95883 matches found
The vulnerability of the sub_1225C function in the mainfunction.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary commands.
The vulnerability of function sub1225C in the mainfunction.cgi web interface of the DrayTek Vigor router software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the Comment module in the Drupal CMS system allows a hacker to trigger a service failure.
The vulnerability of the Comment module in the Drupal CMS system relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the mxsfb component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the mxsfb component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the RMT_invite.cgi script of NETGEAR R7000 Wi-Fi routers allows a hacker to execute arbitrary commands.
The vulnerability in the RMTinvite.cgi script of NETGEAR R7000 Wi-Fi routers lies in the lack of data cleaning at the control level when processing the parameter devicename2. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
The vulnerability of the n_gsm component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.
The vulnerability of the ngsm component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the khugepaged component in the Linux operating system’s kernel allows a hacker to read and manipulate data.
The vulnerability of the khugepaged component in the Linux operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to read and manipulate data...
A vulnerability in the f2fs kernel component of the Linux operating system, which allows a hacker to trigger a service failure.
The vulnerability in the f2fs kernel of the Linux operating system is related to improper input validation in the f2fsPutSuper function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Views component in Google Chrome allows a hacker to escape from an isolated environment.
The vulnerability of the Views component in Google Chrome is related to improper implementation. Exploiting this vulnerability can allow an attacker to escape from a isolated environment using a specially crafted HTML page...
The vulnerability in the component `/src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r` of the software for automatically generating integrated user interfaces in Umbraco UI-O-Matic allows a hacker to execute arbitrary SQL code.
The vulnerability of the /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r component of the software for automatically generating integrated user interfaces in Umbraco UI-O-Matic is related to the lack of security measures for handling SQL queries. Exploiting this vulnerability allows a...
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the ability to read data beyond the acceptable range in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to reading data beyond the permissible range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created WRL files...
The vulnerability of the Firmware Update Handler component of the Siemens SINEMA Remote Connect server allows a hacker to gain increased privileges.
The vulnerability of the Firmware Update Handler component in Siemens SINEMA Remote Connect relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of microprogrammed software in industrial routers of the SCALANCE M-800 family (including S615, MUM-800, and RM1224) arises from incorrect restrictions on path names in the limited-access catalog, allowing attackers to influence the integrity of the system.
The vulnerability of microprogrammed software in industrial routers of the SCALANCE M-800 family including S615, MUM-800, and RM1224 is related to incorrect restrictions on path names in the limited-access catalog. Exploiting this vulnerability can allow a malicious actor to influence the integri...
The vulnerability of the network control tools Ivanti Connect Secure (previously Pulse Connect Secure) and Ivanti Policy Secure access, related to incorrect processing of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Ivanti Connect Secure previously Pulse Connect Secure and Ivanti Policy Secure access controls lies in the improper processing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...
The vulnerability of the SINEC INS network infrastructure management software lies in the use of a hard-crypted cryptographic key, which allows an attacker to gain unauthorized access to protected information.
The vulnerability of the SINEC INS network infrastructure management software is related to the use of a hard-crypted cryptographic key. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PAR file...
The vulnerability in the web interface of the software for managing SINEC INS network infrastructure’s management system arises from incorrect validation of input data. This allows a hacker to execute arbitrary code.
The vulnerability of the web interface for managing software used to manage SINEC INS network infrastructure is related to improper validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the udc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the udc component in the Linux operating system’s kernel is related to improper locking of resources in the usbepqueue function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of GigaDevice’s GD32 microprogrammed software controllers, models GD32E23x and GD32E50x, is related to access control deficiencies. This vulnerability allows attackers to read data from SRAM or alter its state.
The vulnerability of GigaDevice’s GD32 microprogrammed device controllers, such as GD32E23x and GD32E50x, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read data from SRAM or alter its state...
The vulnerability of the NSS application library for application development in Firefox web browser and Thunderbird email client involves unlimited memory allocation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the NSS application library for application development in the Firefox web browser and Thunderbird email client involves the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...
The vulnerability of GRUB’s NTFS driver, a loader program for operating systems, relates to reading memory beyond the buffer boundaries, allowing an attacker to read the contents of the RAM.
The vulnerability of the GRUB loader driver for NTFS operating systems involves reading memory beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to read the contents of the RAM...
The vulnerability of the msdosfs driver in the FreeBSD operating system, related to the use of an uninitialized resource, allows a hacker to read data from deleted system files.
The vulnerability of the msdosfs driver in the FreeBSD operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a hacker to read data from deleted system files...
The vulnerability of the `changeFileRights` function in the `osUtils.cpp` module of the database management system “Red Database” is related to improper access control, allowing attackers to trigger a service failure for the DBMS.
The vulnerability of the changeFileRights function in the osUtils.cpp module of the database management system “Red Database” is related to the fact that if the server is run under the user’s identity other than the default user reddatabase, then running the server’s utilities under the root user...
The vulnerability of the WireGuard component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the WireGuard component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the getpeer function. Exploiting this vulnerability can allow a hacker to trigger a service failure...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from context switching errors related to privilege escalation. This allows attackers to increase their privileges and gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to errors in privilege context switching. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...
The vulnerability of the Orchid Platform, related to the use of dangerous methods or functions, allows a hacker to obtain the server’s IP address.
The vulnerability of the Orchid Platform is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain the server’s IP address through a brute-force attack...
The vulnerability of the dwc3-am62 component of the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the dwc3-am62 component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a regular expression c with inefficient computational complexity, allowing a hacker to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures whe...
The vulnerability of the netdev component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the netdev component in the Linux operating system’s kernel is related to errors in resource management within the netdev Triggered Notifications function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the command-line interface (CLI) of Juniper Networks Junos OS Evolved operating systems, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the command-line interface CLI of Juniper Networks Junos OS Evolved operating systems is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Window.open() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Window.open function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the disclosure of information through improper handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the w3dtk.dll library in Autodesk Navisworks allows a perpetrator to execute arbitrary code.
The vulnerability of the w3dtk.dll library in Autodesk Navisworks software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the platform driver for video surveillance systems called Siveillance Video (formerly known as Siveillance VMS) allows a intruder to execute arbitrary code.
The vulnerability of the platform driver for video surveillance systems called Siveillance Video formerly known as Siveillance VMS lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The software’s vulnerability related to secure remote access to data in Palo Alto Networks’ GlobalProtect App allows a perpetrator to escalate their privileges. This vulnerability arises from errors in privilege management.
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers relates to writing beyond the buffer boundaries in memory. This allows an attacker to write data into the kernel memory beyond the boundaries of the system buffer.
The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to write data into the kernel memory beyond the system buffer limits...
The vulnerability of components of web conference services and applications of the Mitel MiCollab platform, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary code.
The vulnerability of the components of web conference services and the collaboration application platform Mitel MiCollab is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the configuration settings in the directory /api/configs of the Nginx UI server’s user interface allows a malicious actor to read arbitrary files.
The vulnerability of the configuration settings in the directory /api/configs of the Nginx UI server’s user interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files...
The vulnerability of the ft_payloads_dns() function in the web interface of the DrayTek Vigor router software allows a hacker to induce a service failure.
The vulnerability of the ftpayloadsdns function in the web interface of the DrayTek Vigor router software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the process.binding() function in the Node.js software platform allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the process.binding function in the Node.js platform is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...
The vulnerability of the Auctions component of the Oracle Sourcing supply management platform, a part of the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to create, modify, and delete data.
The vulnerability of the Auctions component of the Oracle Sourcing supply management platform, part of the Oracle E-Business Suite, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...
The vulnerability of the Pandoc format conversion library written in Haskell allows attackers to create or rewrite any files in the system.
The vulnerability of the Pandoc format conversion library written in Haskell is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to create or overwrite arbitrary files in the system by using the --extract-media parameter or by exporting files in PDF...
The vulnerability of the Graphics component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Application Programming Interface (API) for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Application Programming Interface API of Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows a hacker to replace the user’s interface.
The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the fromqossetting() function (/goform/qossetting) in the Tenda FH1206 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromqossetting function /goform/qossetting of the Tenda FH1206 router’s microprogramming system is related to the operation that occurs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the Ivanti Cloud Services Appliance’s network interface, related to incorrect path name restrictions for the restricted access catalog, allows a hacker to execute arbitrary code.
The vulnerability of the Ivanti Cloud Services Appliance relates to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the readCodeFor function in the mysql2 library allows a hacker to execute arbitrary code.
The vulnerability of the readCodeFor function in the mysql2 library relates to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the CLI interface of ArubaOS operating systems allows a perpetrator to execute arbitrary commands.
The vulnerability of the CLI interface of ArubaOS operating systems is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of ESET antivirus protection lies in the improper handling of symbolic links before accessing a file, which allows a hacker to trigger a service failure.
The vulnerability of ESET antivirus protection is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the mod_jk module of the Apache Tomcat JK Connector allows attackers to disclose sensitive information or cause service failures.
The vulnerability of the JkShmFile directive in the modjk module of the Apache Tomcat JK Connector is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to disclose information about the modjk module or cause service failures...