The vulnerability of the complex video surveillance system “Video Surveillance Platform” arises from the lack of measures taken to protect the SQL query structure, allowing a perpetrator to execute arbitrary code.

The vulnerability of the complex video surveillance system “Video Surveillance Platform” lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the IndustrialPI Webstatus component of the Pilz IndustrialPI device allows a hacker to gain full control over the device.

The vulnerability of the IndustrialPI Webstatus component of the Pilz IndustrialPI device lies in the lack of a mechanism for converting data types. Exploiting this vulnerability could allow a malicious actor to gain full control over the device from a remote location...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks lies in its uncontrolled search mechanism, which allows a intruder to execute arbitrary commands with administrator privileges.

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code with administrator privileges using a specially craft...

The vulnerability of the command-line interface of the Node.js software platform allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface of the Node.js software platform is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the virtnet_rq_alloc() function in the drivers/net/virtio_net.c module of the Linux kernel’s network device support driver allows a attacker to cause a service failure.

The vulnerability of the virtnetrqalloc function in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of the sub_72290() function in the microprogramming software of Tenda AX-1806 allows a hacker to cause a service failure.

The vulnerability of the sub72290 function in the microprogramming software of the Tenda AX-1806 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS operating systems allows attackers to enhance their privileges.

The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Adobe Dreamweaver HTML editor lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Apache Kyuubi distributed execution SQL query service, related to path traversal, allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the Apache Kyuubi distributed execution service for SQL queries relates to path traversal. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain unauthorized access to protected information...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to gain access to and delete data.

The vulnerability of Google Chrome’s Blink rendering module is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access and delete data by using a specially created HTML page...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

The vulnerability of the user interface of Cisco WebEx Meetings software allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the user interface of Cisco WebEx Meetings software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of PLC NLcon-CE-485-C, related to deficiencies in the authorization process of the Codesys v2 service, allows a perpetrator to gain full access to the Codesys v2 execution environment.

The vulnerability of PLC NLcon-CE-485-C is related to deficiencies in the authentication process of the Codesys v2 service. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full access to the Codesys v2 execution environment...

The vulnerability of PLC NLcon-CE-485-C, related to the lack of measures taken to encrypt confidential data, allows attackers to gain access to confidential information.

The vulnerability of PLC NLcon-CE-485-C is related to the lack of measures taken to encrypt confidential data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the library for creating and editing PDF documents in OpenPDF, related to insufficient validation of input data, allows a hacker to read arbitrary files.

The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...

Vulnerability of 1C software: 1C:ERP Business Management, 1C:Comprehensive Automation, 1C:Commerce Management – due to the lack of authorization, allowing attackers to execute arbitrary requests.

Vulnerabilities of 1C software: 1C:ERP Business Management, 1C:Comprehensive Automation, 1C:Commerce Management involve a lack of authentication. Exploiting these vulnerabilities can allow remote attackers to execute arbitrary requests...

The vulnerability of the “Health check-up” platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows unauthorized access by attackers to protected information.

The vulnerability of the “Health check-up” patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the driver `drivers/input/keyboard/cros_ec_keyb.c` of the keyboard driver for the ChromeOS embedded controller EC of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the formWsc() function in TOTOLINK N300RT router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the formWsc function in TOTOLINK N300RT router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the targetAPSsid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the PingAlert application server, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the PingAlert application server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the software solutions for managing privileged sessions, such as Zoho ManageEngine Access Manager Plus, the software for control, management, and auditing, Zoho ManageEngine Password Manager Pro, and the software for managing privileged access, ManageEngine Privileged Access Manager 360 (PAM360), stems from incorrect path name restrictions. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Zoho ManageEngine Access Manager Plus, a software solution for controlling, managing, and auditing privileged sessions; the Zoho ManageEngine Password Manager Pro, a software solution for controlling access privileges; and the ManageEngine Privileged Access Manager 360...

The vulnerability of the Nagios XI monitoring tool, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nagios XI monitoring tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the NVIDIA GPU Display Driver lies in its uncontrolled search path, which allows attackers to trigger system failures, gain elevated privileges, execute arbitrary code, and forge protected information.

The vulnerability of the NVIDIA GPU Display Driver is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, and forge protected information...

The vulnerability of the ttm_lru_bulk_move_del function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ttmlrubulkmovedel function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the Punycode character transformation method, which is used to process domain names, allows attackers to increase their privileges.

The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the fromSetIpBind() function in Tenda CH22 router software allows a attacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromSetIpBind function in Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain unauthorized access to...

The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Digital Media component of Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Agere Modem Driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Agere Modem Driver for Windows operating systems is related to the misuse of a non-secure pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, allows a hacker to gain access and modify data.

The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, is related to a data source confirmation error. Exploiting this vulnerability could allow an attacker operating remotely to gain access to modify data...

The vulnerability of the HTTP protection library for inter-site request tampering, gorilla/csrf, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the HTTP protection library against cross-site request forgery, gorilla/csrf, is related to cross-site request forgery attacks. Exploiting this vulnerability can allow attackers to execute a CSRF attack...

The vulnerability of the access control list component in Cisco SD-WAN vEdge microprogramming router software allows a perpetrator to bypass the access control list.

The vulnerability of the access control list component in Cisco SD-WAN vEdge microprogramming device software is related to access control errors. Exploiting this vulnerability could allow a malicious actor to bypass the access control list...

The vulnerability of the annotate() and alias() functions in the Django web application framework allows a hacker to execute arbitrary code.

The vulnerability of the LoginView, LogoutView, and setlanguage functions in the Django web application framework is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Service Port FTP-server ProFTPD component, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Service Port FTP-server ProFTPD component is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or cause service failures...

The vulnerability of “Laboratory Kasper” antivirus protection, related to an error in processing certain expressions, allows attackers to execute arbitrary code with privileges of SYSTEM.

The vulnerability of “Labyrinth Kasper” antivirus protection is related to an error in the processing of certain expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with SYSTEM privileges...

The vulnerability of the page_pool_recycle_in_ring() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pagepoolrecycleinring function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `ksmbd_krb5_authenticate()` function in the `ksmbd` component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ksmbdkrb5authenticate function in the ksmbd component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...

The vulnerability of the mgmt_hci_cmd_sync() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mgmthcicmdsync function in the Linux operating system is related to the execution of operations outside the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the v3d_job_update_stats() function in the File Descriptor Handler component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the v3djobupdatestats function in the File Descriptor Handler component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the visualization plugin for the Infinity Datasource platform used in Grafana monitoring and observation systems stems from server-side request manipulation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Infinity Datasource plugin for the Grafana monitoring and observation platform relates to server-side request manipulation. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of FortiWeb web applications’ network firewalls, related to the lack of protective measures for SQL query structures, allows attackers to disclose protected information.

The vulnerability of FortiWeb web applications’ network firewalls is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of microprogramming software in embedded Qualcomm chips, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system allows a violator to execute arbitrary code within the context of the root user.

The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...

The vulnerability of D-Link DIR-890L router’s microprogramming software, which stems from the use of rigidly encoded login credentials, allows a hacker to execute arbitrary code.

The vulnerability of D-Link DIR-890L router’s microprogramming software is related to the use of rigidly encoded login credentials. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

The vulnerability of the vCard component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code under the root user’s context.

The vulnerability of the vCard component of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...

The vulnerability of the IBM Aspera Faspex file-sharing application, related to incorrect session expiration times, allows attackers to compromise the integrity of the protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information from a remote location...