97848 matches found
libfds Heap Buffer Overflow Privilege Escalation
The vulnerability of the fdssyspassDebugPasswdret function in the libfds.so library of the Zyxel GS1900 series router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
libhevc DoS
The vulnerability of the libhevc library in the Mediaserver application of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures, device freezes, and reboots by using a specially created file...
vvdecapp Component Buffer Overflow DoS
The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...
TrueConf Server Authentication Privilege Escalation
The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...
Directum Web Agent Code Execution
The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...
GnuTLS RSA PSK Bypass Unauthorized Access
The vulnerability of the gnutlsprocrsapskclientkx function in the lib/auth/rsapsk.c file of the GnuTLS cryptographic library is related to incorrect handling of zero bytes or NULL characters during data exchange. Exploiting this vulnerability could allow an attacker to bypass existing security...
Windows Admin Center Privilege Escalation
The vulnerability of the Windows Admin Center management tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
JEvents Component Code Execution
The vulnerability of the JEvents component in the Joomla! content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cursor Model Context Protocol Code Execution
The vulnerability of the Model Context Protocol MCP implementation of the artificial intelligence-based code editor involves the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CloudFlare Quiche DoS
The vulnerability of the software implementing the transport protocols QUIC and HTTP/3 in CloudFlare Quiche lies in the fact that data is sent at a speed that exceeds the actual path support provided by the system due to unlimited resource distribution. Exploiting this vulnerability can allow a...
Intel Privilege Escalation
The vulnerabilities of microprogrammed software in Intel processors are related to access control errors. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
Mediatek Kernel DoS
The vulnerability of mediatek’s Linux operating system kernel components relates to the assignment of the NULL pointer in the mtksofdailinkfixup function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Microsoft.NET Framework Symbolic Link Privilege Escalation
The vulnerability of the Microsoft.NET Framework and.NET operating systems for Windows is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...
HDF File Processing Library Heap Buffer Overflow DoS
The vulnerability of the H5Ochunkdeserialize function in the H5Ocache.c component, a library for processing HDF5 files, is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service interruptions by usi...
Hitachi JP1/Performance Management Default Access Disclosure
The vulnerability of software tools for monitoring and managing network infrastructure of Hitachi JP1/Performance Management is related to the default access settings. Exploiting this vulnerability can allow attackers to gain access to files and directories...
TP-Link Deco M4 Mesh-system Arbitrary Command Execution
The vulnerability of Mesh-system TP-Link Deco M4’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Xmill DecodeTreeBlock Code Execution
The vulnerability of the DecodeTreeBlock function in the XML data compression tool Xmill is related to a memory boundary error during XML file processing. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
D-Link DIR-620 XSS
The vulnerability of the web interface of D-Link DIR-620 router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
FFJPEG Heap Buffer Overflow DoS
The vulnerability of the jfifencode function in the FFJPEG library for encoding and decoding JPEG files is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...
HgDriver Component Confidential Data Compromise
The vulnerability of the HgDriver component in the PHP Composer dependency manager is related to improper cleaning of Mercurial repository URLs. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through the...
CommuniGate Pro Access Control Unauthorized Modification
The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...
R7-Officer document editor XSS
The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to carry out XSS attacks...
Tenda AC6 Router Code Execution
The vulnerability of the saveParentControlInfo function in the Tenda AC6 router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the deviceName parameter. Exploiting this vulnerability could allow a remote attacker to execute...
Linux kernel Fuse Readahead Disclosure
The vulnerability of the fuse component’s readaheadfolio function in the Linux operating system is related to insufficient protection for service data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this function...
OpenSearch System Crash DoS
The vulnerability of the OpenSearch component in the PeopleSoft Enterprise PeopleTools business application suite is related to the exhaustion of memory resources. Exploiting this vulnerability can allow an attacker to cause a system crash or trigger service failures through HTTP requests...
D-Link DI-8100G msp_info.htm Arbitrary Command Execution
The vulnerability of the mspinfo.htm file on the D-Link DI-8100G network device is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitra...
protobuf-c Parse Required Member Integer Overflow
The vulnerability of the parserequiredmember function in the protobuf-c data serialization protocol is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and cause the system to be completely compromised...
Antivirus Unauthorized Deletion
The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to perform unauthorized deletion of files...
Lexmark Web Service Code Execution
The vulnerability of the New Lexmark Device printers’ web service is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Huawei ManageOne CSV Injection Code Execution
The vulnerability of Huawei ManageOne, iManager NetEco, and iManager NetEco 6000 management systems lies in the absence of neutralization of certain elements in the CSV file. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...
Electron nodeIntegrationInSubFrames Disclosure
The vulnerability of the “nodeIntegrationInSubFrames” parameter in the software platform for creating Electron applications relates to the disclosure of information in error-prone data areas. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
Xtra decoder MPEG-4 DoS
The vulnerability of the Xtra decoder, which is used for decoding MPEG-4 multimedia platforms like GPAC, is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Intel Visual Compute Accelerator Privilege Escalation
The vulnerability of the Intel Visual Compute Accelerator 2 for working with media data is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PriceOracle Solidity Component Privilege Escalation
The vulnerability of the setPrice function in the PriceOracle.sol component of the decentralized price data system Compound Price Oracle is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
Blitz Identity Provider (Authentication server)
...
Microsoft Message Queuing Queue Service Code Execution
The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Online Store Path Traversal
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions. Exploiting this vulnerability can allow attackers to bypass security restrictions remotely...
OpenCode AI Code Execution
The vulnerability of the OpenCode artificial intelligence-based software development agent lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
HPE Aruba Networking EdgeConnect SD-WAN Command Line Arbitrary Command Execution
The vulnerability of the command-line interface CLI of the software-defined networking management hardware HPE Aruba Networking EdgeConnect SD-WAN is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows an attacker to execute arbitrary comman...
TOTOLINK X5000R Router setWiFiScheduleCfg() Arbitrary Command Execution
The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the eMinute parameter. Exploiti...
Drupal Pages Restriction Access Forceful Browsing
The vulnerability of the Pages Restriction Access module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...
TOTOLINK A6000R Router Command Execution
The vulnerability of the apcliwpsgenpincode function in the TOTOLINK A6000R router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in the command when processing the ifname parameter. Exploiting this vulnerability allows a remote attacker to...
Portal for ArcGIS XSS
The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created web page...
TdkLib64.sys Driver Access Disclosure
The vulnerability of the TdkLib64.sys driver in Windows operating systems is related to the unlimited functionality of system calls like IOCTL. Exploiting this vulnerability can allow an attacker to gain access to read, modify, or delete data...
D-Link DIR-816 A2 Router Buffer Overflow
The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the /goform/form2IPQoSTcAdd parameter...
GitLab Uncontrolled Resource Consumption DoS
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to create recursive pipeline connections. Exploiting this vulnerability allows a malicious actor to trigger service interruptions remotely...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
Metabase Query Privilege Escalation
The vulnerability of the Metabase data visualization and reporting software relates to the lack of measures taken to protect the SQL query structure during the processing of the resetpassword parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...
Oracle WebLogic Server Data Compromise
The vulnerability of the Oracle WebLogic Server application server’s kernel is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information using the SAML protoc...
Windows Graphics Component Code Execution
The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...