Intel Converged Security and Manageability Engine DoS

The vulnerability of the Intel Dynamic Application Loader DAL subsystem within the Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could...

OneDrive for Windows Privilege Escalation

The vulnerability of the OneDrive for Windows file sharing service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute malicious code through a specially created application...

Oracle Database Enterprise Edition Data Access

The vulnerability of the Oracle Database - Enterprise Edition database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data...

Oracle VM VirtualBox Core Component Data Modification

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

Oracle Application Express Data Access

The vulnerability of the Oracle Application Express component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access t...

PuTTY Cryptographic Buffer Overflow DoS

The vulnerability of the PuTTY encryption protection mechanism lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Windows GDI Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

GDI Component Code Execution

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or...

Google Chrome Authentication Bypass

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

Google Chrome Unauthorized Access

The vulnerability of Google Chrome lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML page...

Google Chrome Memory Management Information Disclosure

The vulnerability of Google Chrome’s JavaScript script handler is related to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and accessibility through a specially created HTML...

rustdoc Code Execution

The vulnerability of the Rust programming language plugin rustdoc is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Memory Access Unauthorized Information

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Google Chrome Service Worker

The vulnerability of the Service Worker component in Google Chrome browser relates to the use of freed memory areas. Exploiting this vulnerability could allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure termination of the application by sending large input data...

Microsoft Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows Defender operating system is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow attackers to increase their privileges...

Symfony Shared Resource Synchronization

The vulnerability of the Symfony software platform for developing and managing web applications is related to the simultaneous execution and use of a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidentia...

Blink Google Chrome Data Compromise

The vulnerability of the Blink web browser component in Google Chrome is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

GNU Binutils get_count Heap Buffer Overflow DoS

The vulnerability of the getcount function in the GNU Binutils development toolset is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially...

SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

ZyXEL Router Software Unauthorized Access

The vulnerability of microprogrammed ZyXEL routers of the USG, UAG, ATP, VPN, and NXC series is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to protected information...

Intel NVMe Intel RSTe Privilege Escalation

The vulnerability of Intel NVMe and Intel RSTe driver installers is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Firefox Use-After-Free

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Oracle Management Service Privilege Escalation

The vulnerability of the Oracle Management Service component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

Enterprise Manager Base Platform Privilege Escalation

The vulnerability of the Event Management component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information, o...

Oracle Application DBA Privilege Escalation

The vulnerability of the Oracle Application component, specifically the DBA component of the Oracle Database Server system, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or cause service interruptions...

Enterprise Manager Base Platform Privilege Escalation

The vulnerability of the Discovery Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information...

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Enterprise Manager Oracle Database Unauthorized Access

The vulnerability of the Enterprise Manager for Oracle Database’s Change Manager web-based software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or cause service failures usi...

Mongo-express Code Execution

The vulnerability in the web interface of the Mongo-express database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending a specially crafted request...

RSA BSAFE Micro Edition DoS

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are due to numerical...

i40e controller drivers DoS

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Cisco Webex Network Recording Player Code Execution

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

D-Link Router Code Execution

The vulnerability of D-Link DIR-655, D-Link DIR-866L, D-Link DIR-652, and D-Link DHP-1565 router microprogramming software is related to insufficient testing of the arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a...

Google Chrome Input Validation Bypass

The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent navigation restrictions using a specially created extension...

FAAD2 ifilter_bank DoS

The vulnerability of the ifilterbank function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the swapping of the zero pointer. Exploiting this vulnerability could allow a hacker to cause a service failure...

fly-admin-local-se Component Data Compromise

The vulnerability of the fly-admin-local-se component in the FLY operating system of Astra Linux is related to logging errors when changing user privileges, as well as errors in creating rules for devices with the same name. Exploiting this vulnerability can allow attackers to compromise data...

Moxa EDS-G516E EDS-510E Default HTTP Interception Data Compromise

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches is related to the default use of the HTTP protocol in implementing the “Basic HTTP Authentication” method. Exploiting this vulnerability allows a malicious actor to remotely intercept administrator...

ImageMagick CLIListOperatorImages Buffer Overflow DoS

The vulnerability of the CLIListOperatorImages function MagickWand/operation.c in the ImageMagick console graphics editor is caused by resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PDFium PDF Content Processor DoS

The vulnerability of the PDFium browser’s PDF-content processing component in Google Chrome is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted web page...

FortiOS Web Interface Cross Site Fraudulently

The vulnerability in the FortiOS operating system’s web interface is related to the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests to pages like /logindisconnect/disconnectadmins or...

Google Chrome Data Compromise

The vulnerability of the Google Chrome web browser’s page extraction mechanism is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially...

ImageMagick ComplexImages Information Disclosure

The vulnerability of the ComplexImages function MagickCore/fourier.c in the console-based graphic editor ImageMagick involves reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or disclose protected informati...

HP Color LaserJet Pro Data Compromise

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

UEFI BIOS Code Error

The vulnerability of UEFI BIOS software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

ImageMagick WritePNMImage Buffer Overflow

The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code using ...

HP Support Assistant Access Control Privilege Escalation

The vulnerability of the HP Support Assistant software for centralized device management is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain system privileges and perform unauthorized changes to catalogs or files...