92298 matches found
The vulnerability of the Qualcomm WLAN operating system driver for Android from the CAF repository allows a hacker to increase their privileges.
The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is due to an overflow in the buffer in the “stack”. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the map/reduce function implementation in the PouchBD database allows a hacker to execute arbitrary code.
The vulnerability of the map/reduce function implementation in the PouchBD database is related to deficiencies in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code or system commands remotely...
The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem (dxgkrnl.sys) on the Windows operating system, which allows a hacker to escalate their privileges
The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem dxgkrnl.sys in the Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...
The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler and the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...
Vulnerability of the mp4ff_read_ctts function in the audio file decoder Freeware Advanced Audio Decoder 2, allowing a hacker to cause a service failure
The vulnerability of the mp4ffreadctts function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 decoder is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted mp4 file...
The vulnerability of the api.php script of the software framework for implementing the MediaWiki hypertext environment allows a hacker to execute arbitrary code.
The vulnerability of the api.php script of the software framework for implementing the MediaWiki hypertext environment exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially prepar...
The vulnerability of the _mediaLibraryPlayCb function in the Pitivi video editor allows a hacker to execute arbitrary code.
The vulnerability of the mediaLibraryPlayCb function in the mainwindow.py file of the Pitiv video editor is related to incorrect handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using metashell frameworks along the way to the target fil...
The vulnerability of the ExtrFile and stricomp functions (unrarlib.c) of the unrar-free or unrar-gpl package, a file decompression tool for UnRAR, allows a hacker to bypass the catalog and trigger a service failure.
The vulnerability of the ExtrFile and stricomp functions unrarlib.c in the unrar-free or unrar-gpl package, a tool for decompressing UnRAR files, arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to bypass the...
The vulnerability of the install/index.php script of the Exponent CMS system allows a hacker to execute arbitrary code.
The vulnerability of the Exponent CMS content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the sc parameter in the install/index.php script...
The vulnerability of the HTTP Web-management component of Edgewater Networks Edgemarc software allows a perpetrator to execute arbitrary commands.
The vulnerability of the HTTP Web-management component of Edgewater Networks Edgemarc software is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands, using a hidden page as an interface for executing these...
The vulnerability of the libminikin library in the Android operating system allows a hacker to increase their privileges.
The vulnerability of the libminikin library in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the nsv_parse_NSVf_header function in the nsvdec.c component of the FFmpeg multimedia library allows a attacker to cause a waste of computational resources and a denial of service.
The vulnerability of the nsvparseNSVfheader function in the FFmpeg’s multimedia library libavformat/nsvdec.c is related to resource management errors. Exploiting this vulnerability allows a malicious actor to unnecessarily consume computing resources and cause service failures by using a speciall...
The vulnerability of the ReadOneMNGImage function in the console-based ImageMagick graphics editor allows a hacker to cause a service failure.
The vulnerability of the ReadOneMNGImage function in the console-based ImageMagick graphics editor is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure resource consumption by the computer. Th...
The vulnerability of the ReadPESImage function in the coder/pes.c file of the console image editing tool ImageMagick allows a hacker to cause a service failure.
The vulnerability of the ReadPESImage function in the coder/pes.c file of the console image editing tool ImageMagick arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure related to...
Vulnerabilities in the Pidgin instant messaging program, which allow a hacker to trigger memory disclosure, as well as the ability to inject arbitrary code
The multiple vulnerabilities related to memory corruption in the Pidgin instant messaging application are linked to the processing of the MXIT protocol. Exploiting these vulnerabilities can allow a remote attacker to trigger memory disclosure and the injection of arbitrary code by sending special...
The vulnerability of the Windows Search service in the Windows operating system allows a perpetrator to execute arbitrary code and gain unlimited access to the system.
The vulnerability of the Windows Search service in the Windows operating system is related to code errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain unrestricted access to the system by sending a specially crafted SMB message to the Windows Search...
The vulnerability of the xdr_bytes and xdr_string functions in the library that handles system calls and core glibc functions allows a attacker to cause a service failure.
The vulnerabilities of the xdrbytes and xdrstring functions in the library that handles system calls and core glibc functions are related to the reclamation of unreliable data stored in memory after deserialization of buffers. Exploiting these vulnerabilities allows a remote attacker to cause a...
The vulnerability of Novell GroupWise software for collaborative work allows a perpetrator to execute arbitrary code.
The vulnerability of Novell GroupWise software for collaborative work is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the long user name or password...
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code (memory corruption).
The vulnerability of the libhevc component in the Android operating system’s Mediaserver is caused by an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...
The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code (memory corruption).
The vulnerability of the libhevc component in the Android operating system’s Mediaserver is caused by an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...
The vulnerability of the iOS operating system and the Safari browser allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure
The vulnerability of the ConcatenateImages function in the MagickWand/magick-cli.c console graphic editor for ImageMagick exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure application terminatio...
The vulnerability of the iOS operating system allows a perpetrator to make phone calls to arbitrary numbers.
The vulnerability of the iOS operating system’s Phone component is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to make telephone calls to arbitrary numbers using a third-party application...
The vulnerability of the iOS operating system and the Safari browser allows a hacker to replace the URL string.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to substitute the URL string with a specially crafted web page from a remote location...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Graphics Device Interface application in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a specially created application...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...
The vulnerability of the Microsoft Office software, a component of the Windows operating system, allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Graphics Component of the Microsoft Office software suite is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted web page...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
The vulnerability in the built-in software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900, NETGEAR WNDR4500v2, NETGEAR R6200v2, NETGEAR WNDR3400v2, NETGEAR D6220, NETGEAR D6400, NETGEAR C6300, NETGEAR R6200, NETGEAR R6300, NETGEAR VENG2610, NETGEAR AC1450, NETGEAR WNDR1000v3, NETGEAR WNDR3700v3, NETGEAR WNDR4000, NETGEAR WNDR4500, NETGEAR D6300, NETGEAR D6300B, NETGEAR DGN2200Bv4, and NETGEAR DGN2200v4, allows a hacker to obtain user password information.
The vulnerability of the embedded software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900,...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the drivers/thermal/qpnp-adc-tm.c file in Qualcomm’s Android operating system is related to a format string vulnerability. Exploiting this vulnerability could allow an attacker, operating remotely, to enhance their privileges through a specially created application that...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the hostap-modules-2.6.8-3-k7-smp package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-2-686-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-11-em64t-p4-smp operating system of Debian GNU/Linux may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-12-em64t-p4-smp operating system from Debian GNU/Linux may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libtk-img package of the Debian GNU/Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the krb5-admin-server package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the libldap-2.3-0 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-all package of the Debian GNU/Linux operating system; its operation may lead to violations of confidentiality, integrity, and accessibility of protected information...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the Debian GNU/Linux operating system’s loop-aes-utils package can lead to breaches of the confidentiality, integrity, and accessibility of protected information...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the remstats package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the slocate package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-1-all-alpha package of the Debian GNU/Linux operating system may be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-1-all-arm package of the Debian GNU/Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The Linux-headers-2.6.26-2-s390x package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Internet Explorer browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability that allows for remote execution of code exists in Internet Explorer due to incorrect access to objects in memory. This vulnerability can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...
The vulnerability of the MariaDB Server software allows a malicious actor to compromise the accessibility of protected information.
The vulnerability in the MySQL Server component of Oracle MySQL allows unauthorized users, after passing authentication, to manipulate data accessibility by using the stored procedure subcomponent...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-all-arm package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The Linux-headers-2.6.26-2-vserver-686 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...