92298 matches found
The vulnerability of the Ruby interpreter, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to trigger a service failure.
The vulnerability of the Ruby interpreter is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Vulnerability of Microsoft SharePoint, Microsoft Office, Office 365, and Microsoft Word software packages, allowing a hacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint, Microsoft Office, Office 365, and the Microsoft Word text editor relates to the execution of operations outside the buffer in memory. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code on the target system with...
The vulnerability in the Google Chrome web browser, related to incorrect filtering of ports by CORS, allows a hacker to bypass existing security restrictions.
The vulnerability in the Google Chrome web browser is related to improper filtering of ports by CORS. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions through a specially crafted web page...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises from reading beyond the buffer boundary in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
The vulnerability of the bitrv2 function (fft4g.c) in the Sound eXchange audio editor allows a hacker to cause a service failure.
The vulnerability of the bitrv2 function fft4g.c in the Sound eXchange audio editor is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the AuthIoDrv driver of the Secret Net Studio security system, which allows a hacker to cause a service failure.
The vulnerability of the AuthIoDrv driver of the Secret Net Studio information protection system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the vGate platform protection tool, which allows intruders to influence the integrity and accessibility of information.
The vulnerability of the vGate virtualization platform’s security device stems from bypassing access control rules by performing unauthorized operations in the SKALA-R environment. Exploiting this vulnerability allows attackers to compromise the integrity and accessibility of information...
The vulnerability of the QPID broker software used in the centralized lifecycle management software for Red Hat Satellite products allows a malicious actor to gain access to the QMF methods and execute arbitrary commands in a privileged mode.
The vulnerability of the QPID broker software used in the Red Hat Satellite product lifecycle management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to the QMF methods and execute arbitrary commands in privileged mode...
The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, relates to the unlimited loading of dangerous type files, allowing a perpetrator to execute arbitrary codes.
The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by uploading a php file to th...
The vulnerability in the implementation of the hfc_usb_probe handler in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hfcusbprobe handler in the loaded module of the drivers/isdn/hisax/hfcusb.ko file in the Linux operating system is related to accessing beyond the array boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting a HiSax...
The vulnerability of the sis5595_probe driver in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the sis5595probe handler in the loaded modules of drivers/hwmon/sis5595.ko in the Linux operating system arises due to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting a device that appears to be LM...
The vulnerability of the __GI_getenv function in the editing and Ogg-file checking software oggz allows a perpetrator to cause a service failure.
The vulnerability of the GIgetenv function name=0x7ffff7b94ac7 “TH”, name@entry=0x7ffff7b94ac5 “PATH” in the editing and checking tool for Ogg files from the oggz-tools package is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service...
The vulnerability of the maxiradioremove handler’s implementation in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the maxiradioremove implementation for loading the drivers/media/radio/radio-maxiradio.ko module into the Linux kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure by repeatedly connecting and disconnecting the...
The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the thread_list_mutex function in the advanced TFTP server Atftpd, related to the assignment of the NULL pointer, allows a hacker to trigger a service failure.
The vulnerability of the threadlistmutex function in the advanced TFTP server Atftpd is related to the lack of mutex locking before assigning a data structure. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...
The vulnerability of the Cisco Application Policy Infrastructure Controller automation tool, related to errors in the encryption key deletion mechanism, allows a perpetrator to gain access to protected information.
The vulnerability of the Cisco Application Policy Infrastructure Controller automation tool is related to errors in the mechanism for deleting encryption keys. Exploiting this vulnerability could allow an attacker to gain access to protected information...
Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.
The vulnerability of the Server component: The DDL system for database management in MySQL is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the ASN.1 BER dissector component of the Wireshark network traffic analyzer tool, which is related to the execution of operations beyond the memory limit, allows attackers to cause a service failure.
The vulnerability of the ASN.1 BER component epan/dissectors/packet-ber.c, a dissector for analyzing computer network traffic in Wireshark, is related to the execution of operations beyond the memory limits. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.
The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...
The vulnerability of the Connector/J sub-component of the MySQL Connectors component of the Oracle MySQL database management system allows a hacker to gain full control over the application.
The vulnerability of the Connector/J sub-component of the MySQL Connectors component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application using the JDBC protocol...
The vulnerability of microprogrammed software in programmable logic controllers from SIMATIC, related to insufficient validation of input data, allows a malicious actor to trigger malfunctions during maintenance operations.
The vulnerability of microprogrammed software in programmable logic controllers from SIMATIC is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious individual to cause malfunctions in service operations by sending specially crafted packets to po...
The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool, which allows a hacker to gain unauthorized access to protected information
The vulnerability of the Core component of Oracle VM VirtualBox is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Windows AppX Deployment Service (AppXSVC) on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows AppX Deployment Service AppXSVC on Windows operating systems is related to errors in handling hard links. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability in the Bash shell implementation of the Cisco NX-OS network operating system allows a hacker to elevate their privileges to the root level.
The vulnerability of the Bash shell implementation in the Cisco NX-OS network operating system devices relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to root by entering a specially created command in the Bash command...
The vulnerability of D-Link DIR-823G router’s microprogramming software arises from the lack of measures taken to neutralize the special elements used in the operating system command set. This allows a hacker to execute arbitrary operating system commands.
The vulnerability of D-Link DIR-823G router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands...
The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux allows a hacker to cause a service failure.
The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux is related to an error that causes a failure when executing the “fly-dmctl rtcwake” command without specifying the arguments “-t/-s secs”. Exploiting this vulnerability could allow a perpetrator ...
The vulnerability of the Ansible configuration management system, related to the disclosure of confidential data in vvv+ mode, allows a perpetrator to gain unauthorized access to information.
The vulnerability of the Ansible configuration management system is related to the disclosure of confidential data in the vvv+ mode with the nolog option disabled. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to information...
The vulnerability of the reposync function of the YUM package manager, which allows a hacker to create, modify, or delete any files they desire.
The vulnerability of the reposync function in the YUM package manager exists due to insufficient restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to create, modify, or delete any files as desired from a remote location...
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the application.
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the Juniper ATP intrusion prevention system allows a intruder to elevate their privileges and execute arbitrary code.
The vulnerability of the Juniper ATP intrusion prevention system lies in the use of identical passwords for several pre-installed registration records. Exploiting this vulnerability allows a malicious actor to gain increased privileges and execute arbitrary codes remotely...
The vulnerability of the JunOS operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the JunOS operating system’s kernel is related to errors in processing packets destined for another address. Exploiting this vulnerability can allow an attacker to trigger a kernel error and a service failure by sending specially crafted packets from external control interfac...
The vulnerability of the message filtering function of the Cisco AsyncOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco AsyncOS operating system’s message filtering function is related to insufficient processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted email message...
The vulnerability of the ctl_getitem method in the ntpd daemon, which is part of the NTP time synchronization protocol, arises from reading data within acceptable buffer limits. This allows a malicious actor to cause a service failure.
The vulnerability of the ctlgetitem method in the ntpd daemon, which implements the NTP synchronization protocol, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by using specially crafted mode 6 Troj...
The vulnerability of the Windows Data Sharing Service, a data exchange service for the Windows operating system, allows attackers to escalate their privileges.
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of the remote procedure call handler “arpc_Span” in the atlcore_.dll library of the resource management system of the Galaktika ERP system allows a malicious actor to read data from the memory of the server process.
The vulnerability of the process handler for remote procedure calls in the “arpcSpan” module of the atlcore.dll library of the resource management system of the Galaktika ERP system is related to the lack of validation for the correctness of received requests. Exploiting this vulnerability allows...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers allows attackers to increase their privileges.
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.
The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...
The vulnerability of the Windows Search component in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Search component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using specially created messages sent to the search service, including those using an...
The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.
The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...
The vulnerability of Junos Operating System’s Routing Protocol Daemon (RPD) allows a hacker to execute arbitrary code.
The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending numerous specially crafted Draft-Rosen MPLS packets...
The vulnerability of Medtronic MiniMed medical equipment, related to insufficient protection of transmitted information, allows a perpetrator to disclose protected information.
The vulnerability of Medtronic MiniMed 508, 522, 523, 523K, 551, 722, 723, 723K, and 751 medical devices lies in the transmission of protected information in an unencrypted form. Exploiting this vulnerability could allow an intruder to disclose protected information...
The vulnerability of the JSF server component in WebLogic Server allows a perpetrator to gain unauthorized access to protected data or cause service failures.
The vulnerability of the WebLogic Server application server’s JSF component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data or cause service failures using the HTTP protocol...
The vulnerability of the NVIDIA-GFX Kernel driver for the Solaris operating system allows a perpetrator to gain unauthorized access to protected data or cause service failures.
The vulnerability of the NVIDIA-GFX Kernel driver for the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data and cause service failures using ISCSI...
The vulnerability of the Kernel component of the Solaris operating system, which allows a hacker to trigger a service failure
The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...
The vulnerability of the Java VM component of the Oracle Database Server database management system allows a hacker to gain full control over the application.
The vulnerability of the Java VM component of the Oracle Database Server management system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application using Oracle Net...
The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a hacker to gain full control over the application.
The vulnerability of the API framework components of the Sun ZFS Storage Appliance Kit AK is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application by using network protocols...
The vulnerability of the Print Server component in the business application for managing and distributing information to customers, known as One-to-One Fulfillment, allows a malicious actor to gain unauthorized access to protected data.
The vulnerability of the Print Server component in the business application for managing and distributing information to customers, known as One-to-One Fulfillment, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to ga...
The vulnerability of the `lim_send_sme_probe_req_ind` function in the Qualcomm WLAN operating system’s Android component from the CAF repository allows a hacker to escalate their privileges.
The vulnerability of the limsendsmeprobereqind function in the Qualcomm WLAN operating system’s Android component, as found in the CAF repository, is due to a buffer overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
The vulnerability of the extractDir function in the JICompress component of the QuaZIP library allows a hacker to execute arbitrary code.
The vulnerability of the extractDir function in the JICompress component JlCompress.cpp from the QuaZIP library is related to deficiencies in checking the path name of the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a...
The vulnerability of the GetInfoCommand function in the PDF file conversion software pdf-image for Node.js allows a hacker to execute arbitrary commands on the server.
The vulnerability of the GetInfoCommand function in the PDF conversion software for Node.js lies in the lack of mechanisms to neutralize special elements in the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...