97943 matches found
Google Chrome Memory Leak Information Disclosure
The vulnerability of the Google Chrome browser’s search function is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...
Google Chrome Full-screen Mode
The vulnerability of the full-screen mode of the Google Chrome browser is related to the insufficient implementation of security policies. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...
FortiClient MacOS Protection Code Execution
The vulnerability of the FortiClient for MacOS protection mechanism is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...
Apache Traffic Server DoS
The vulnerability of the Apache Traffic Server web server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
ImageMagick Heap Buffer Overflow DoS
The vulnerability of the MagickCore/visual-effects.c file, a set of programs for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause service interruptions...
libzmq TCP Read DoS
The vulnerability of the zmq::tcpread function in the libzmq library, a library for asynchronous messaging, is related to the failure of write operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Pacemaker Resource Management Access Control Confidential Information Service Failures
The vulnerability of the Pacemaker resource management software is related to improper access control. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...
SAP NetWeaver Integration Platform Session Interception
The vulnerability of the Ecatt server, a software integration platform for SAP NetWeaver, is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of...
ImageMagick ReadBMPImage Infinite Loop DoS
The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...
fly-fm File Manager DoS
The vulnerability of the fly-fm file manager is related to incorrect calculation of MD5 in the program window. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
module for creating and Code Execution
The vulnerability of the module responsible for creating and saving structured information about company departments in the “LOCZMAN Reference Guide for Structural Departments” system, which manages engineering data and the product lifecycle of LOCZMAN:PLM, relates to the unlimited loading of...
k2ddoc.dll Heap Buffer Overflow DoS
The vulnerability of the k2ddoc.dll library in the KOMPAS-3D three-dimensional modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted CDW format file...
Moodle DoS
The vulnerability in the virtual training environment Moodle is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Skype for Business Server Code Execution
The vulnerability of Skype for Business Server Microsoft Lync Server corporate communication servers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Cisco Firepower Device Manager REST API Maintenance Failure
The vulnerability of the REST API interface of the Cisco Firepower Device Manager On-Box software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to trigger service failure remotely...
Oracle Enterprise Asset Management Setup Unauthorized Access
The vulnerability of the Setup sub-component of the Oracle Enterprise Asset Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...
Oracle Partner Management Attribute Admin Setup Privilege Escalation
The vulnerability of the Attribute Admin Setup component in the Oracle Partner Management application of the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, as well as gain...
Cisco Firepower Management Center Data Access Privilege Bypass
The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of security measures for the web page structure. Exploiting this vulnerability allows an attacker operating remotely to access, modify, add, or delete data, as well as gain...
Mojo platform Code Execution
The vulnerability of the Mojo browser platform for Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Oracle VM VirtualBox Core Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Oracle VM VirtualBox Core Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Google Chrome and Microsoft Code Execution
The vulnerability of browser developer tools such as Google Chrome and Microsoft Edge is related to their use after being released. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Qualcomm Software Access Control Compromise
The vulnerability of Qualcomm’s software is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Oracle VM VirtualBox Core Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Cisco Firepower Threat Defense CLI Data Compromise
The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...
Docker --userns-remap Path Traversal
The vulnerability of the --userns-remap option, a tool for automating application deployment and management in Docker containerized environments, is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability allows a malicious actor to compromise data...
FingerTipS Component Unauthorized Access
The vulnerability of the FingerTipS component in Android operating systems relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Schneider Electric Modicon M340 Input Validation
The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially...
PDF Viewer Null Pointer DoS
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker to cause service interruptions...
Windows TCP/IP Code Execution
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Intel Graphics Driver Heap Buffer Overflow DoS
The vulnerability of Intel Graphics Drivers’ drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Jackson-databind Unreliable Data Restoration
The vulnerability of the Jackson-databind library in the FasterXML project relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...
ImageMagick DoS
The vulnerability of functions in the MagickCore/colorspace-private.h and MagickCore/quantum.h files of the console-based graphic editor ImageMagick is related to errors in division by zero. Exploiting this vulnerability may allow a malicious actor to cause a service failure...
Apache Batik SVG CSRF
The vulnerability of the Apache Batik library for working with SVG images is related to improper processing of data in the “xlink:href” attribute. Exploiting this vulnerability can allow a remote attacker to perform CSRF attacks using specially crafted GET requests...
Cisco Webex Meetings XSS
The vulnerability of Cisco Webex Meetings’ software web interface is related to deficiencies in neutralizing special characters. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Magento Commerce Client Login Data Compromise
The vulnerability of the “Client Login” module of the Magento Commerce software platform for online store development and management is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise data integrity...
Cisco Smart Software Manager On-Prem Arbitrary Command Execution
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...
Cisco Unified Communications Manager SQL Injection
The vulnerability of the Web interface for managing the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to input validation errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...
Cisco Unified Communications Manager Unauthorized Access
The vulnerability of the Cisco Unified Communications Manager IM & Presence Service web interface is related to input validation errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
jviews-framework-all.jar Code Execution
The vulnerability of the jviews-framework-all.jar component of the corporate-level platform for extracting, transforming, and loading Jviews data is related to insufficient access control checks for projects. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Cisco Smart Software Manager On-Prem Arbitrary Command Execution
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...
Kaspersky Total Security Privilege Escalation
The vulnerability of the Kaspersky Total Security antivirus protection is related to errors in the code. Exploiting this vulnerability can allow attackers to enhance their privileges by manipulating symbolic links...
Adobe Prelude Buffer Overflow Code Execution
The vulnerability of the cloud-based application for video digitization, annotation, and Adobe Prelude format conversion involves writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current use...
EKRA 200 Microprocessor Heap Buffer Overflow Information Disclosure
The vulnerability of the term.arh and core.arh components of the EKRA microprogramming system lies in the presence of pre-installed registration data. Exploiting this vulnerability can allow attackers to access confidential information and create new configuration files...
EKRA 200 microprocessor Heap Buffer Overflow DoS
The vulnerability of the core.arh component of the microprogramming software for PLC ERCA is related to insufficient processing of input data during updates. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted HEX/LDR file...
Microsoft SharePoint Server Memory Object Processing Unauthorized Access
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
server boards Privilege Escalation
The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
WildFly Security Bypass
The vulnerability of the WildFly application server relates to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Windows Error Reporting Manager Privilege Exploitation
The vulnerability of the Windows Error Reporting Manager’s error reporting dashboard in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...
Click-to-Run Component Buffer Overflow Privilege Escalation
The vulnerability of the Click-to-Run component of Microsoft Office applications relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...