98239 matches found
Adobe After Effects Buffer Overflow
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Siemens SINEC NMS Uncontrolled Search Command Execution
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code with administrator privileges using a specially craft...
SK Hynix DDR5 Rowhammer Attack
The vulnerability of SK Hynix’s DDR5 memory modules is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to perform a Rowhammer attack alter data in memory cells by repeatedly accessing the same memory block over short periods of time...
EcoStruxure Process Expert Privilege Escalation
The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...
OpenSky Flight Planning SQL Injection
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getdoc parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
Ollama readGGUFV1String Heap Buffer Overflow DoS
The vulnerability of the readGGUFV1String function in the Ollama system, which is used for running and managing large language models LLMs, is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Rust Binder Driver DoS
The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel relates to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...
Android Frameworks Base Privilege Escalation
The vulnerability of the NotificationStation.java file in the Android operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, who operates remotely, to enhance their privileges...
e1000 Component Maintenance Failure
The vulnerability of the e1000 component in the QEMU hardware emulation software is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
UTT 512W router strcpy() Code Execution
The vulnerability of the strcpy function in the /goform/formConfigCliForEngineerOnly file of the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code by...
cw_acd Local Management Command Execution
The vulnerability of cwacd on the local management platform FortiSwitchManager and the FortiOS operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafte...
untgz Heap Buffer Overflow DoS
The vulnerability of the TGZfname function in the untgz utility from the zlib compression library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...
Agere Modem Driver Privilege Escalation
The vulnerability of the Agere Modem Driver for Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft SharePoint Server SQL Injection
The vulnerability of the Microsoft SharePoint Server software relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Cockpit SSRF
The vulnerability of the cockpit-project.org website related to the Cockpit server management system involves insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...
Tenda M3 Router DoS
The vulnerability of the formSetRemoteInternetLanInfo function /goform/setInternetLanInfo in the Tenda M3 router software lies in the issue of the operation going beyond the buffer in memory when processing parameters such as portIp, portMask, portGateWay, portDns, and portSecDns. Exploiting this...
UTT 1200GW Network Device Buffer Overflow
The vulnerability of the microprogrammed network devices UTT 1200GW and UTT 1250GW lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
UniFi Access Control Authentication Bypass
The vulnerability of the UniFi Access access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the system...
Reolink app ForegroundLockActivity WelcomeActivity Unauthorized Access
The vulnerability of the ForegroundLockActivity and WelcomeActivity functions in the Reolink app for video surveillance management involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...
RestFilter Component Code Execution
The vulnerability of the RestFilter component of the web interface for managing the Zimbra Collaboration Suite email management system is related to deficiencies in the mechanism for processing request parameters. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Google Chrome Password Manager Disclosure Code Execution
The vulnerability of the Password Manager component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to disclose sensitive information and execute arbitrary codes...
SROOT Component Unauthorized Access
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
DirectX Graphics Kernel Privilege Escalation
The vulnerability of the DirectX Graphics Kernel subsystem Dxgkrnl.sys in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
Google Chrome Devtools Unauthorized Access
The vulnerability of Google Chrome’s Devtools component is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
TOTOLINK A3300R cgi-bin/cstecgi.cgi setDmzCfg DoS
The vulnerability of the setDmzCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Heap Buffer Overflow DoS
The vulnerability of the rosertdevicedown function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Punycode Privilege Escalation
The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
PyTorch DoS
The vulnerabilities of the methods torch.nn.Conv2d, torch.nn.functional.hardshrink, torch.Tensor.view, and torch.Tensor.mv in the PyTorch machine learning framework are related to uncontrolled resource consumption. Exploiting these vulnerabilities could allow a malicious actor to cause service...
D-Link DIR-823X Router Sub Process Command Execution
The vulnerability of the sub412E7C function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...
Linux kernel USB module DoS
The vulnerability of the Linux operating system’s kernel USB module is related to premature release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Cisco IOS XE Path Traversal
The vulnerability of Cisco IOS XE operating systems is related to incorrect restrictions on path names in the restricted access directory. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...
Baidu Antivirus BdApiUtil Terminate Process
The vulnerability of the driver BdApiUtil of Baidu Antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary system processes by introducing the malicious driver into the system...
Tenda AC6 fromSetSysTime() Code Execution
The vulnerability of the fromSetSysTime function in Tenda AC6 router software stems from the operation that occurs outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
Linux rtnl_create_link Buffer Overflow DoS
The vulnerability of the rtnlcreatelink function in the include/net/netdevlock.h library of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Phoenix Contact CHARX SEC-3000 Module Buffer Overflow
The vulnerability of the Eichrecht function in microprogrammed control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the copying of buffers without checking th...
GoBGP BGP Code Execution
The vulnerability of the pkg/packet/rtr/rtr.go component in the BGP protocol implementation, GoBGP, is related to an error in calculating the value of softwareVersionLen. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Sofia-SIP Buffer Overflow DoS
The vulnerability of the Sofia-SIP user agent library session initiation protocol is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Oracle Java SE Compiler DoS
The vulnerability of the Compiler component of the Oracle Java SE software platform and the Oracle GraalVM for JDK virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Laboratory Kasper Code Execution
The vulnerability of “Labyrinth Kasper” antivirus protection is related to an error in the processing of certain expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with SYSTEM privileges...
Linux kernel Btrfs Tree Log Buffer Overflow DoS
The vulnerability of the readone inode function in the fs/btrfs/tree-log.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Apache CloudStack Privilege Escalation
The vulnerability of the software platform that manages virtual machine environments in Apache CloudStack relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
IBM Aspera Faspex Data Compromise
The vulnerability of the IBM Aspera Faspex file-sharing application is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information from a remote location...
bin/goahead Code Execution
The vulnerability of the system function in the bin/goahead microprogramming software for D-Link DIR-816 A2 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Apache Tomcat Auth Bypass
The vulnerability of the Apache Tomcat application server arises from bypassing authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...
FortiOS Privilege Escalation
The vulnerability of the FortiOS operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands by sending specially crafted HTTP requests...
HarmonyOS Data Compromise
The vulnerability of the HarmonyOS operating system is related to insufficient handling of exceptional states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Data Compromise Component Disclosure
The vulnerability of the “Accessibility” component in iOS and iPadOS operating systems is related to deficiencies in restricting access to personal information. Exploiting this vulnerability can allow attackers to disclose protected information...
iPadOS macOS Link Handling Data Compromise
The vulnerability of iPadOS and macOS operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
Microprogramming Software XSS
The vulnerability of the web interface for managing Microprogramming Software on Intelbras RX 1500 and RX 3000 is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sendi...
NVIDIA Graphics Processor Information Disclosure
The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the disclosure of system data by unauthorized individuals. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected information...