97943 matches found
Python-gnupg Information Encryption Code Execution
The vulnerability of the gnupg.GPG.encrypt and gnupg.GPG.decrypt methods of the Python-gnupg encryption library exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
APT RCE
The vulnerability in the software of apt is related to improper cleaning of the redirecting field 302 in the HTTP method. Exploiting this vulnerability allows a remote attacker to perform content injection MITM and execute code on the target machine...
Qemu-NBD Maintenance Failure
The vulnerability of the Qemu-NBD hardware emulation server of QEMU is related to errors during connection establishment. Exploiting this vulnerability allows a remote attacker to cause a service failure by disconnecting the server from the client upon attempting to establish a connection...
Linux Keberos Privilege Escalation
The vulnerability in the implementation of the Keberos v5 protocol in the Linux operating system is related to the operation of writing data beyond the buffer in memory when processing RXRPC keys. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
ChakraCore Microsoft Edge Code Execution
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...
Catalog Service Component Code Execution
The vulnerability of the Google Chrome browser’s Catalog Service component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTML page from a remote location...
VBScript Script Handler Code Execution
The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, either through a specially crafted web page or a Microsoft...
Solaris Kernel DoS
The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...
JD Edwards EnterpriseOne Tools Unauthorized Access
The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
Trade Management UI Unauthorized Access
The vulnerability of the User Interface component of the Trade Management business platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
WebLogic Server WLS-Web Services Full Control
The vulnerability of the WLS-Web Services component of the WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP protocol...
Solaris Cluster NAS Device Addition Full Control
The vulnerability of the NAS Device Addition component in the Solaris Cluster software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the RPC network protocol...
PouchBD MapReduce Code Execution
The vulnerability of the map/reduce function implementation in the PouchBD database is related to deficiencies in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code or system commands remotely...
Canon authentication bypass
The vulnerability of Canon printer’s microprogramming software is related to deficiencies in the authentication process when using standard device settings. Exploiting this vulnerability can allow a malicious actor to gain access to the device’s web interface with administrator privileges...
Cisco Policy Suite Policy Builder Database Access Modification
The vulnerability of the Policy Builder database in the Cisco Policy Suite software for policy management lies in the absence of a authentication mechanism for accessing the database. Exploiting this vulnerability could allow an attacker to gain direct access to the Policy Builder database and...
InduSoft Web Studio TCP/IP Code Execution
The vulnerability of the TCP/IP component in InduSoft Web Studio and InTouch Machine Edition HMI/SCADA systems arises from buffer overflows due to deficiencies in input data processing tags, events, signaling messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...
DTISQLInstaller.exe Gain Access
The vulnerability of the DTISQLInstaller.exe executable file of the software package for interacting with QuicDoc and Office Therapy clients is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the softwar...
Linux ALSA/dev/snd/timer driver Information Disclosure
The vulnerability of the ALSA/dev/snd/timer driver sound/core/timer.c in the Linux operating system is related to the disclosure of information during simultaneous data reading and analysis. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information...
libmpeg2 Media Framework Code Execution
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
WebAdmin Plugin Command Execution
The vulnerability in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py script of the WebAdmin plugin exists due to the failure to eliminate special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating...
libavc Code Execution
The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
JavaScript handlers Microsoft Edge Code Execution
The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...
Qualcomm Secure Execution Environment
The vulnerability of Qualcomm Secure Execution Environment for Android, found in the CAF repository, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access control policies through improper page alignment...
ImageMagick ReadICONImage Unexpected Termination
The vulnerability of the ReadICONImage function coders\icon.c in the console-based graphic editor ImageMagick is related to a memory leak. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to terminate abnormally lead to a memory exhaustion conditio...
FreeType Heap Buffer Overflow DoS
The vulnerability of the t1decoderparsecharstrings function psaux/t1decode.c in the FreeType library arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability could allow a remote attacker to write data beyond the buffer’s capacity...
PDF Viewer Data Compromise Breach
The vulnerability of image conversion tools for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, is related to reading beyond the buffer limit and memory leaks caused by parsing EMF format files. Exploiting this...
Safari Cryptographic Key Access
The vulnerability of the Safari Login AutoFill component in the Safari browser is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain access to cryptographic keys using uncertain vectors...
FreeType DoS
The vulnerability of the parsecharstrings function in the type1/t1load.c file of the FreeType library does not guarantee that the font contains the glyph’s name. This vulnerability arises from reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cau...
Windows Local File Access
The vulnerability of the Windows operating system’s server service is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to local files using specially crafted SMBv2 or SMBv3 packets...
Microsoft Edge DoS
The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or otherwise affect the system through a specially crafted web page...
Windows Certificate Bypass
The vulnerability of the PowerShell script for the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to bypass certificate verification...
OVEEN PLK110 Malfunctions
Multiple vulnerabilities exist in the embedded programmable logic controller OVEEN PLK110’s software, due to insufficient testing of input data. Exploitation of these vulnerabilities could allow an attacker to trigger malfunctions by repeatedly sending specially crafted requests with randomly...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-2-32 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the kernel-source-2.2.19 package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the hostap-modules-2.6.8-3-k7 package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-3-32-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
Multiple vulnerabilities exist in the kernel-image-2.6.8-3-64 operating system of the Debian GNU/Linux distribution. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotel...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the kernel-image-2.6-686 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the kernel-image-2.6-amd64-k8-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals locally...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-3-mckinley operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
Multiple vulnerabilities in the kernel-headers-2.4.19 package of the Debian GNU/Linux operating system; its operation may lead to violations of confidentiality, integrity, and accessibility of protected information...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-5kc-malta package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the krb5-rsh-server package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the policykit-1 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.18-6-all-amd64 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Internet Explorer Data Compromise
A vulnerability that allows for remote execution of code exists in Internet Explorer due to incorrect access to objects in memory. This vulnerability can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...