97943 matches found
Red Hat Enterprise Linux Data Compromise
The vulnerability of the gdm-2.30.4 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
Red Hat Enterprise Linux Data Compromise
The multiple vulnerabilities in the abrt-addon-kerneloops-2.0.8 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
Red Hat Enterprise Linux Data Compromise
Multiple vulnerabilities exist in the kernel-2.4.9 of the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Enlogic SCADA Virtual Controller File Path Traversal
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...
HTTP/3 Server Data Compromise
The vulnerability of HTTP/3 server-side software such as HAProxy is related to errors in processing input data length parameters. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...
CameraCapture Component Code Execution
The vulnerability of the CameraCapture component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
GPU components Confidential Data Access
The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
SVG Component Compromise Data Compromise
The vulnerability of the SVG component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
Online Art Gallery Shop Project Unauthorized Access
The vulnerability of the /admin/adminHome.php file on the web platform used for displaying and selling art works in the Online Art Gallery Shop Project is related to incorrect elimination of special elements in the output data. Exploitation of this vulnerability could allow an attacker, operating...
DIAFAN.CMS Unauthenticated Access
The vulnerability of the DIAFAN.CMS website content management system is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
MimeHandlerView DoS
The vulnerability of the MimeHandlerView component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
Remote Desktop Client Code Execution
The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktop operations is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Corosync Cluster Engine Integer Overflow DoS
The vulnerability of the Corosync cluster engine is related to a numerical overflow condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
zimbra-snmp Code Execution
The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux CAN bus Function Heap Buffer Overflow DoS
The vulnerability of the cgwcsumcrc8rel function in the net/can/gw.c module of the Linux operating system’s CAN subsystem relates to access to a memory cell preceding the buffer’s start. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the lecarpclearvccs function in the net/atm/lec.c module, which is part of the networking functions in the Linux kernel, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Component DoS
The vulnerability in the drivers/net/wireless/realtek/rtw88/main.c component of the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
QEMU Block VMDK Heap Buffer Overflow DoS
The vulnerability of the block/vmdk.c component of the QEMU hardware emulation software is related to reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created VMDK image...
Linux kernel Media DoS
The vulnerability of the Linux operating system’s kernel media component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
libfreerdp H.264 Information Disclosure
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...
WebKitGTK WebKit DoS
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Cisco Integrated Management Controller Command Execution Privilege Escalation
The vulnerability of the Web interface for managing Cisco Integrated Management Controllers involves insufficient validation of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and elevate their privileges to the root level...
Cisco Catalyst SD-WAN Access Control
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
GitPython Code Execution
The vulnerability of the checkunsafeoptions function in the Python library for interacting with Git repositories, GitPython, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...
FileZilla FTP Code Execution
The vulnerability of the FileZilla Client FTP client is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain full control over the system...
WTF web browsers DoS
The vulnerability of the WTF web browsers Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...
Windows Filtering Platform Privilege Escalation
The vulnerability of the Windows Filtering Platform WFP in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
WebRTC Data Compromise
Vulnerability of WebRTC technology implementation: The networking of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relies on copying buffers without checking the size of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
Resilient File System Code Execution
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
TOTOLINK A8000RU CGI Handler setStorageCfg Command Execution
The vulnerability of the setStorageCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute...
vTiger CRM Import Module Unauthenticated RCE
The vulnerability of the module for importing customer relationship management files in vTiger CRM involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information, load arbitrary files...
Linux kernel CAN Network Device Driver Use-After-Free
The vulnerability of the gsusbxmitcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the...
Trellix Endpoint Security Privilege Escalation
The vulnerability of the Trellix Endpoint Security HX Agent software is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...
drivers/usb/dwc3/host.c Heap Buffer Overflow DoS
The vulnerability of the dwc3hostinit function in the drivers/usb/dwc3/host.c file of the DesignWare USB3 controller support driver in the Linux operating system is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
GitLab Rapid Diffs Unauthorized Access
The vulnerability of the Rapid Diffs mechanism in the Git-based software platform for collaborative code development in GitLab EE/CE relates to the absence of authentication. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access to protected information...
Network component Google Chrome Information Disclosure
The vulnerability of the Network component in Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential information through a specially created HTML page...
Google Base Sandbox Bypass Chrome Windows OS Bypass
The vulnerability of Google Base database, a browser-based system by Google, and the Google Chrome browser, as well as the Windows operating system, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism through a...
GitLab Reverse DNS Unauthorized Access
The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development on GitLab EE/CE is related to the dependence of critical operations on the reverse DNS solution. Exploiting this vulnerability can allow a malicious actor to ga...
Dell PowerFlex Manager Privilege Escalation
The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack is related to improper privilege assignment. Exploiting this vulnerability can allow attackers to enhance their privileges...
Netty DNS Codec Utilization DoS
The vulnerability of the io.netty.handler.codec.dns.DnsCodecUtil component in the Netty framework, which is used for developing network applications, servers, and clients, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...
Jenkins XStream RCE
The vulnerability of the XStream library used by Jenkins automation servers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to replace HTTP requests, gain unauthorized access to the Script Console, execute arbitrary code, or...
Secure Boot Bypass
The vulnerability of the Secure Boot implementation for Windows operating systems lies in the dependency on a component that cannot be updated. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
Windows Bluetooth Port Driver Exploit
The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Windows UEFI boot interface bypass security
The vulnerability of the Windows UEFI boot interface in operating systems involves a violation of data protection mechanisms. Exploiting this vulnerability can allow attackers to bypass existing security measures...
Linux kernel bonding driver Heap Buffer Overflow DoS
The vulnerability of the bondsetupbyslave function in the Linux kernel’s bonding driver is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
Updates Environment Management Code Execution
The vulnerability of the Updates Environment Management component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...
Microsoft Office Memory Disclosure
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...
Microsoft Windows Defender Privilege Escalation
The vulnerability of Microsoft Windows Defender operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to gain increased privileges...