98239 matches found
vTiger CRM Import Module Unauthenticated RCE
The vulnerability of the module for importing customer relationship management files in vTiger CRM involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information, load arbitrary files...
Lodash unset omit Data Compromise
The vulnerability of the unset and omit functions in the Lodash library is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...
EPSON L14150 RAW-printing Service DoS
The vulnerability of the RAW-printing function of the Microprogramming Software for the EPSON L14150 multifunctional device lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the device...
Go crypto/x509 DoS
The vulnerability of the Go programming language’s crypto/x509 component is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ClamAV 7z File Processing DoS
The vulnerability of the 7z-file processing mechanism of the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...
GitLab Privilege Escalation
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Google Base Sandbox Bypass Chrome Windows OS Bypass
The vulnerability of Google Base database, a browser-based system by Google, and the Google Chrome browser, as well as the Windows operating system, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism through a...
GitLab CI/CD Unauthorized Access
The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
cros_ec_ishtp_remove Heap Buffer Overflow DoS
The vulnerability of the crosecishtpremove function in the drivers/platform/chrome/crosecishtp.c module of the Chrome OS device driver support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
VPU driver Heap Buffer Overflow DoS
The vulnerability of the VPUIOCXOPENINSTANCE and vpuputinst functions in the VPU operating system driver of Android is related to the use of memory after it is freed, as a result of retrieving the driver instance from an array and resetting the reference counter before closing it. Exploiting this...
Schneider Electric Saitel DR EasyLogic T150 Privilege Escalation
The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 management platforms relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
Fortinet FortiSandbox GUI Command Execution
The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems lies in the lack of measures taken to neutralize specific elements within the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through specially...
Microsoft Exchange Server Disclosure
The vulnerability of Microsoft Exchange Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Secure Boot Bypass
The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent existing security restrictions...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
NLTK CorpusReader File Read
The vulnerability of the CorpusReader class in the NLTK library for symbolic and statistical processing of natural language is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary fil...
GL.iNet GL-MT3000 Router Arbitrary Command Injection
The vulnerability of the FUN0042e200 function in the /cgi-bin/glc module of the GL.iNet GL-MT3000 router’s microprogramming system is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to inject arbitrary...
Keycloak URL Validator Information Disclosure
The vulnerability of the URL validator in the Keycloak identity and access management software relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
LibreDWG Heap Buffer Overflow DoS
The vulnerability of the read2004compressedsection function in the library for processing DWG format files by GNU LibreDWG is related to the issue of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Chronosphere Chronocollector Unauthorized Access
The vulnerability of the Chronosphere Chronocollector data collector relates to the exposure of system data to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Helm Path Traversal Unauthorized Access
The vulnerability of the package manager for Kubernetes Helm is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...
FreeBSD setcred() Code Execution
The vulnerability of the setcred function in the operating system kernel of FreeBSD is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code, increase their privileges, or cause service failures...
Microsoft Malware Protection Engine Privilege Escalation
The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, relates to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability can allow attackers to increase their privileges...
PAN-OS IKEv2 VPN DoS
The vulnerability of the IKEv2 VPN server implementation in the PAN-OS operating system is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to cause service failures...
NPM vm2 Sandbox Bypass Code Execution
The vulnerability of the NPM package manager’s vm2 library is related to improper code generation management. Exploiting this vulnerability allows an attacker to bypass the sandbox’s security mechanisms and execute arbitrary code...
Next.js Authentication Bypass
The vulnerability of the Next.js web application development software platform lies in the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms and gain unauthorized...
SAP Commerce Cloud Information Disclosure
The vulnerability of the SAP Commerce Cloud e-commerce platform is related to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Cisco IOS XE Loader Code Execution
The vulnerability of the Cisco IOS XE operating system loader is related to a violation of the initial buffer boundary. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Cisco IOx XSS
The vulnerability in the Cisco IOx software platform’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a remote attacker to perform cross-site scripting attacks XSS...
Online Store Input Validation Code Execution
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Argo CD Cross-border Deletion Disclosure
The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD relates to improper cross-border deletion of critical data. Exploiting this vulnerability could allow a malicious actor to expose the protected information...
RoundCube Webmail Remote Image Disclosure
The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...
Linux kernel Memory Management Heap Buffer Overflow DoS
The vulnerability of the unmaphugepagerange function in the mm/hugetlb.c file, belonging to the memory management subsystem of the Linux kernel, is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
BusyBox Information Disclosure
The vulnerability of the UNIX command-line utility BusyBox is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
Fastify Node.js enhanceRequest Use-After-Free
The vulnerability of the enhanceRequest function in the Fastify Node.js software framework is related to the occurrence of interpretation conflicts when processing HTTP header names and values. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...
GNU Binutils Buffer Overflow Information Disclosure
The vulnerability of the GNU Binutils development tool lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...
Jira Connect Integration Module Authentication Bypass
The vulnerability of the Jira Connect integration module of the Git-based software platform for collaborative code development on GitLab CE/EE is related to parameter handling errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to...
smu_v12_0_fini_smc_tables Heap Buffer Overflow DoS
The vulnerability of the smuv120finismctables function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smuv120.c driver module is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
GitLab Name Link Code Execution
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Google Chrome Media DoS
The vulnerability of the Google Chrome browser’s Media component relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
Online Store Authentication Bypass
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
Winlogon Privilege Escalation
The vulnerability of the Winlogon entry program in Windows operating systems is related to the incorrect definition of symbolic links during access to the file. Exploiting this vulnerability can allow attackers to enhance their privileges...
Online Store Platform Privilege Escalation
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...
Windows Graphics DoS
The vulnerability of the Windows Graphics component in Windows operating systems is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...
Linux SMB Direct Buffer Overflow DoS
The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...
Docker Desktop Code Execution
The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary cod...
TP-Link Archer AX53 tmpserver Module Code Execution
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
Siemens SINEC NMS Uncontrolled Search Command Execution
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code with administrator privileges using a specially craft...
SK Hynix DDR5 Rowhammer Attack
The vulnerability of SK Hynix’s DDR5 memory modules is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to perform a Rowhammer attack alter data in memory cells by repeatedly accessing the same memory block over short periods of time...