The vulnerability of the setcred() function in the operating system kernel of FreeBSD allows a perpetrator to execute arbitrary code, increase their privileges, or cause service failures.

The vulnerability of the setcred function in the operating system kernel of FreeBSD is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code, increase their privileges, or cause service failures...

The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of measures taken to neutralize special elements in the output data, allowing attackers to perform spoofing attacks.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to perform spearishing attacks...

The vulnerability of Microprogrammed Software in Ecostruxure Machine Expert HVAC controllers, related to the storage of confidential information in an open manner, allows a intruder to disclose the protected information.

The vulnerability of the microprogramming software used in Ecostruxure Machine Expert HVAC programmable logic controllers is related to the storage of confidential information in an open manner. Exploiting this vulnerability could allow a intruder to disclose the protected information...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of requests at the server side. This allows attackers to bypass existing security mechanisms.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B stems from insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security...

The vulnerability of the fromSetIpBind() function (/goform/SetIpBind) in the httpd microprogramming software for Tenda F456 routers allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function /goform/SetIpBind in the HTTPD microprogramming software for Tenda F456 routers is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacke...

The vulnerability of the remote image blocking function in the RoundCube Webmail client allows attackers to disclose protected information.

The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the mod_sql module in the ProFTPD FTP server allows a hacker to execute arbitrary commands.

The vulnerability of the modsql module in the ProFTPD FTP server lies in the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a malicious user to gain unauthorized access and modify protected information.

The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access and modify protected information...

The vulnerability of the dw2102_i2c_transfer() function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dw2102i2ctransfer function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the piix4_probe() function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the piix4probe function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the nv3_arb() function in the Linux kernel’s driver/video/fbdev/riva/riva_hw.c file allows a hacker to cause a service failure.

The vulnerability of the nv3arb function in the Linux kernel’s drivers/video/fbdev/riva/rivahw.c file is related to incorrect zero division operations. Exploiting this vulnerability can allow an attacker to cause system failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a name with an incorrect link, allowing a violator to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of the Multiple UNC Provider Kernel Driver in Windows operating systems allows attackers to gain increased privileges.

The vulnerability of the Multiple UNC Provider Kernel Driver in Windows operating systems is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the smbd_negotiate() function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...

The vulnerability of the NTPSyncWithHost handler in the /usr/sbin/shttpd executable of the TOTOLINK X6000R router software, allowing a attacker to execute arbitrary commands.

The vulnerability of the NTPSyncWithHost handler in the /usr/sbin/shttpd executable of the X6000R router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the adv_routing.php implementation of the Web Configuration Interface component of the D-Link DIR-615 router software allows a hacker to execute arbitrary code.

The vulnerability of the advrouting.php implementation of the Web Configuration Interface component of the D-Link DIR-615 router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command when processing the...

The vulnerability of the raid_status() function in the drivers/md/dm-raid.c module of the Linux operating system’s device driver for multiple devices (RAID and LVM), which allows an attacker to access protected information or cause service failures.

The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the addJS() function in the jsPDF library allows a hacker to execute arbitrary code.

The vulnerability of the addJS function in the jsPDF library for creating PDF files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, provided that the user opens a specially crafted PDF file...

The vulnerability of the kube-apiserver component, a software component for managing clusters of virtual machines in Kubernetes, allows a attacker to cause a service failure.

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks lies in its uncontrolled search mechanism, which allows a intruder to execute arbitrary commands with administrator privileges.

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code with administrator privileges using a specially craft...

The vulnerability of the Shell command shell in Windows operating systems, which allows attackers to bypass existing security mechanisms

The vulnerability of the Shell command shell in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

The vulnerability of the Java VM component of the Oracle Database Server system allows a hacker to trigger a service failure.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and execute arbitrary commands.

The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands remotely...

The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS operating systems allows attackers to enhance their privileges.

The vulnerability of the rest-api-get and rest-api-set configurations in FortiOS systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the software for centralized logging, analysis, and storage of logs by Graylog, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the Graylog log collection, analysis, and storage software lies in the deficiencies of the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of Google Chrome’s Digital Credentials component allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of Google Chrome’s Digital Credentials component is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the strcpy() function in the /goform/formConfigCliForEngineerOnly file of the UTT 512W router microprogramming system, which allows a attacker to execute arbitrary code.

The vulnerability of the strcpy function in the /goform/formConfigCliForEngineerOnly file of the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code by...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the CNCSoft-G2 numerical control software lies in the execution of operations beyond the buffer limits in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the CNCSoft-G2 numerical control software lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of hosting game streams on Sunshine, related to the manipulation of cross-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of Sunshine’s hosting for gaming streams relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web page...

The vulnerability of the UniFi Access access control system, related to deficiencies in authentication procedures, allows a perpetrator to gain full control over the system.

The vulnerability of the UniFi Access access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the system...

The vulnerability of the Pillow image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Pillow image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The software’s vulnerability related to integrating PI Integrator for Business Analytics involves unlimited uploading of dangerous types of files, allowing attackers to upload and save any type of files they desire.

The vulnerability of the PI Integrator for Business Analytics software lies in its ability to allow unlimited uploading of dangerous files. Exploiting this vulnerability could enable a malicious actor to upload and store any desired files remotely...

The vulnerability of the Firefox interface component for people with limited browser capabilities allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Firefox interface component for people with limited browser capabilities is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the __stack_chk_fail() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the stackchkfail function in the Linux operating system’s kernel is related to overflow in the stack buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Elasticsearch search engine, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Elasticsearch search engine is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Password Manager component in the Google Chrome browser allows a hacker to disclose protected information and execute arbitrary codes.

The vulnerability of the Password Manager component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to disclose sensitive information and execute arbitrary code...

The vulnerability of the send_ipi() function in cross-platform Xen hypervisors of Linux operating systems allows attackers to access confidential information.

The vulnerability of the sendipi function in the cross-platform hypervisor of the Linux operating system is related to reading data beyond the allowed range. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the DirectX Graphics Kernel subsystem (Dxgkrnl.sys) in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the DirectX Graphics Kernel Dxgkrnl.sys driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the formWsc() function in TOTOLINK N300RT router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the formWsc function in TOTOLINK N300RT router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the targetAPSsid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the iommu/iommufd/io_pagetable.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iommu/iommufd/iopagetable.c component in the Linux operating system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_4438A4() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the FortiExtender signal booster’s microprogramming software arises from copying buffers without checking the size of the input data. This allows a hacker to execute arbitrary code.

The vulnerability of the FortiExtender signal booster’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of FTP servers for managing Rumpus files, which stems from the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FTP server for managing Rumpus files is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the j1939_netdev_start() function in the net/can/j1939/main.c module allows a hacker to cause a service failure for Linux kernel-based CAN bus interfaces.

The vulnerability of the j1939netdevstart function in the net/can/j1939/main.c module, which supports J1939 CAN interfaces in Linux kernels, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...