Splunk Web Platform Code Execution

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by writing a file to the Windows system’s root directory...

Network Address Translation Windows DoS

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Windows Mobile Broadband Driver DoS

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Network Address Translation Windows DoS

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Tenda FH1206 fromqossetting() Function Compromise Data Compromise

The vulnerability of the fromqossetting function /goform/qossetting of the Tenda FH1206 router’s microprogramming system is related to the operation that occurs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the...

Message Handler Component DS-7604NXI-K1/4P Disclosure Information Malfunction

The vulnerability of the Message Handler component in the DS-7604NXI-K1/4P microprogramming system for IP cameras involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause malfunctions in the...

ArubaOS CLI Command Execution

The vulnerability of the CLI interface of ArubaOS operating systems is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

mysql2 readCodeFor Code Execution

The vulnerability of the readCodeFor function in the mysql2 library relates to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TOTOLINK AC1200 T8 Router Command Execution

The vulnerability of the setTracerouteCfg function in the TOTOLINK AC1200 T8 router software exists because measures to neutralize the special elements used in the operating system command have not been taken. Exploiting this vulnerability could allow a remote attacker to execute arbitrary comman...

PDF-XChange Editor Heap Buffer Overflow

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

D-Link cgiMovePhoto() Arbitrary Command Execution

The vulnerability of the cgiMovePhoto function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4,...

Apache Tomcat JK Connector Disclosure DoS

The vulnerability of the JkShmFile directive in the modjk module of the Apache Tomcat JK Connector is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to disclose information about the modjk module or cause service failures...

D-Link cgi_del_photo() Arbitrary Command Execution

The vulnerability of the cgidelphoto function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4,...

PDFium PDF-content processor in Code Execution

The vulnerability of the PDFium PDF-content processor in Google Chrome browser involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, cause service failures, or disclose protected information by sending a...

JavaScript script handlers Disclosure Protected Information

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created HTML page...

Ivanti Cloud Services Appliance Command Injection Code Execution

The vulnerability of the Ivanti Cloud Services Appliance exists because measures to neutralize special elements used in the operating system are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OpenCV Heap Buffer Overflow DoS

The vulnerability of the OptFeature function in the objdetect/src/cascadedetect.hpp component of the computer vision library OpenCV involves reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Rockwell Automation FactoryTalk View Site Edition Code Execution

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition stems from the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary cod...

Zimbra Collaboration Suite Arbitrary JavaScript Execution

The vulnerability of the administration interface of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code by sending a...

netshop CMS Netcat XSS

The vulnerability of the “file” parameter in the netshop CMS system’s Netcat module exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute any arbitrary JavaScript code in the user’s browser remotely...

Hotspot Component Unauthorized Data Access

The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...

Cisco SPA300/SPA500 DoS

The vulnerability in the web interface for managing Microprogramming software in Cisco Small Business SPA300 and SPA500 phones is related to the copying of input data into the buffer without checking its size. Exploiting this vulnerability can allow an attacker, operating remotely, to cause servi...

Django QuerySet JSONField Code Execution

The vulnerability of the QuerySet.values and valueslist methods of the Django web application’s JSONField model is related to the lack of security measures for handling SQL queries. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted SQL query...

WebAssembly Code Execution

The vulnerability of the WebAssembly component in Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Sockets Privilege Escalation

The vulnerability of the WinSock auxiliary function driver in Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

Dell Peripheral Manager Privilege Escalation

The vulnerability of the Dell Peripheral Manager software relates to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code...

command-line interface of Juniper Code Execution

The vulnerability of the command-line interface of Juniper Networks’ Junos OS and Junos OS Evolved is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created certificate file...

Oracle Applications Framework Personalization Unauthorized Access

The vulnerability of the Personalization component of the Oracle Applications Framework, a platform for developing web applications in enterprise automation systems within the Oracle E-Business Suite, is related to improper authentication. Exploiting this vulnerability allows an attacker to gain...

Linux NFS File System Server Buffer Overflow

The vulnerability of the nfsd4decodeBitmap4 function in the Linux kernel’s NFS file system is related to buffer out-of-bounds writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

Junos OS Evolved Access Control Session Resume

The vulnerability of the Junos OS Evolved operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to resume a previous session and gain access to the user account...

PT Application Inspector Privilege Escalation

The vulnerability of the PT Application Inspector software arises due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

Work Definition Component Unauthorized Access

The vulnerability of the Work Definition component in the Oracle Enterprise Asset Management application for enterprise asset management is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to rea...

SysAid SQL Injection

The vulnerability of the software used for automating support and control of hardware and software systems from SysAid is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to carry out attacks based on SQL injections...

Portal Component Unauthorized Data Access

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or...

Fortinet FortiPortal Information Disclosure

The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool involves bypassing authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to disclose sensitive information by sending specially crafted HTT...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the gfm2tsprocesssdt function on the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...

Zemana AntiLogger IOCTL Handler DoS

The vulnerability of the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in the Zemana AntiLogger software is related to improper checking of ownership of critical resources. Exploiting this vulnerability allows an attacker to cause a service failure by executing the IOCTL...

ManageEngine ADSelfService Plus DoS

The vulnerability of the ManageEngine ADSelfService Plus password reset software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Adobe Animate Buffer Overflow

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

Apache CXF HTTP Client DoS

The vulnerability of the HTTP client component in Apache CXF web services is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Docker Desktop Communication Restriction Unauthorized Access

The vulnerability of the Docker Desktop platform for developing and delivering container applications stems from insufficient restrictions on communication channels between specified endpoints. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

Updates Service Local File Read

The vulnerability of the “Updates Service” software’s web request handler lies in the lack of limits on authentication attempts. Exploiting this vulnerability can allow a malicious actor to gain read access to local files...

FFmpeg Image Copy Plane Code Execution

The vulnerability of the imagecopyplane component libavutil/imgutils.c in the FFmpeg multimedia library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

SAP NetWeaver AS for Java Guided Procedures Unauthorized Access

The vulnerability of the Guided Procedures component in the SAP NetWeaver AS for Java web application creation and deployment software is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to...

Clang LLVM Code Execution

The vulnerability of Clang’s toolset for developing, optimizing, and compiling software involves an operation that occurs outside the buffer in memory when processing LR registers, due to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code o...

Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the getipaddrdetails function /view/dhcp/dhcpConfig/commit.php in Ruijie RG-UAC router software exists due to the failure to address special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via th...

Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the getip.addrdetails function /view/vpn/autovpn/sxhvpnlic.php in Ruijie RG-UAC router software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...