98239 matches found
Windows Graphics DoS
The vulnerability of the Windows Graphics component in Windows operating systems is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...
Linux SMB Direct Buffer Overflow DoS
The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...
Docker Desktop Code Execution
The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary cod...
IndustrialPI Webstatus Full Control
The vulnerability of the IndustrialPI Webstatus component of the Pilz IndustrialPI device lies in the lack of a mechanism for converting data types. Exploiting this vulnerability could allow a malicious actor to gain full control over the device from a remote location...
TP-Link Archer AX53 tmpserver Module Code Execution
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
Adobe After Effects Buffer Overflow
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Siemens SINEC NMS Uncontrolled Search Command Execution
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code with administrator privileges using a specially craft...
SK Hynix DDR5 Rowhammer Attack
The vulnerability of SK Hynix’s DDR5 memory modules is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to perform a Rowhammer attack alter data in memory cells by repeatedly accessing the same memory block over short periods of time...
EcoStruxure Process Expert Privilege Escalation
The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...
OpenSky Flight Planning SQL Injection
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getdoc parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
Ollama readGGUFV1String Heap Buffer Overflow DoS
The vulnerability of the readGGUFV1String function in the Ollama system, which is used for running and managing large language models LLMs, is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Rust Binder Driver DoS
The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel relates to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...
Android Frameworks Base Privilege Escalation
The vulnerability of the NotificationStation.java file in the Android operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, who operates remotely, to enhance their privileges...
e1000 Component Maintenance Failure
The vulnerability of the e1000 component in the QEMU hardware emulation software is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Nimes Backup and Recovery Command Injection
The vulnerability of the Nimes Backup and Recovery software for automated backup and data recovery operations is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute...
UTT 512W router strcpy() Code Execution
The vulnerability of the strcpy function in the /goform/formConfigCliForEngineerOnly file of the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code by...
cw_acd Local Management Command Execution
The vulnerability of cwacd on the local management platform FortiSwitchManager and the FortiOS operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafte...
untgz Heap Buffer Overflow DoS
The vulnerability of the TGZfname function in the untgz utility from the zlib compression library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...
Agere Modem Driver Privilege Escalation
The vulnerability of the Agere Modem Driver for Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft SharePoint Server SQL Injection
The vulnerability of the Microsoft SharePoint Server software relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Cockpit SSRF
The vulnerability of the cockpit-project.org website related to the Cockpit server management system involves insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...
Tenda M3 Router DoS
The vulnerability of the formSetRemoteInternetLanInfo function /goform/setInternetLanInfo in the Tenda M3 router software lies in the issue of the operation going beyond the buffer in memory when processing parameters such as portIp, portMask, portGateWay, portDns, and portSecDns. Exploiting this...
UTT 1200GW Network Device Buffer Overflow
The vulnerability of the microprogrammed network devices UTT 1200GW and UTT 1250GW lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
UniFi Access Control Authentication Bypass
The vulnerability of the UniFi Access access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the system...
Reolink app ForegroundLockActivity WelcomeActivity Unauthorized Access
The vulnerability of the ForegroundLockActivity and WelcomeActivity functions in the Reolink app for video surveillance management involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...
RestFilter Component Code Execution
The vulnerability of the RestFilter component of the web interface for managing the Zimbra Collaboration Suite email management system is related to deficiencies in the mechanism for processing request parameters. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Google Chrome Password Manager Disclosure Code Execution
The vulnerability of the Password Manager component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to disclose sensitive information and execute arbitrary codes...
WatchGuard Fireware CLI Code Execution
The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system arises from an operation where data is written beyond the buffer in memory as a result of executing a certificate request command. Exploiting this vulnerability allows a remote attacker to execute...
SROOT Component Unauthorized Access
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
DirectX Graphics Kernel Privilege Escalation
The vulnerability of the DirectX Graphics Kernel subsystem Dxgkrnl.sys in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
Google Chrome Devtools Unauthorized Access
The vulnerability of Google Chrome’s Devtools component is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
TOTOLINK A3300R cgi-bin/cstecgi.cgi setDmzCfg DoS
The vulnerability of the setDmzCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Heap Buffer Overflow DoS
The vulnerability of the rosertdevicedown function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Punycode Privilege Escalation
The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Zero Trust Network Access Man-in-the-Middle
The vulnerability of the Zero Trust Network Access ZTNA technology for FortiOS operating systems and FortiProxy proxy servers in protecting against internet attacks is related to improper verification of certificate authenticity. Exploiting this vulnerability could allow a malicious actor to carr...
DCPluginServelet Servlet RCE
The vulnerability of the DCPluginServelet Servlet component of the software for managing workstations via the web interface of ManageEngine Desktop Central, along with the tools for remote monitoring and management of desktop PCs, servers, laptops, and mobile devices through ManageEngine Endpoint...
D-Link DIR-823X Router Sub Process Command Execution
The vulnerability of the sub412E7C function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...
Linux kernel USB module DoS
The vulnerability of the Linux operating system’s kernel USB module is related to premature release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Cisco IOS XE Path Traversal
The vulnerability of Cisco IOS XE operating systems is related to incorrect restrictions on path names in the restricted access directory. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...
Baidu Antivirus BdApiUtil Terminate Process
The vulnerability of the driver BdApiUtil of Baidu Antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary system processes by introducing the malicious driver into the system...
Tenda AC6 fromSetSysTime() Code Execution
The vulnerability of the fromSetSysTime function in Tenda AC6 router software stems from the operation that occurs outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
Linux rtnl_create_link Buffer Overflow DoS
The vulnerability of the rtnlcreatelink function in the include/net/netdevlock.h library of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Phoenix Contact CHARX SEC-3000 Module Buffer Overflow
The vulnerability of the Eichrecht function in microprogrammed control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the copying of buffers without checking th...
GoBGP BGP Code Execution
The vulnerability of the pkg/packet/rtr/rtr.go component in the BGP protocol implementation, GoBGP, is related to an error in calculating the value of softwareVersionLen. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Sofia-SIP Buffer Overflow DoS
The vulnerability of the Sofia-SIP user agent library session initiation protocol is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Oracle Java SE Compiler DoS
The vulnerability of the Compiler component of the Oracle Java SE software platform and the Oracle GraalVM for JDK virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Laboratory Kasper Code Execution
The vulnerability of “Labyrinth Kasper” antivirus protection is related to an error in the processing of certain expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with SYSTEM privileges...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the wledconfigure function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Btrfs Tree Log Buffer Overflow DoS
The vulnerability of the readone inode function in the fs/btrfs/tree-log.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Apache CloudStack Privilege Escalation
The vulnerability of the software platform that manages virtual machine environments in Apache CloudStack relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...