92298 matches found
The vulnerability of the virtnet_rq_alloc() function in the drivers/net/virtio_net.c module of the Linux kernel’s network device support driver allows a attacker to cause a service failure.
The vulnerability of the virtnetrqalloc function in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected information...
The vulnerability of the sub_72290() function in the microprogramming software of Tenda AX-1806 allows a hacker to cause a service failure.
The vulnerability of the sub72290 function in the microprogramming software of the Tenda AX-1806 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS operating systems allows attackers to enhance their privileges.
The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of Adobe Dreamweaver HTML editor lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...
The vulnerability of Google Chrome’s Blink rendering module allows a hacker to gain access to and delete data.
The vulnerability of Google Chrome’s Blink rendering module is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access and delete data by using a specially created HTML page...
The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...
The vulnerability of the user interface of Cisco WebEx Meetings software allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the user interface of Cisco WebEx Meetings software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the “Health check-up” platform for remote monitoring of patient physiological indicators, related to the use of dangerous methods or functions, allows unauthorized access by attackers to protected information.
The vulnerability of the “Health check-up” patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the driver `drivers/input/keyboard/cros_ec_keyb.c` of the keyboard driver for the ChromeOS embedded controller EC of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the formWsc() function in TOTOLINK N300RT router microprogramming software allows a intruder to execute arbitrary commands.
The vulnerability of the formWsc function in TOTOLINK N300RT router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the targetAPSsid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the PingAlert application server, related to access control deficiencies, allows attackers to increase their privileges.
The vulnerability of the PingAlert application server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the software solutions for managing privileged sessions, such as Zoho ManageEngine Access Manager Plus, the software for control, management, and auditing, Zoho ManageEngine Password Manager Pro, and the software for managing privileged access, ManageEngine Privileged Access Manager 360 (PAM360), stems from incorrect path name restrictions. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the Zoho ManageEngine Access Manager Plus, a software solution for controlling, managing, and auditing privileged sessions; the Zoho ManageEngine Password Manager Pro, a software solution for controlling access privileges; and the ManageEngine Privileged Access Manager 360...
The vulnerability of the Nagios XI monitoring tool, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Nagios XI monitoring tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the NVIDIA GPU Display Driver lies in its uncontrolled search path, which allows attackers to trigger system failures, gain elevated privileges, execute arbitrary code, and forge protected information.
The vulnerability of the NVIDIA GPU Display Driver is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, and forge protected information...
The vulnerability of the Punycode character transformation method, which is used to process domain names, allows attackers to increase their privileges.
The vulnerability of the Punycode character encoding method for processing domain names is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the fromSetIpBind() function in Tenda CH22 router software allows a attacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.
The vulnerability of the fromSetIpBind function in Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain unauthorized access to...
The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges
The vulnerability of the Digital Media component of Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Agere Modem Driver for Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Agere Modem Driver for Windows operating systems is related to the misuse of a non-secure pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the access control list component in Cisco SD-WAN vEdge microprogramming router software allows a perpetrator to bypass the access control list.
The vulnerability of the access control list component in Cisco SD-WAN vEdge microprogramming device software is related to access control errors. Exploiting this vulnerability could allow a malicious actor to bypass the access control list...
The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, allows a hacker to gain access and modify data.
The vulnerability of the Device Analytics component, which manages microprogrammed software on Cisco Wireless Access Points, is related to a data source confirmation error. Exploiting this vulnerability could allow an attacker operating remotely to gain access to modify data...
The vulnerability of the HTTP protection library for inter-site request tampering, gorilla/csrf, allows a perpetrator to carry out a CSRF attack.
The vulnerability of the HTTP protection library against cross-site request forgery, gorilla/csrf, is related to cross-site request forgery attacks. Exploiting this vulnerability can allow attackers to execute a CSRF attack...
The vulnerability of the annotate() and alias() functions in the Django web application framework allows a hacker to execute arbitrary code.
The vulnerability of the LoginView, LogoutView, and setlanguage functions in the Django web application framework is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the Service Port FTP-server ProFTPD component, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Service Port FTP-server ProFTPD component is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or cause service failures...
The vulnerability of the page_pool_recycle_in_ring() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the pagepoolrecycleinring function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `ksmbd_krb5_authenticate()` function in the `ksmbd` component of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the ksmbdkrb5authenticate function in the ksmbd component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...
The vulnerability of the v3d_job_update_stats() function in the File Descriptor Handler component of the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the v3djobupdatestats function in the File Descriptor Handler component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mgmt_hci_cmd_sync() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the mgmthcicmdsync function in the Linux operating system is related to the execution of operations outside the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the visualization plugin for the Infinity Datasource platform used in Grafana monitoring and observation systems stems from server-side request manipulation. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Infinity Datasource plugin for the Grafana monitoring and observation platform relates to server-side request manipulation. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of FortiWeb web applications’ network firewalls, related to the lack of protective measures for SQL query structures, allows attackers to disclose protected information.
The vulnerability of FortiWeb web applications’ network firewalls is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of microprogramming software in embedded Qualcomm chips, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of microprogramming software in embedded Qualcomm chips relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to execute arbitrary code...
The vulnerability of D-Link DIR-890L router’s microprogramming software, which stems from the use of rigidly encoded login credentials, allows a hacker to execute arbitrary code.
The vulnerability of D-Link DIR-890L router’s microprogramming software is related to the use of rigidly encoded login credentials. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
The vulnerability of the IBM Aspera Faspex file-sharing application, related to incorrect session expiration times, allows attackers to compromise the integrity of the protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information from a remote location...
The vulnerability of the vCard component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code under the root user’s context.
The vulnerability of the vCard component of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...
The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.
The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system allows a violator to execute arbitrary code within the context of the root user.
The vulnerability of the Apple CarPlay implementation of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Cast component of the Google Chrome browser, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Cast component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...
The vulnerability of the sub_4238E8() function in Netgear JWNR2000v2 microprogrammed software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sub4238E8 function in Netgear JWNR2000v2 microprogrammed software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...
The vulnerability of Autodesk 3dsMax software for 3D modeling, animation, and visualization lies in the possibility of an operation going beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code or cause system failures.
The vulnerability of the software for 3D modeling, animation, and visualization in Autodesk 3dsMax relates to the execution of operations beyond the buffer boundaries in memory when processing PSD files. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause system...
The vulnerability of the microprogramming software of the Aitemi M300 wireless signal amplifiers (MT02) arises from the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability of the microprogramming software of the Aitemi M300 MT02 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the SSID identifier. Exploiting this vulnerability can allow a remote attacker...
The vulnerability of the Site Survey web interface of the Intelbras RX 1500 and RX 3000 software allows attackers to perform cross-site scripting attacks.
The vulnerability of the Site Survey web interface of the Intelbras RX 1500 and RX 3000 software lies in the lack of measures taken to neutralize special elements during the processing of ESSID identifiers. Exploiting this vulnerability allows a remote attacker to perform domain-external attacks ...
The vulnerability of the getAuthCode() function in D-Link DIR-605L router microprogramming software allows a hacker to execute any code with root privileges.
The vulnerability of the getAuthCode function in D-Link DIR-605L router microprogramming software is related to buffer overflows in the CAPTCHA processing stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...
The vulnerability of the CFNetwork component allows attackers to escalate their privileges on operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS.
The vulnerability of the CFNetwork component in operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, and the Safari browser allows attackers to perform spoofing attacks.
The vulnerability of the Web page rendering module in WebKit operating systems for iOS, iPadOS, and the Safari browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...
The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems allows a perpetrator to execute arbitrary commands.
The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
The vulnerability in the web interface for managing Microprogramming Software on Intelbras RX 1500 and RX 3000 allows attackers to carry out cross-site scripting attacks.
The vulnerability of the web interface for managing Microprogramming Software on Intelbras RX 1500 and RX 3000 is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sendi...
The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the execution of operations beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...