95883 matches found
The vulnerability of the UNIX command-line utility set, BusyBox, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.
The vulnerability of the UNIX command-line utility BusyBox is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
The vulnerability of the PowerDNS DNS server, related to the unlimited distribution of resources, allows a hacker to cause a service failure.
The vulnerability of the PowerDNS server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Windows Active Directory operating system management and reporting software allows attackers to perform spear-phishing attacks.
The vulnerability of the Windows Active Directory operating system management and reporting software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows attackers to carry out spear-phishing attacks...
The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the httplanport parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially...
The vulnerability of the CsteSystem (/cgi-bin/cstecgi.cgi) function in the Totolink A7100RU router software allows a hacker to bypass existing security restrictions and execute arbitrary commands.
The vulnerability of the CsteSystem /cgi-bin/cstecgi.cgi function in the Totolink A7100RU router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command processing when handling the resetFlags parameter. Exploiting...
The vulnerability of the GNU Binutils development tool, related to reading beyond the buffer boundaries in memory, allows an attacker to disclose protected information or cause system failures.
The vulnerability of the GNU Binutils development tool lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to execute DOM-Based XSS attacks.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute a DOM-Based XSS attack remotely...
The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the mdp5_pipe_assign() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_pipe.c file of the DRI support driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mdp5pipeassign function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause system...
The vulnerability of the format_show() function in the arch/powerpc/kernel/secvar-sysfs.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the formatshow function in the arch/powerpc/kernel/secvar-sysfs.c module of the PowerPC platform in Linux operating systems is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the print spooler driver for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Print Spooler in operating systems related to printing vulnerabilities involve the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Winlogon entry program in Windows operating systems is related to the incorrect definition of symbolic links during access to the file. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer memory limit, allowing an attacker to execute arbitrary code.
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC21 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC21 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...
The vulnerability of the microprogrammed wireless Wi-Fi router Tenda W30E, related to deficiencies in authentication mechanisms, allows attackers to bypass security restrictions and enhance their privileges.
The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...
The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, which stems from the use of strictly encrypted user credentials, allows a hacker to escalate their privileges.
The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
The vulnerability of the Android Frameworks Base repository of the Android operating system allows attackers to enhance their privileges.
The vulnerability of the NotificationStation.java file in the Android operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, who operates remotely, to enhance their privileges...
The vulnerability of the WebLogic Server Proxy Plugin module of the Oracle HTTP Server allows a perpetrator to gain unauthorized access to the system.
The vulnerability of the WebLogic Server Proxy Plugin module of the Oracle HTTP Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the system by sending specially crafted HTTP...
The vulnerability of the Nimes Backup and Recovery software for automated backup and data recovery operations lies in its lack of measures to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.
The vulnerability of the Nimes Backup and Recovery software for automated backup and data recovery operations is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute...
The vulnerability of the strcpy() function in the /goform/formUserStatusRemark file of the UTT 1250GW network device-specific software, which allows for copying buffers without checking the size of the input data, enables attackers to execute arbitrary code.
The vulnerability of the strcpy function in the /goform/formUserStatusRemark file of the UTT 1250GW network device software is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the strcpy() function in the /goform/formConfigCliForEngineerOnly file of the UTT 512W router microprogramming system, which allows a attacker to execute arbitrary code.
The vulnerability of the strcpy function in the /goform/formConfigCliForEngineerOnly file of the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code by...
The vulnerability of the NTLM (NT LAN Manager) protocol implementation in Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the NTLM NT LAN Manager protocol in Windows operating systems is related to incorrect external handling of file names or file paths when processing hashes. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
The vulnerability of cw_acd on the local management platform FortiSwitchManager and the FortiOS operating systems allows a perpetrator to execute arbitrary commands.
The vulnerability of cwacd on the local management platform FortiSwitchManager and the FortiOS operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafte...
The vulnerability of the SAML Assertion Consumer Service (ACS) server of OpenVPN Access allows a perpetrator to execute arbitrary HTML code or web scripts.
The vulnerability of the SAML Assertion Consumer Service ACS of the OpenVPN Access server is related to the lack of security measures taken for the structure of the web page during the processing of the RelayState parameter. Exploiting this vulnerability allows a malicious actor to execute...
The vulnerability of the ThreatSonar Anti-Ransomware detection and response mechanism lies in its failure to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary code.
The vulnerability of ThreatSonar Anti-Ransomware in detecting and responding to threats stems from the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of software for the design, operation, and maintenance of technological installations—including COMOS, Simcenter 3D, and Simcenter Femap—is related to errors in the authentication process. These errors allow attackers to carry out “man-in-the-middle” attacks.
The vulnerabilities of the software for designing, operating, and maintaining technological installations—COMOS, Simcenter 3D, and Simcenter Femap—are related to errors in the authentication process. Exploiting these vulnerabilities can allow a remote attacker to carry out a “man-in-the-middle”...
The vulnerability of the “Health check-up” platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows unauthorized access by attackers to protected information.
The vulnerability of the “Health check-up” patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the driver `drivers/input/keyboard/cros_ec_keyb.c` of the built-in keyboard controller for ChromeOS’s EC kernel of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of FortiOS operating systems and FortiProxy proxy servers in terms of authentication procedures allows attackers to gain unauthorized access to protected information.
The vulnerabilities of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to gain unauthorized access to...
Vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server, related to buffer overflows in dynamic memory, allow attackers to execute arbitrary code.
The vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server for protecting against Internet attacks are related to buffer overflows in dynamic memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary co...
The vulnerability of the CMS BuilderEngine system, related to the unlimited uploading of dangerous types of files, allows a hacker to execute remote code.
The vulnerability of the CMS BuilderEngine content management system is related to the unlimited uploading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute malicious code...
The vulnerability of the DecodeWinevt() function in the Wazuh intrusion detection and prevention system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the DecodeWinevt function in the Wazuh intrusion detection and prevention system is related to the output of the operation being written beyond the buffer in memory. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...
The vulnerability of the NVIDIA GPU Display Driver lies in its uncontrolled search path, which allows attackers to trigger system failures, gain elevated privileges, execute arbitrary code, and forge protected information.
The vulnerability of the NVIDIA GPU Display Driver is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, and forge protected information...
The vulnerability of the sub_422880() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.
The vulnerability of the sub422880 function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the qed_mcpTraceDump() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the qedmcpTraceDump function in the Linux operating system’s kernel is related to an uncontrolled, exploitable assertion. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the web interface of the script /htdocs/cgibin/hedwig.cgi, a microprogramming system for D-Link DIR-852 routers, allows a attacker to execute arbitrary commands.
The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...
The vulnerability of the vma_modify() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the vmamodify function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, allows a hacker to gain access and modify data.
The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, is related to a data source confirmation error. Exploiting this vulnerability could allow an attacker operating remotely to gain access to modify data...
The vulnerability of AMD’s microprogramming software for graphics processors allows attackers to exploit their privileges.
The vulnerability of the SMM microprogramming system software for AMD graphics processors is related to insufficient control over the flow of execution in AmdCpmOemSmm. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the formSetCfm() function in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formSetCfm function in the Tenda AC6 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability in the GeoServer Web Feature Service (WFS) software, used for managing and publishing geospatial data on the OSGeo GeoServer server, allows a perpetrator to disclose protected information.
The vulnerability in the GeoServer Web Feature Service WFS software, used for managing and publishing geospatial data on the OSGeo GeoServer server, is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose...
The vulnerability of the Bluetooth Low Energy (BLE) technology of Realtek’s RTL8762E software allows a intruder to trigger a service failure.
The vulnerability of the Bluetooth Low Energy BLE technology of Realtek’s RTL8762E software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a service failure...
The vulnerability of the Lighttpd microprogramming software-based web server TRENDnet TN-200 allows a hacker to disclose protected information.
The vulnerability of the Lighttpd microprogramming software-based network storage server TRENDnet TN-200 is related to the use of a static key neV3rUseMe. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the `net_sched` component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the netsched component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the cma_netevent_callback() function in the drivers/infiniband/core/cma.c module of Linux kernel allows a hacker to cause a service failure.
The vulnerability of the cmaneteventcallback function in the drivers/infiniband/core/cma.c module of Linux kernels is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...