The vulnerability of the FreeBSD operating systems, related to improper process blocking, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FreeBSD operating systems is related to improper blocking of processes. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through system calls like jail...

The vulnerability of HTTP/3 QUIC modules in NGINX Plus and NGINX OSS web servers allows attackers to cause service interruptions.

The vulnerability of HTTP/3 QUIC in NGINX Plus and NGINX OSS web servers is related to the swapping of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability of the Hardy Barth eCharge web application, related to errors in privilege management, allows a perpetrator to escalate their privileges.

The vulnerability of the Hardy Barth eCharge charging station’s web application is related to errors in privilege management. Exploiting this vulnerability allows a remote attacker to increase their privileges...

The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to gain unauthorized access to any arbitrary page.

The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to any arbitrary page...

The vulnerability of the HTTP-server’s header parsing function on the uC-HTTP server allows a attacker to execute arbitrary code.

The vulnerability of the HTTP server’s header parsing function on the uC-HTTP server is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Ultimate WP Query Search Filter plugin of the WordPress content management system arises from the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Ultimate WP Query Search Filter plugin of the WordPress content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the wireless access point Tenda A15’s microprogramming software allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface for managing microprogramming software in the Tenda A15 wireless access point is related to reading data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the implementation of the ICMPv6 protocol in the Linux operating system’s kernel, through the function fib6_add(), allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the implementation of the ICMPv6 protocol in the Linux operating system is related to the reutilization of previously freed memory due to competitive access to resources in the fib6add function within the net/ipv6/ip6fib.c module. Exploiting this vulnerability could allow a...

The vulnerability of the Rapid SCADA system, related to errors in processing the relative path to the catalog, allows a intruder to read arbitrary files.

The vulnerability of the SCADA system Rapid SCADA is related to errors in processing the relative path to the catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files by sending a specially crafted HTTP request...

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesPrevValueLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrar...

The vulnerability of the PASV mode on the Solar FTP Server allows a hacker to induce a service failure.

The vulnerability of the PASV mode on the Solar FTP Server communication server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the RGXUnbackingZSBuffer() function in the PowerVR GPU driver for Android and ChromeOS systems allows attackers to exploit their privileges.

The vulnerability of the RGXUnbackingZSBuffer function in the PowerVR GPU driver for Android and ChromeOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the setSmartPowerManagement function in the microprogramming software of Tenda AC10U allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setSmartPowerManagement function in the Tenda AC10U router’s microprogramming system is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the loginAuth function (/cgi-bin/cstecgi.cgi) in the Totolink N350RT router software allows a hacker to execute arbitrary code.

The vulnerability of the loginAuth function /cgi-bin/cstecgi.cgi in the Totolink N350RT router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the client software’s interaction with the RabbitMQ Java client, a broker for messaging services, arises from uncontrolled resource consumption. This allows attackers to cause service failures.

The vulnerability of the client software for interacting with the RabbitMQ Java client for message brokers involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the nodered function of the D-Link G416 router’s HTTP microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the nodered function of the D-Link G416 router’s HTTP microprogramming system is related to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

The vulnerability of the OpenSSH cryptographic protection lies in the possibility of introducing or modifying arguments, allowing attackers to execute arbitrary commands.

The vulnerability of the SSH protocol lies in the fact that it relies on the execution or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the SSH protocol lies in its ability to adjust packet sequence numbers during connection negotiation and delete arbitrary amounts of SSH protocol messages. This allows attackers to bypass integrity checks, disable existing security functions, and gain unauthorized access to protected information.

The vulnerability of the SSH protocol lies in the ability to alter the sequence numbers of packets during the connection negotiation process, thereby eliminating any number of SSH protocol messages. Exploiting this vulnerability allows a malicious actor to bypass integrity checks, disable existin...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Nagios XI monitoring tool arises from the lack of measures taken to neutralize special elements used in the operating system command. This allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the Nagios XI monitoring tool exists because measures are not taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges by sending a...

The vulnerability of the web application development framework web2py arises from the lack of measures taken to eliminate special elements used in the operating system’s command line. This allows attackers to execute arbitrary commands.

The vulnerability of the web2py web application development framework exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Delta Electronics InfraSuite Device Master software in monitoring devices in real time arises from an incorrect limitation on the path name to the restricted access catalog. This allows a perpetrator to write to any file anywhere within the file system.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to write to any file anywhere within the file syst...

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves accessing an uninitialized pointer, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude relates to access to an uninitialized pointer during processing of MP4 files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected informati...

The vulnerability of the application programming interface of the interactive data analysis, visualization, and Jupyter Server document creation software allows a perpetrator to gain access to confidential information.

The vulnerability of the application programming interface of the interactive data analysis, visualization, and Jupyter Server document creation software is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to...

The vulnerability of the struts.multipart.saveDir configuration on the Apache Struts software platform allows attackers to cause service failures.

The vulnerability of the struts.multipart.saveDir configuration on the Apache Struts software platform is related to insufficient control over resources with dynamic management, as a result of processing query fields whose values exceed the maxStringLength limit. Exploiting this vulnerability...

The vulnerability in the Web Browser UI interface of Google Chrome and Microsoft Edge allows attackers to perform spoofing attacks.

The vulnerability of the Web Browser UI interface in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

The vulnerability of Python libraries for working with PDF files, such as PyPDF and PyPDF2, relates to the execution of loops with an unreachable exit condition. This allows attackers to cause service failures.

The vulnerability of Python libraries for working with PDF files, such as PyPDF and PyPDF2, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Lenovo printer’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of Lenovo printer’s microprogramming software arises from an overflow in the buffer on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HTTP-based microprogramming software service of TP-Link Tapo C100 allows a intruder to trigger a service failure.

The vulnerability of the HTTP-based microprogramming software for TP-Link Tapo C100 lies in the lack of measures taken to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to cause service failures by sending specially crafted HTTP requests...

The vulnerability of the dompdf library in the PDF Generator plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the dompdf library in the PDF Generator plugin of the WordPress content management system is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of the /goform/formSetEmail component in the D-Link N300 WI-Fi Router DIR-605L wireless access point allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/formSetEmail component in the D-Link N300 Wi-Fi Router DIR-605L wireless access point relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute arbitrary...

The vulnerability of the LinuxASMCallGraph software development tool, related to the unlimited loading of dangerous files, allows a hacker to execute arbitrary code.

The vulnerability of the LinuxASMCallGraph graph-building software lies in the ability to download unlimited quantities of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading a specially created ZIP file remotely...

The vulnerability of the `foogallery_image_editor_modal` function in the FooGallery plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the foogalleryimageeditormodal function in the FooGallery plugin of the WordPress content management system exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of the formSetNetCheckTools function in the Tenda W18E router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetNetCheckTools function in the Tenda W18E router software lies in insufficient validation of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the hostName parameter...

The vulnerability of the Connectivity Fault Management function in Juniper Networks’ Junos OS-based MX routers allows a attacker to cause a service failure.

The vulnerability of the Connectivity Fault Management CFM function in Juniper Networks’ Junos OS routers of the MX series is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of Siemens Solid Edge, a tool for design and simulation, relates to buffer overflow attacks, allowing an attacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created PAR files...

The vulnerability of the Atlassian Confluence Server web server and the date of the Confluence Data Center is related to deficiencies in the authentication process, which allow attackers to increase their privileges.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability in the /adms/classes/Users.php script of the Auto Dealer Management System allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SourceCodester Auto Dealer Management System’s /adms/classes/Users.php script is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...

The vulnerability of the JeecgBoot development platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the JeecgBoot development platform lies in the lack of measures taken to protect the SQL query structure during the processing of the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the BIG-IP access control and remote authentication configuration tool allows a perpetrator to execute arbitrary commands.

The vulnerability of the BIG-IP access control and remote authentication configuration tool lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Vulnerability of microprogrammed programmable logic controllers MELSEC-F: related to authentication breaches, allowing attackers to circumvent existing security restrictions

The vulnerability of MELSEC-F programmable logic controllers’ microprogramming software is related to authentication breaches. Exploiting this vulnerability allows an attacker, operating remotely, to circumvent existing security restrictions...

The vulnerability of the Web Listener component of the Oracle HTTP Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Listener component of the Oracle HTTP Server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ShowTechDownloadView class in the Advanced Core Operating System (ACOS) controller A10 Thunder ADC allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ShowTechDownloadView class in the Advanced Core Operating System ACOS controller A10 Thunder ADC is related to an incorrect path name limitation for access to restricted directories. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

The vulnerability of the MallocStackLogging component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to exploit their privileges.

The vulnerability of the MallocStackLogging component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to insufficient validation of input values for the MallocStackLogging variable. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Navigation component in Google Chrome allows attackers to carry out spoofing attacks.

The vulnerability of the Navigation component in Google Chrome is related to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks using a specially created HTML page...