Samba Symbolic Link Access

The vulnerability of the Samba networking communication package is related to errors in processing symbolic links. Exploiting this vulnerability can allow a remote attacker to gain access to the server’s file system...

Moxa MXView Code Execution

The vulnerability of the Moxa MXView network control software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

InspIRCd Use-After-Free DoS

The vulnerability of InspIRCd relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

LibRaw Heap Buffer Overflow DoS

The vulnerability of the kodakradcloadraw function in the dcrawcommon.cpp component of the LibRaw image processing library is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created POC file...

NPM vm2 Code Execution

The vulnerability of the NPM packet manager’s vm2 library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NAS Storage Uncontrolled Format String

The vulnerability of NAS storage systems Network Attached Storage such as NAS326, NAS540, and NAS542 is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created UDP packet...

Vim do_tag() Function Use-After-Free

The vulnerability of the dotag function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Infrastructure Component Unauthorized Access

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, or add data, or cause a service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the pxa3xxgcuwrite function drivers/video/fbdev/pxa3xx-gcu.c in the Linux kernel is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Docker CLI Arbitrary Credentials

The vulnerability of the Command Line Interface CLI of the deployment and application management tool in Docker-enabled environments is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain arbitrary user...

CentreCOM AR260S Telnet Command Injection

The vulnerability of the telnet server software for CentreCOM AR260S V2 exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary shell commands on the target syste...

Vim Buffer Overflow

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Measuresoft ScadaPro Server Code Execution

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

UEFI Buffer Overflow

The vulnerability of UEFI BIOS in desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

VMware Workspace One Access Authentication Bypass Privilege Escalation

The vulnerability of the user interface of the VMware Workspace One Access application management platform, as well as the administration consoles of VMware Identity Manager vIDM, and the virtual infrastructure management tool VMware vRealize Automation, is related to the possibility of bypassing...

go-getter Input Sanitization

The vulnerability of the go-getter library is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Node.js Module App Connect Enterprise Certified Container Compromise Information

The vulnerability of the Node.js module related to the App Connect Enterprise Certified Container management tool is linked to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise protected information...

OAS Engine SecureAddUser Unauthorized Access

The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

Slurm Resource Manager Auth Bypass

The vulnerability of the Slurm resource manager is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

PingID DoS

The vulnerability of the MFA Multi-Factor Authentication PingID software for Windows is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

LDAP Account Manager LDAP Injection

The vulnerability in the LDAP Account Manager web application exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to use the user’s username field to manipulate LDAP data...

Oracle WebLogic Server Console Component Data Read Modify

The vulnerability of the Console component of the Oracle WebLogic Server application lies in reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to read data or modify data through specially crafted HTTP requests...

Attachments Component Unauthorized Access

The vulnerability of the Attachments component in Oracle Agile PLM exists due to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

GitLab SCIM Account Takeover

The vulnerability of SCIM System of Cross-domain Identity Management in the Git-based software platform for collaborative code development on GitLab relates to the ability to invite arbitrary users through their user names and email addresses. Exploiting this vulnerability could allow a malicious...

Corel Presentations IPPP72.FLT Buffer Overflow Information Disclosure

The vulnerability of the IPPP72.FLT module in the Corel Presentations preparation and presentation software relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

NETGEAR ProSafe SSL VPN SQL Injection

The vulnerability of the USERDBDomains.Domainname function in the cgi-bin/platform.cgi file of the NETGEAR ProSafe SSL VPN network interface card’s software is related to the possibility of executing commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL...

Yokogawa CENTUM VP Automation Design SCADA Network Protocol Exploitation

The vulnerability of the server network protocol implementation in the Automation Design SCADA system of Yokogawa CENTUM VP is related to errors during the authentication process. Exploiting this vulnerability allows a malicious actor to utilize the features provided by the AD server...

PHP exif_process_user_comment Heap Buffer Overflow DoS

The vulnerability of the exifprocessusercomment function ext/exif/exif.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Cisco Small Business RV340 Router Command Execution

The vulnerability of the web-based management interface for Cisco Small Business RV340, RV340W, RV345, and RV345P microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a...

Cisco Prime Service Catalog Disclosure

The vulnerability of the Cisco Prime Service Catalog management web interface is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

Interactive Graphical SCADA System Buffer Overflow DoS

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a specially crafted message...

PHP ext/standard var_unserializer Heap Buffer Overflow

The vulnerability of the ext/standard/varunserializer.re component in the PHP programming language lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise data integrity...

Linux Direct Memory Access Privilege Escalation

The vulnerability of the Direct Memory Access DMA subsystem in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CAPITAL VSTAR APOGEE MBC APOGEE MEC APOGEE PXC TAL

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing the UDP packet header. Exploiting this vulnerability can allow an attacker to gain access to protected...

FortiOS Signature Verification Code Execution

The vulnerability of the FortiOS operating system’s signature verification function is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created installation images...

Enterprise Manager Base Platform Access Manipulation

The vulnerability of the Policy Framework component of the Enterprise Manager Base Platform is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain access to read, modify, add, or delete data...

Cluster Component Privilege Escalation

Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...

File Manager Web Interface Privilege Escalation

The vulnerability of the File Manager web interface for system administration in UNIX-like operating systems, such as Webmin, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows an attacker to increase their privileges or execute arbitrary code by...

HP Print Code Execution

The vulnerability of PostScript devices from HP Print involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Yokogawa CENTUM VP SCADA Command Execution

The vulnerability of the Yokogawa CENTUM VP SCADA system is related to errors in the code. Exploiting this vulnerability allows an intruder to execute arbitrary code by modifying the project files and injecting their own code into them, which will be executed upon a specified event...

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR’s RAX200, RAX75, RAX80, RBK852, RBR850, and RBS850 routers lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR RAX43 Router Command Injection

The vulnerability of NETGEAR RAX43 router’s built-in software lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Integrated Routing Software Buffer Overflow

The vulnerability of the embedded software of NETGEAR routers such as R7000, R7960P, R8000, RAX200, R8000P, RAX20, RAX45, RAX80, R7900P, RAX15, RAX50, and RAX75 arises due to buffer overflows. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity,...

NETGEAR Integrated Routing Software Command Injection

The vulnerability of NETGEAR’s integrated routing software for models CBR40, CBR750, RBR850, RBS850, and RBS850 lies in the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

NETGEAR Integrated Routing Software Command Injection

The vulnerability of NETGEAR’s integrated routing software, including models such as CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

AK-EM 800 Debugging Access

The vulnerability in the web-based management interface for the server application used to manage food manufacturing enterprises AK-EM 800 is related to errors in password generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the debugging service...

Microsoft Defender for IoT SQL Injection Code Execution

The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a attacker to execute arbitrary code...

Adobe Premiere Elements Buffer Overflow

The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

cmark-gfm Integer Overflow

The vulnerability of the cmark-gfm library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code...

Hyper-V Hardware Virtualization Bypass

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...