Qualcomm WLAN Driver Code Execution

The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

cURL Buffer Overflow

The vulnerability of the software for interacting with servers via cURL arises due to the overflow of dynamic memory in the buffer when a FTP connection is closed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using long server...

Canon authentication bypass

The vulnerability of Canon printer’s microprogramming software is related to deficiencies in the authentication process when using standard device settings. Exploiting this vulnerability can allow a malicious actor to gain access to the device’s web interface with administrator privileges...

Node.js phpinfo Command Arbitrary Command Execution

The vulnerability of the phpinfo function in Node.js, specifically pdfinfojs, stems from the lack of mechanisms to neutralize special elements in input commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...

Grand Central Dispatch Isolated Environment Bypass

The vulnerability of Grand Central Dispatch in the Mac OS X operating system is related to errors in analyzing .plist files during authentication processes. Exploiting this vulnerability can allow attackers to circumvent restrictions in a isolated environment...

Microsoft DirectX Graphics Kernel Subsystem Privilege Escalation

The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem dxgkrnl.sys in the Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

Linux ALSA/dev/snd/timer driver Information Disclosure

The vulnerability of the ALSA/dev/snd/timer driver sound/core/timer.c in the Linux operating system is related to the disclosure of information during simultaneous data reading and analysis. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information...

libmpeg2 Media Framework Code Execution

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

Sonicwall Secure Remote Access diagnostics Component Command Execution

The vulnerability of the “diagnostics” component /cgi-bin/diagnostics of the CGI application for the web interface of the Dell Inc. Sonicwall Secure Remote Access SRA system management application is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a...

MPEG-2 decoder Code Execution

The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

libavc Code Execution

The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Android Framework Arbitrary Code Injection

The vulnerability of the software interface of the Android operating system’s Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely, using a local malicious application...

Spring AMQP DefaultDeserializer Code Execution

The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

Android Data Compromise

The vulnerability of the libmpeg2 service in the Mediaserver application of the Android operating system is related to the lack of protection for service-related data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

Internet Explorer Information Disclosure

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process memory, cause service failures, or otherwise affect the syst...

Cavium SDK RSA Key Disclosure

The vulnerability of the RSA-CRT implementation in the developer’s toolkit for devices based on Cavium processors is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to obtain encrypted RSA keys by launching attacks through external...

Android OS Code Execution

The vulnerability of the libvpx library in the mediaserver component of the libwebm framework in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory...

Internet Explorer Code Execution

A vulnerability that allows a remote attacker to execute arbitrary code or trigger a service denial using a specially crafted website...

Microsoft Office Web Apps Code Execution

The Microsoft Office Web Apps software package contains a vulnerability related to errors that occur due to improper processing of specially crafted RTF files. Exploiting this vulnerability could allow an unauthorized intruder to execute arbitrary code with privileges of the current user...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the kernel-image-2.6.8-2-k7 Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the kernel-image-2.6.8-3-mckinley-smp operating system of Debian GNU/Linux may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The ltsp-client package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality and integrity of protected information. These vulnerabilities can be exploited by malicious individuals...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the hostap-modules-2.6.8-3-k7-smp package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The kernel-build-2.6.8-3-power3 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Multimedia Toolkit QuickTime Code Execution

The vulnerability of the Multimedia Toolkit QuickTime is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted file...

MariaDB Server Information Disclosure

The vulnerability in the MySQL Server component of Oracle MySQL allows unauthorized users, after passing authentication, to manipulate data accessibility by using the stored procedure subcomponent...

Java Platform Data Compromise

The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality and integrity by utilizing the Security sub-component...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the libldap-2.3-0 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the snmpd package of the Debian GNU/Linux operating system can be exploited, leading to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the linux-headers-2.6.18-5-686-bigmem package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information...

Windows Privilege Escalation Execution Code

Vulnerability exists in the Message Queue Service MSMQ, the BthPan.sys and MQAC.sys drivers. This allows a malicious individual to elevate their privileges within the system and execute arbitrary code...

Debian GNU/Linux Data Compromise

Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-4kc-malta package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to violations of the confidentiality, integrity, and accessibility of protected information...

Java Platform Data Compromise

The vulnerability of the Java SE software platform allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using a sub-component called Deployment...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the linux-headers-2.6.26-1-all package of the Debian GNU/Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality and integrity by using the subcomponent Deployment...

SIMATIC WinCC Privilege Escalation

Access rights to system objects allow a local user to obtain limited, enhanced privileges as a user of the operating system...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program components. Exploitation of this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using the scripting component...

PDF viewer Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow a malicious actor to execute...

Android Privilege Escalation

The vulnerability of NVIDIA’s Android operating system media driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

Android Privilege Escalation

The vulnerability of NVIDIA’s Android operating system media driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

Firefox File Deletion

The vulnerability of the Mozilla Maintenance Service updater for the Firefox browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files by manipulating local files...

ESET NOD32 Code Execution

The vulnerability of the archive support module of the ESET NOD32 antivirus software arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by setting a high value for the language used in the installation fi...

MySQL Information Disclosure

The vulnerability of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise accessibility by affecting the FTS server...

MySQL Information Disclosure

The vulnerability of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise accessibility by affecting the Optimizer server...

libvirt DoS

The vulnerability of the virStorageVolCreateXML program in the virtualization management library libvirt is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to cause a service failure abrupt termination of operations by triggering a disconnected...

Android Privilege Escalation

The vulnerability of the Widevine QSEE TrustZone application in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application that utilizes QSEECOM...

Lepide Active Directory Self Service Password Change

The vulnerability of the Lepide Active Directory Self Service tool is related to errors in the implementation of the password reset function. Exploiting this vulnerability could allow an attacker to change the passwords of arbitrary users through a specially created request...

Safari iOS Code Execution

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...

Google Chrome Access Restriction DoS

The vulnerability of the ContainerNode::parserRemoveChild function in the Blink component of Google Chrome is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to circumvent existing access restrictions or cause service failures...

iOS File System Restriction Bypass

The vulnerability of the Location Framework component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on access to file system objects through symbolic links...