using the subcomponent Deployment...
SIMATIC WinCC Privilege Escalation
Access rights to system objects allow a local user to obtain limited, enhanced privileges as a user of the operating system...
Java Runtime Environment Data Compromise
Vulnerability of the Java Runtime Environment, related to program components. Exploitation of this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using the scripting component...
PDF viewer Code Execution
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow a malicious actor to execute...
Android Privilege Escalation
The vulnerability of NVIDIA’s Android operating system media driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...