95883 matches found
The vulnerability of the built-in boa server (/boafrm/formMapDel) of the TOTOLINK X15 router’s microprogramming software allows a hacker to cause a service failure.
The vulnerability of the built-in server boa /boafrm/formMapDel of the TOTOLINK X15 router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter devicemac1. Exploiting this vulnerability allows a remote attacker ...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.
The vulnerability of microprogramming software in embedded Qualcomm chips is related to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information during RTCP protocol processing...
The vulnerability of the Trusted Execution Environment (TEE) for the deployment of Intel Trust Domain Extensions (Intel TDX) allows a perpetrator to exploit their privileges by exploiting incomplete filtering of special elements.
The vulnerability of the Trusted Execution Environment TEE for the deployment of Intel Trust Domain Extensions virtual machines is related to incomplete filtering of special elements. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the dnsserver1 and dnsserver2 parameter handlers in TP-Link TL-WR940N software allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the dnsserver1 and dnsserver2 parameter handlers in the TP-Link TL-WR940N router software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...
The vulnerability of the `compileClient`, `compileFileClient`, and `compileClientWithDependenciesTracked` templates for generating Pug markup (formerly Jade) allows attackers to execute arbitrary code.
The vulnerability of the compileClient, compileFileClient, and compileClientWithDependenciesTracked functions of the Pug template for generating HTML markup formerly Jade is related to improper code generation control. Exploiting this vulnerability could allow a remote attacker to execute arbitra...
The vulnerability of 5G MediaTek wireless communication modules, related to insufficient validation of input data, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules by MediaTek is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the DisconnectVPN function in the microprogramming software for TOTOLINK X18 allows a hacker to execute arbitrary commands.
The vulnerability of the DisconnectVPN function in the TOTOLINK X18 router microprogramming system is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely using the pid parameter...
The vulnerability of programming tools for monitoring and managing network infrastructure Hitachi JP1/Performance Management lies in the default access settings, which allow a perpetrator to gain access to files and directories.
The vulnerability of software tools for monitoring and managing network infrastructure of Hitachi JP1/Performance Management is related to the default access settings. Exploiting this vulnerability can allow attackers to gain access to files and directories...
The vulnerability of the administrator consoles of microprogrammed software for wireless signal amplifiers from D-Link’s DCH-M225 allows a intruder to execute arbitrary commands.
The vulnerability of the administrator consoles of microprogrammed software for D-Link DCH-M225 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s command processing when handling the “media renderer” parameter in the...
The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the /goform/form2IPQoSTcAdd parameter...
The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a attacker to trigger an emergency shutdown of the kernel’s memory dump process.
The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a failure in the kernel’s memory dump process due to receiving an incorrect DHCPv6 packet...
The vulnerability of JunOS operating systems in routers from the QFX10K Series, EX9200 Series, ACX Series, MX Series, and PTX Series, allows attackers to increase their privileges.
The vulnerability of JunOS operating systems in routers from the QFX10K Series, EX9200 Series, ACX Series, MX Series, and PTX Series is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the MP4_ReadBox_rdrf function in the Media Player software VideoLAN VLC allows a attacker to cause a service failure.
The vulnerability of the MP4ReadBoxrdrf function in the VideoLAN VLC media player’s libmp4.c file is related to numerical processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the cloop operating system package of OpenSUSE can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the HTTP response processing flow application interface in the Urllib3 library for Python programming language allows a attacker to cause a service failure.
The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) relates to the occurrence of operations outside the buffer in memory, allowing a malicious actor to cause service failures.
The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...
The vulnerability of the Windows Graphics Component, which allows a hacker to execute arbitrary code on Windows operating systems
The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
The vulnerability of the implementation of the Model Context Protocol (MCP) for the code editor based on artificial intelligence, Cursor, allows a hacker to execute arbitrary code.
The vulnerability of the Model Context Protocol MCP implementation of the artificial intelligence-based code editor involves the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the PDF Preview module in the HarmonyOS operating system, which allows a hacker to trigger a service failure
The vulnerability of the PDF Preview module in the HarmonyOS operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the E-Staff automated recruitment process system, related to errors in data filtering during object updates, allows a perpetrator to execute arbitrary JavaScript code.
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering during object updates. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...
The vulnerability of the apcli_wps_gen_pincode function in the TOTOLINK A6000R router’s microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the apcliwpsgenpincode function in the TOTOLINK A6000R router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in the command when processing the ifname parameter. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of VMware ESXi, Workstation, Fusion, and Cloud Foundation software lies in the ability to write beyond the buffer boundaries, allowing attackers to increase their privileges.
The vulnerabilities of VMware ESXi, Workstation, Fusion, and Cloud Foundation software are related to writing beyond the buffer boundaries. Exploiting these vulnerabilities can allow attackers to gain increased privileges...
The vulnerability of the dialog/select_media.php implementation in the DedeCMS content management system allows attackers to read arbitrary files.
The vulnerability of the dialog/selectmedia.php implementation in the DedeCMS content management system is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...
The vulnerability of the implementation of the IP/MPLS protocol in Juniper Networks’ Junos OS-based QFX10000 series routers allows a attacker to cause a service failure.
The vulnerability of the IP/MPLS protocol implementation in Juniper Networks’ Junos OS-based QFX10000 routers stems from improper validation of certain indices, positions, or offsets in the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...
The vulnerability of D-Link DSL-2875AL and DSL-2877AL router microprogramming software, related to unencrypted storage of user credentials, allows a intruder to gain unauthorized access to protected information.
The vulnerability of D-Link DSL-2875AL and DSL-2877AL router microprogramming systems lies in the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Apache Tika content detection and analysis environment, related to the execution of operations beyond the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Apache Tika content detection and analysis engine lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from incorrect validation of input data, allowing an attacker to execute arbitrary code.
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recording...
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.
The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The cloop-kmp-default-debuginfo package in the operating system openSUSE has multiple vulnerabilities. Exploiting these vulnerabilities can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the User-Mode Power Service (UMPS) in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the User-Mode Power Service UMPS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability in the `src/runtime/server/og-image/context.ts` file of the Open Graph Image generation module from the Nuxt OG Image framework for creating web applications and sites allows attackers to perform spoofing attacks.
The vulnerability in the src/runtime/server/og-image/context.ts file of the Open Graph Image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites, relates to the loading of external, unreliable data alongside reliable data. Exploiting this...
The vulnerability of the `gix_worktree_state::checkout()` function in the Rust library for working with Git repositories like gitoxide, allows a malicious actor to execute arbitrary code.
The vulnerability of the gixworktreestate::checkout function in the Rust library for working with Git repositories like gitoxide is related to an incorrect definition of symbolic references before accessing files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...
The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows a perpetrator to elevate their privileges and execute arbitrary code.
The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
The vulnerability of the FortiWeb web application’s network interface programming interface, related to stack-based buffer overflows, allows an attacker to execute arbitrary code.
The vulnerability of the FortiWeb web application’s network interface program interface is related to buffer overflow attacks based on stacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted HTTP requests...
The vulnerability in the implementation of the OBEX protocol for Bluetooth on the Linux BlueZ operating system allows a hacker to cause a service failure.
The vulnerability of the OBEX protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data outside of the allowed range. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...
Vulnerability of the efx_farch_handle_tx_event() function in the drivers/net/ethernet/sfc/farch.c module – a driver for supporting Ethernet network adapters in the Linux kernel, which allows an attacker to cause a service failure.
Vulnerability of the efxfarchhandletxevent function in the drivers/net/ethernet/sfc/farch.c module – The Linux kernel’s Ethernet network adapter support driver is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the Kernel Streaming WOW Thunk Service Driver (ksthunk.sys) in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Tinode Chat messaging platform, which allows attackers to perform cross-site scripting attacks
The vulnerability of the Tinode Chat messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by injecting specially crafted JavaScript code...
The vulnerabilities of the Handler for User Photo Upload Command and the Handler for Picture Upload Command in the microprogrammable biometric terminals ZkTeco ProFace X, Smartec ST-FR043, and Smartec ST-FR041ME allow a perpetrator to gain unauthorized access, enabling them to read, modify, or delete data.
The vulnerability of the Handler for User Photo Upload Command and Handler for Picture Upload Command components of the microprogrammed software for biometric terminals ZkTeco ProFace X, Smartec ST-FR043, and Smartec ST-FR041ME is related to errors in processing the relative path to the catalog...
The vulnerability of GE HealthCare EchoPAC medical software lies in the incorrect granting of permissions for critical resources, allowing an intruder to gain unauthorized access to protected information, enhance their privileges, or execute arbitrary codes.
The vulnerability of GE HealthCare EchoPAC medical software is related to the incorrect granting of permissions for critical resources. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, increase their privileges, or execute arbitrary code...
The vulnerability of the formSetVirtualSer function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetVirtualSer function in the Tenda AC10U router’s microprogramming software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the Web page rendering module in WebKit operating systems for macOS, iOS, iPadOS allows attackers to intercept DNS requests with the Private Relay enabled.
The vulnerability of the Web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely intercept DNS requests with Private Relay enabled...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the recovery mechanism of G Data antivirus software allows attackers to enhance their privileges.
The vulnerability of the file recovery mechanism of the G Data antivirus software is related to incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...
The vulnerability of the `nodeIntegrationInSubFrames` parameter in the software platform for creating Electron applications allows a hacker to disclose protected information.
The vulnerability of the “nodeIntegrationInSubFrames” parameter in the software platform for creating Electron applications relates to the disclosure of information in error-prone data areas. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.
The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...