The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause malfunctions or execute arbitrary code...

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to improper processing of parallel operations by the supervisor for enabling or disabling IRQ signals. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

The vulnerability of the implementation of LTE microprogramming technology in Qualcomm’s embedded chips allows a intruder to trigger a service failure.

The vulnerability of the LTE microprogramming technology implementation in Qualcomm’s embedded chips is related to deficiencies in the authentication process when processing the securityModeCommand parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure by...

The vulnerability of the Synx driver for Multimedia Frameworks microprogramming software in Qualcomm embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Synx driver for Multimedia Frameworks microprogramming software in embedded chips from Qualcomm relates to the use of memory after it is freed during file descriptor processing. Exploiting this vulnerability can allow an attacker to cause system failures or execute...

The vulnerability of the implementation of content protection functions in Qualcomm’s embedded software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the content protection implementation in Qualcomm’s embedded software lies in the lack of checks for buffer length and reading beyond the memory boundary. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the `cv::HOGDescriptor::getDescriptorSize` function in the Open Source Computer Vision Library (OpenCV) software library, which is used for computer vision, image processing, and numerical algorithms in general-purpose applications, allows a attacker to cause a service failure.

The vulnerability of the cv::HOGDescriptor::getDescriptorSize function in the Open Source Computer Vision Library OpenCV software library for computer vision, image processing, and general numerical algorithms is related to the lack of checks for division by zero. Exploiting this vulnerability...

The vulnerability of the Apex One antivirus software is related to deficiencies in its authentication process. This allows unauthorized users to gain access to protected information and circumvent security restrictions.

The vulnerability of the Apex One antivirus software is related to deficiencies in the authentication process when processing request parameters. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and circumvent security...

The vulnerability of the _zip_read_eocd64 function in the zip_open.c component of the Libzip library allows a attacker to cause a service failure.

The vulnerability of the zipreadeocd64 function in the zipopen.c component of the Libzip library library for working with Zip archives is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Dpkg::Source::Archive component of the package manager Dpkg allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Dpkg::Source::Archive component of the package manager Dpkg is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the sbr_process_channel function in the libfaad/sbr_dec.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to trigger a service failure.

The vulnerability of the sbrprocesschannel function in the libfaad/sbrdec.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to improper processing of new PS channels. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the writing of data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Overview Mode function in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Overview Mode function in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created web page from a remote location...

The vulnerability of the `cgroup1_parse_param` function in the kernel/cgroup/cgroup-v1.c file of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cgroup1parseparam function in the kernel/cgroup/cgroup-v1.c file of the Linux operating system is related to the lack of checks to ensure that the source parameter is indeed a string. Exploiting this vulnerability could allow an attacker to access confidential data,...

The vulnerability of the Linux operating system’s sound subsystem allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel audio subsystem is related to incorrect handling of parallel calls to the PCM hwparams function. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerabilities of DCE/RPC components in Samba’s network communication software package allow attackers to compromise data integrity.

The vulnerability of DCE/RPC components in Samba’s networking communication software lies in the insufficient neutralization of certain elements in requests. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the driver vmwgfx (drivers/gpu/vmxgfx/vmxgfx_kms.c) in the Linux operating system allows a hacker to increase their privileges or cause service failures.

The vulnerability of the vmwgfx driver drivers/gpu/vmxgfx/vmxgfxexecbuf.c in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

The vulnerability of the disaster recovery tool for Azure virtual machines – Azure Site Recovery and VMWare to Azure – arises due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the disaster recovery tool for Azure virtual machines exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the utf_ptr2char function in the Vim text editor allows for reading data beyond the buffer’s boundaries in memory, enabling an attacker to execute arbitrary code.

The vulnerability of the utfptr2char function in the Vim text editor relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the messaging service in the centralized network management system of Cisco Catalyst SD-WAN Manager allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the Cisco Catalyst SD-WAN Manager, a centralized messaging service, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information or cause service failures by sending specially...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.

The vulnerability of the NPM packet manager’s vm2 library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the dict0dict.cc component of the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the dict0dict.cc component in the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the User Interface sub-component of the Oracle WebCenter Sites Support Tools software platform allows a malicious individual to gain unauthorized access to read, modify, or add data, or to cause service interruptions.

The vulnerability of the User Interface sub-component of the Oracle WebCenter Sites Support Tools software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, or add...

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model, allowing a perpetrator to gain access to read data and modify it.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify...

The vulnerability of Firefox browser, related to insufficient validation of input data, allows attackers to circumvent security restrictions.

The vulnerability of Firefox browsers is related to insufficient validation of input data when processing values of array elements. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

The vulnerability of the Crow web service framework relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Crow web service creation framework relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Device Software Manager installer, related to an uncontrolled search path, allows a hacker to load arbitrary files.

The vulnerability of the Device Software Manager installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to load arbitrary files...

The vulnerability of the RPKI validator OctoRPKI, which stems from the lack of data validation during data transmission, allows a violator to trigger a service failure.

The vulnerability of the RPKI validator OctoRPKI is related to the lack of verification of returned data during the generation of Route Origin Authorisations. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the do_tag() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dotag function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of SAP Enterprise Extension Defense Forces & Public Security software, related to authentication errors, allows a perpetrator to increase their privileges.

The vulnerability of SAP Enterprise Extension Defense Forces & Public Security software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in the fact that copying buffers without checking the size of the input data allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Google Chrome’s SplitScreen display mode allows a hacker to disclose protected information.

The vulnerability of Google Chrome’s SplitScreen display mode is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

The vulnerability of the REST API interface of the Apache Geode data management platform allows a hacker to execute arbitrary code.

The vulnerability of the REST API interface of the Apache Geode data management platform involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of microprogrammed software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX models is related to uncontrolled resource consumption. This vulnerability allows a perpetrator to cause malfunctions in the equipment.

The vulnerability of microprogrammed software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX models is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause malfunctions in t...

The vulnerability of the SBIOS component in NVIDIA’s DGX A100 server allows a hacker to execute arbitrary code, cause system failures, or compromise the confidentiality of protected information.

The vulnerability of the SBIOS component in NVIDIA’s Ofbd server NVIDIA DGX A100 is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code, cause service failures, or compromise the confidentiality of protected...

The vulnerability of the Zabbix Frontend universal monitoring system arises from the lack of protective measures for the web page structure, allowing attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Zabbix Frontend universal monitoring system exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially...

The vulnerability of the /librarian/studentdetails.php component of the Library Management System allows a malicious individual to execute arbitrary SQL queries.

The vulnerability of the /librarian/studentdetails.php component of the Library Management System lies in the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the Adobe Framemaker desktop publishing system lies in its memory management after memory is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

The vulnerability of the Azure RTOS GUIX Studio development environment, related to access segmentation faults, allows attackers to disclose protected information.

The vulnerability of the Azure RTOS GUIX Studio development environment is related to access control errors. Exploiting this vulnerability could allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in their memory management after memory is freed, allowing an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to execute arbitrary...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability in the web interface of Cisco IOS XE allows a hacker to inject commands into the base operating system with root privileges.

The vulnerability of Cisco IOS XE web interfaces exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject commands into the base operating system with root privileges, as a result of sending...

The vulnerability of the `createThumbnailFromPath` function in the Electron application creation software platform allows a hacker to disclose protected information.

The vulnerability of the createThumbnailFromPath function in the Electron application development platform is related to the disclosure of information in a erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the Windows Bluetooth Service driver of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Bluetooth Service driver exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations lies in insufficient validation of incoming requests, allowing a perpetrator to disclose sensitive information.

The vulnerability of the monitoring tool for the vRealize Operations virtual infrastructure is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of Microsoft Windows Defender operating system allows attackers to increase their privileges.

The vulnerability of Microsoft Windows Defender operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Azure Batch service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Azure Batch service for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Jenkins Repository Connector Plugin, related to deficiencies in the authentication process, allows attackers to disclose sensitive information about the file system.

The vulnerability of the Jenkins Repository Connector Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information about the file system...

The vulnerability of the HTTP Request Handler component in the SAP Business One License service API allows a perpetrator to execute arbitrary code due to incorrect authentication.

The vulnerability of the HTTP Request Handler component in the SAP Business One License service API is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...

The vulnerability of microprogrammed software in Siemens SIMATIC S7-400 and SIMATIC S7-410 programmable logic controllers arises from the possibility of an operation outputting data beyond the buffer boundaries in memory. This vulnerability allows a malicious entity to cause malfunctions during maintenance operations.

The vulnerability of microprogrammed software in Siemens SIMATIC S7-400 and SIMATIC S7-410 programmable logic controllers is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause malfunctions by sending special...

The vulnerability of microprogramming software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX systems lies in the fact that code loading occurs without checking its integrity. This allows attackers to gain unauthorized access to the target system.

The vulnerability of microprogrammed software in industrial software-hardware equipment from General Electric’s Renewable Energy iNET, iNET II, TD220X, and TD220MAX systems lies in the fact that code can be loaded without checking its integrity. Exploiting this vulnerability allows a malicious...