The vulnerability in the downloadFile.cgi script of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R router microprogramming systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the software solution for multidisciplinary optimization, the Multidisciplinary Optimization Engineer, arises from the lack of measures taken to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for multidisciplinary optimization relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability in the `net/sched/sch_prio.c` component of the Linux operating system allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the net/sched/schprio.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, compromise its integrity, and cause...

The vulnerability of the TCP/IP driver for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the TCP/IP driver for Windows operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Bank Account Application component of the SAP S/4HANA software platform allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Bank Account Application component in the SAP S/4HANA software platform is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to potentially compromise the integrity of the protected information...

The vulnerability of the Storage Manager software, a microprogramming-based system used in industrial digital gas analyzers like MEAC300-FNADE4, allows attackers to execute brute-force attacks.

The vulnerability of the Storage Manager software in the MEAC300-FNADE4 industrial digital gas analyzer is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack...

The vulnerability of the PreventLocalEntityResolver class in the software for administrative and publishing of geodata on the OSGeo GeoServer server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PreventLocalEntityResolver class in the software for administrative and publishing of geodata on the OSGeo GeoServer server is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to...

The vulnerability in the GeoServer Web Feature Service (WFS) software, used for managing and publishing geospatial data on the OSGeo GeoServer server, allows a perpetrator to disclose protected information.

The vulnerability in the GeoServer Web Feature Service WFS software, used for managing and publishing geospatial data on the OSGeo GeoServer server, is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose...

The vulnerability of the ipsla_ippm_server function in Cisco IOS, IOS XE, and Cisco IOS XR systems allows a attacker to cause a service failure.

The vulnerability of the ipslaippmserver function in Cisco IOS, IOS XE, and Cisco IOS XR is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the debug logging function in the audit log of the Cisco Duo Authentication Proxy allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the debug logging function in the audit log of the Cisco Duo Authentication Proxy is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `pkg/packet/bgp/bgp.go` component, which is part of the BGP Border Gateway Protocol implementation by GoBGP, allows a attacker to cause a service failure.

The vulnerability of the pkg/packet/bgp/bgp.go component, which is part of the BGP Border Gateway Protocol implementation by GoBGP, is related to an error in calculating the value of softwareVersionLen. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the software for deploying and executing AI models with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) arises from the execution of operations beyond the buffer boundaries in memory. This allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access ...

The vulnerability of Trendnet’s microprogrammed router software TEW-822DRE allows a hacker to escalate their privileges and gain full control over the device.

The vulnerability of the Trendnet TEW-822DRE router microprogramming system’s demon vftpd software is related to incorrect privilege assignments. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the device...

The vulnerability of the strongSwan microprogramming software firewall solution developed by Ruijie RG-EG306MG-P allows a intruder to disclose protected information.

The vulnerability of the strongSwan microprogramming software firewall solution from Ruijie RG-EG306MG-P lies in the lack of encryption for confidential data during the processing of the parameter “idontcareaboutsecurityanduseaggressivemodepsk”. Exploiting this vulnerability can allow a remote...

The vulnerability of the monitoring and control device for solar energy systems, Tigo Cloud Connect Advanced (CCA), arises from the use of strictly encrypted account data. This allows attackers to circumvent security restrictions, gain increased privileges, and obtain full control over the device.

The vulnerability of the monitoring and control device for solar energy systems, Tigo Cloud Connect Advanced CCA, lies in the use of strictly encrypted account data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, gain increased privileges, and obtain full...

The vulnerability of the meeting-join function in Cisco WebEx Meetings software allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of the meeting-join function in Cisco WebEx Meetings software is related to improper verification of certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

Vulnerabilities of the udma_probe() and devm_kasprintf() functions in the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the udmaprobe and devmkasprintf functions in the Linux operating system is related to the assignment of zero pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `update-ldcache` function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the update-ldcache function of software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, arises from an improper definition of symbolic references before accessing files. Exploiting this vulnerabili...

The vulnerability of the mgmt_hci_cmd_sync() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mgmthcicmdsync function in the Linux operating system is related to the execution of operations outside the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the system() function in the bin/goahead software for D-Link DIR-816 A2 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the system function in the bin/goahead microprogramming software for D-Link DIR-816 A2 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of D-Link DHP-W310AV router’s microprogramming software lies in its ability to bypass the authentication mechanism, allowing attackers to execute a “man-in-the-middle” attack.

The vulnerability of D-Link DHP-W310AV router microprogramming software is related to the possibility of bypassing the authentication mechanism. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability of the HarmonyOS operating system, related to insufficient handling of exceptional states, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HarmonyOS operating system is related to insufficient handling of exceptional states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Advanced Notification Service (ANS) management service in the HarmonyOS operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Advanced Notification Service ANS management service in the HarmonyOS operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

The vulnerability of the NVIDIA Virtual GPU Manager driver allows a hacker to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the NVIDIA Virtual GPU Manager driver stems from a race condition. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause service failures...

The vulnerability of the Site Survey web interface of the Intelbras RX 1500 and RX 3000 software allows attackers to perform cross-site scripting attacks.

The vulnerability of the Site Survey web interface of the Intelbras RX 1500 and RX 3000 software lies in the lack of measures taken to neutralize special elements during the processing of ESSID identifiers. Exploiting this vulnerability allows a remote attacker to perform domain-external attacks ...

The vulnerability of the Dell EMC Data Domain Operating System (DD OS) relates to the ability to bypass authentication through spoofing. This allows attackers to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Dell EMC Data Domain Operating System DD OS relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibili...

The vulnerability of the NVIDIA Virtual GPU Manager driver allows a hacker to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to operations that occur outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iPadOS, VisionOS, iOS, WatchOS, and tvOS allows attackers to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems such as macOS, iPadOS, VisionOS, iOS, WatchOS, and tvOS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a hacker to bypass existing security restrictions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the menu_nat_asp() function in D-Link DI-8100 router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the menunatasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of AMD’s microprogramming software for processors lies in the insufficient protection of operational data, which allows attackers to disclose protected information.

The vulnerability of AMD’s microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the qosClassifier() function (/goform/qosClassifier) in D-Link DIR-816 router software allows a attacker to cause a service failure.

The vulnerability of the qosClassifier function /goform/qosClassifier of D-Link DIR-816 router software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending ...

The vulnerability in the driver module drivers/net/vxlan/vxlan_core.c of Linux operating systems allows a attacker to compromise the integrity of protected information.

The vulnerability in the drivers/net/vxlan/vxlancore.c module of Linux operating systems is related to the state of the network competition. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the Booco business automation platform lies in the improper limitation of the path name to the restricted access catalog. This allows attackers to create or overwrite files in the file system’s directories and execute arbitrary code.

The vulnerability of the Booco business automation platform is related to an incorrect restriction on the path name for restricted access catalogs. Exploiting this vulnerability allows a malicious actor to create or re-record files in file system catalogs and execute arbitrary code...

The vulnerability of the LSILogic software module in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information.

The vulnerability of the LSILogic software module in Oracle VM VirtualBox relates to the insecure management of privileges due to improper memory release. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos OS allows a attacker to trigger a service failure.

The vulnerability of the SIP ALG layer application-level firewall on Juniper Networks Junos OS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the command-line utility devmem in the microprogramming software for digital optical network systems Infinera G42 allows a intruder to gain unauthorized access to protected information, enhance their privileges, or cause service failures.

The vulnerability of the command-line utility devmem in the microprogramming software for digital optical network systems Infinera G42 is related to incorrect privilege assignment. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, increase...

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business processes, allowing attackers to gain access to read, modify, and delete information.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to information...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the cross-platform software development framework Qt, related to a predictable initial number in the pseudorandom number generator, allows a hacker to bypass authentication.

The vulnerability of the cross-platform software development framework Qt is related to a predictable initial number in the pseudorandom number generator. Exploiting this vulnerability can allow an attacker to bypass authentication...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Azure Auth component of the Vault Enterprise platform for archiving corporate information allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Azure Auth component in the Vault Enterprise archiving platform relates to improper authorization. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the “Maxima Praidex” electronic queue management system lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the “Maxima Praidex” electronic queue management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL query remotely...

The vulnerability of the OpenSearch software package lies in its lack of measures to protect the structure of web pages, allowing attackers to execute arbitrary code.

The vulnerability of the OpenSearch software package is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

The vulnerability of the Akamai CloudTest performance testing platform lies in the improper limitation of XML links to external objects, which allows attackers to compromise privacy.

The vulnerability of the Akamai CloudTest performance testing platform relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to compromise privacy...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 involve reading beyond the buffer in memory. This allows attackers to bypass the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of authentication mechanisms. This allows attackers to gain unauthorized access to protected information.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected informati...

The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN allows intruders to implant or modify the firmware.

The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to access control deficiencies. Exploiting this vulnerability can allow attackers to implant or modify the firmware...

The vulnerability of the “Accent” platform, related to the failure to protect the SQL query structure, allows unauthorized access to protected information.

The vulnerability of the “Accent” platform lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...