97848 matches found
Online Store Platform Security Bypass
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B stems from insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security...
Linux mptcp_recvmsg Heap Buffer Overflow DoS
The vulnerability of the mptcprecvmsg function in the Linux operating system is related to the lack of input validation for cyclic operations. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Tenda FH451 Sub_3C434 Code Execution
The vulnerability of the sub3C434 function /goform/AdvSetWan of the Tenda FH451 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Next.js HTTP Request Processing Privilege Escalation
The vulnerability of the Next.js web application development software platform is related to shortcomings in HTTP request processing. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...
Linux kernel DMA driver Heap Buffer Overflow DoS
The vulnerability of the tiam335xxbarrouteallocate function in the drivers/dma/ti/dma-crossbar.c module of the Linux kernel’s DMA driver relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...
Linux DRI MDP5 Pipe Overflow DoS
The vulnerability of the mdp5pipeassign function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause system...
I2C hardware layer Buffer Overflow
The vulnerability of the piix4probe function in the driver module i2c/busses/i2c-piix4.c of the I2C hardware layer of the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the nv3arb function in the Linux kernel’s drivers/video/fbdev/riva/rivahw.c file is related to incorrect zero division operations. Exploiting this vulnerability can allow an attacker to cause system failures...
TIM image analyzer software ReadTIMImage DoS
The vulnerability of the ReadTIMImage function in the TIM image analyzer and the ImageMagick console-based graphics editor relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
RoundCube Webmail XSS
The vulnerability of the RoundCube Webmail email client is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
Nextcloud Server Authentication Bypass
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server relates to bypassing authentication via a key controlled by the user. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of protected information...
Nextcloud Contacts Data Compromise
The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using Nextcloud data storage, is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
Push Message Routing Service Privilege Escalation
The vulnerability of the Push Message Routing Service in Windows operating systems stems from the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft Office Memory Use After Free Code Execution
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
SICAM SIAPP SDK External Control File Path
The vulnerability of the SICAM SIAPP SDK software development kit is related to incorrect external manipulation of the name or file path. Exploiting this vulnerability can allow an attacker to cause a service failure...
formWebTypeLibrary() function Code Execution
The vulnerability of the formWebTypeLibrary function in the microprogramming software for Tenda FH1202 is related to the execution of an operation outside the buffer in memory when processing the webSiteId parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FFmpeg Resource Identifier Access Confidential Data
The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
Netmake ScriptCase Platform Bypass Administrator Password
The vulnerability of the Production Environment module of the Netmake ScriptCase platform for developing web applications in PHP is related to errors in the representation of certain functions. Exploiting this vulnerability can allow a malicious actor to bypass the administrator’s password by...
SMB Server Kernel Buffer Overflow
The vulnerability of the ksmbdsessionrpcopen function in the fs/smb/server/mgmt/usersession.c module, which is part of the SMB server support in Linux operating systems, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise th...
jsPDF addJS Code Execution
The vulnerability of the addJS function in the jsPDF library for creating PDF files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, provided that the user opens a specially crafted PDF file...
AMD SMM code execution
The vulnerability of AMD’s SMM microprogramming graphics processor driver is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
kube-apiserver DoS
The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Microsoft Outlook Office Sensitive Data Protection
The vulnerability of the Microsoft Outlook client, as well as Microsoft Office suites, Excel, and 365 Enterprise Apps, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...
KWebVision SCADA Unauthorized Access
The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
Microsoft Office Security Decision Bypass
The vulnerability of the Microsoft Office suite is related to the use of unreliable input data during security decision-making. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...
Linux drivers pmdomain imx8mp-blk-ctrl Heap Buffer Overflow DoS
The vulnerability related to the definition of the structure imx8mpblkctrldomaindata in the drivers/pmdomain/imx/imx8mp-blk-ctrl.c module of the Linux operating system is linked to errors in the device initialization algorithm. Exploiting this vulnerability can allow an attacker to cause service...
SolarWinds IT infrastructure management Security Bypass
The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands remotely...
Oracle VM VirtualBox Full Control
The vulnerability of the Core component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain full control over the application...
Access Controller Service Privilege Escalation
The vulnerability of the access controller service, which allows access to the Capability Access Management Service camsvc of Windows operating systems, arises due to a race condition. Exploiting this vulnerability can allow an attacker to enhance their privileges...
GlobalProtect PAN-OS DoS
The vulnerability of the GlobalProtect secure remote access function of the PAN-OS operating system is related to improper handling of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
SMB Server Privilege Escalation
The vulnerability of the SMB Server component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Windows Deployment Services Code Execution
The vulnerability of Windows Deployment Services for Windows operating systems is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Nimes Backup and Recovery SRF
The vulnerability of the Nimes Backup and Recovery software for automated backup and data recovery operations is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
Tenda M3 Router DoS
The vulnerability of the formSetAdInfoDetails function /goform/setAdInfoDetail in the Tenda M3 router software is related to the issue where an operation is executed outside the buffer in memory when processing parameters such as adName, smsPassword, smsAccount, weixinAccount, weixinName,...
Quest KACE Systems Management Appliance Cryptographic Signature Verification
The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to upload backup files into the system remotely...
AMD Crash Defender DoS
The vulnerability of the AMD Crash Defender software for AMD Radeon graphics processors is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Health check-up Platform Unauthorized Access
The vulnerability of the “Health check-up” patient physiological monitoring platform involves the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Google Chrome Password Manager Disclosure Code Execution
The vulnerability of the Password Manager component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to disclose sensitive information and execute arbitrary codes...
DirectX Graphics Kernel Privilege Escalation
The vulnerability of the DirectX Graphics Kernel Dxgkrnl.sys driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Google Chrome V8 Engine Use-After-Free
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...
D-link DIR-878A1 Router Arbitrary Command Execution
The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Google Chrome V8 Engine Data Compromise
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to reading beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to exploit the accessibility of protected information...
SROOT Component Data Replacement
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for DGX Spark artificial intelligence systems is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to replace data...
SROOT Component Unauthorized Access
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
NVIDIA NeMo Code Execution
The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow attackers to execute arbitra...
OSGeo GeoServer WMS Disclosure DoS
The vulnerability of the Web Map Service WMS protocol implementation in the software for managing and publishing geospatial data on the OSGeo GeoServer server is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to...
Linux ttm_lru_bulk_move_del DoS
The vulnerability of the ttmlrubulkmovedel function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
Vim clear_tv() Code Execution
The vulnerability of the cleartv function in the Vim text editor is related to repeated release of the exploit. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Zabbix Authentication Bypass
The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...