97848 matches found
mrxsmb.sys Privilege Escalation Command Execution
The vulnerability of the mrxsmb.sys driver for Microsoft Windows SMB Client operating systems is related to deficiencies in access control due to authentication relaying. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands remotely...
Jupyter Core Uncontrolled Element
The vulnerability in the Jupyter Core environment for interactive code development and execution is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
PowerPC Linux DoS
The vulnerability of the setfixmap function in the arch/powerpc/include/asm/book3s/64/pgtable.h file, which is part of the PowerPC platform support for the Linux operating system, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service...
PowerPC do_uaccessFlush_fixups Heap Buffer Overflow DoS
The vulnerability of the douaccessFlushfixups function in the arch/powerpc/lib/feature-fixups.c module of the PowerPC platform support for the Linux operating system is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Moodle Grade Report Handler Unauthorized Access
The vulnerability of the Grade Report Handler component in the virtual training environment is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
PLANET Technology web_radiusSrv_dftParam_post() Data Compromise
The vulnerability of the webRadiusSrvdftParampost function in the microprogramming software for PLANET Technology is related to buffer overflows in the stack during the processing of the radDftParamKey parameter. Exploiting this vulnerability could allow an attacker to compromise the...
VS6EditData!CDataRomErrorCheck::MacroCommandCheck() HMI Configuration Software Monitouch V-
The vulnerability of the VS6EditData!CDataRomErrorCheck::MacroCommandCheck function in the HMI configuration software for Monitouch V-SFT lies in the possibility of the operation exceeding the buffer limits in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...
VS6EditData!CGamenDataRom::set_mr400_strc() Code Execution
The vulnerability of the VS6EditData!CGamenDataRom::setmr400strc function in the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
PLANET Technology microcontroller software Use-After-Free
The vulnerability of the webrmonalarmpostrmonalarm function in PLANET Technology’s microcontroller software is related to buffer overflows in the stack when processing the ownekey parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of t...
Quiz Maker Plugin SQL Injection
The vulnerability of the Quiz Maker plugin of the WordPress content management system is related to the lack of protection for the SQL query structure when processing the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
libzvbi Integer Overflow DoS
The vulnerability of the VBI capture and decoding library, libzvbi, is related to a numerical overflow in the vbicapturesimloadcaption function. Exploiting this vulnerability can allow an attacker to cause a service failure...
VS6MemInIF.dll Heap Buffer Overflow Privilege Escalation
The vulnerability of the VS6MemInIF.dll!setplctypedefault function in the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
DRI driver AMD GPU Buffer Overflow DoS
The vulnerability of the CalculateSwathAndDETConfiguration function in the DRI driver for AMD kernel-based Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
DRI Driver Heap Buffer Overflow DoS
The vulnerability of the panthorioctlgroupdestroy function in the DRI driver of the Linux operating system’s kernel is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure...
Linux UFS kernel driver Heap Buffer Overflow DoS
The vulnerability of the ufshcdremove function in the UFS driver of the Linux operating system is related to an unvalidated return value, which leads to pointer dereferencing. Exploiting this vulnerability could allow a attacker to cause a service failure...
Intel Ethernet driver Heap Buffer Overflow DoS
The vulnerability of the icevsifree function in the Intel Ethernet driver for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
Dell Unisphere LDAP Code Execution
The vulnerability of the Dell Unisphere for PowerMax data processing application is related to the failure to take measures to neutralize special elements in the LDAP request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
GlobalProtect Gateway XSS
The vulnerability of the GlobalProtect Gateway and GlobalProtect Portal operating system in PAN-OS is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
AES-128-CBC Buffer Overflow DoS
The vulnerability of the AES-128-CBC encryption algorithm in the microprogramming-based router software Tenda RX2 Pro relates to the storage of encryption keys in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
Substance 3D Stager Use-After-Free
The vulnerability of the Substance 3D Stager software relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
SQL Directus Privilege Escalation
The vulnerability of the application software interface for managing database content in SQL Directus is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by using certain administrative functions remotely...
TOTOLINK A720R Router cstecgi.cgi Privilege Escalation
The vulnerability of the cstecgi.cgi /cgi-bin/cstecgi.cgi script in the TOTOLINK A720R router software is related to errors in access control when processing the topicurl parameter. Exploiting this vulnerability allows a remote attacker to increase their privileges by sending specially crafted PO...
GitLab Enterprise Edition Information Disclosure
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker, operating remotely, to bypass existing security...
PCMan FTP Server Buffer Overflow DoS
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the send parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Libarchive Heap Buffer Overflow DoS
The vulnerability of the bsdunzip.c file in the Libarchive library is related to a NULL pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC NULL Pointer DoS
The vulnerability of the multimedia platform GPAC is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel PCI DoS
The vulnerability of the Linux operating system’s kernel PCI component is related to a memory leak in the resetmethodstore function. Exploiting this vulnerability could allow an attacker to cause a service failure...
rtc component Linux kernel DoS
The vulnerability of the rtc component in the Linux operating system’s kernel is related to improper blocking of resources in the rtctimerdowork function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Tenda AC8 sub_49E098 Buffer Overflow
The vulnerability of the sub49E098 function in Tenda AC8 software lies in buffer overflows during the processing of the list parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux kernel quota DoS
The vulnerability of the Linux kernel’s quota component is related to improper blocking of resources in the dquotwritebackdquots function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Xen Hypervisor DoS
The vulnerability of Xen hypervisors is related to the mutual blocking of execution flows. Exploiting this vulnerability can allow an attacker to cause a service failure...
Moodle CSRF
The vulnerability in the virtual learning environment Moodle is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
Prisma Access Privilege Escalation
The vulnerability of Prisma Access Browser is related to the lack of authentication checks for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
libsoup Heap Buffer Overflow DoS
The vulnerability of the soupmessageheadersgetcontentdisposition function in the GNOME graphical interface library libsoup is related to the release of previously unallocated memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a specially craft...
E-Staff automated recruitment process system Arbitrary Command Execution
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering during the writing of information into files. Exploiting this vulnerability can allow a malicious actor to reset the administrator’s credentials and execute arbitrary commands...
ASS/SSA Libass subtitle renderer Heap Buffer Overflow DoS
The vulnerability of the assoutlineconstruct function in the ASS/SSA Libass subtitle renderer is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Open vSwitch DoS
The vulnerability of the Open vSwitch multi-level switch lies in the lack of a mechanism for verifying the source of the connection. Exploiting this vulnerability allows an attacker to trigger a service failure using specially created BFD packets...
Live555 RTSP PLAY Command Handler Buffer Overflow DoS
The vulnerability of the RTSP PLAY Command Handler component in the Live555 multimedia streaming library relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Cisco Enterprise Chat and Email DoS
The vulnerability of the chat message exchange function in Cisco Enterprise Chat and Email ECE is related to insufficient processing of regular expressions. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests...
Kraken Stress Testing Toolkit CSP Data Compromise
The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to the improper use of Content Security Policy CSP protection mechanisms. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...
Linux kernel i2c-npcm7xx Heap Buffer Overflow DoS
The vulnerability of the npcmi2cprobebus function from the drivers/i2c/busses/i2c-npcm7xx.c file in the Linux kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
Trend Micro Deep Security Agent Privilege Escalation
The vulnerability of the Trend Micro Deep Security Agent lies in the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow attackers to enhance their privileges...
GitLab Enterprise Edition DoS
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Linux FPGA Kernel DoS
The vulnerability of the Linux operating system’s FPGA kernel component is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Remote Desktop Client Code Execution
The vulnerability of the Remote Desktop Client for Windows operating systems in handling relative pathnames to directories involves errors in processing those paths. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
SmartFabric OS10 SSRF
The vulnerability of the SmartFabric OS10 network operating system is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
TOTOLINK X5000R Router setWiFiScheduleCfg() Arbitrary Command Execution
The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the sMinute parameter. Exploiti...
Linux kernel ionic_xdp_xmit Heap Buffer Overflow DoS
The vulnerability of the ionicxdpxmit function in the drivers/net/ethernet/pensando/ionic/ionictxrx.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel i2c-cadence buffer overflow DoS
The vulnerability of the cdnsi2cmasterxfer function in the drivers/i2c/busses/i2c-cadence.c module of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...
Siemens Scalance LPE9403 Path Traversal
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to an incorrect limitation on the name of the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files remotely...