97848 matches found
Compositing Component UI Replacement
The vulnerability of the Compositing component in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
Microsoft SQL Server Code Execution
The vulnerability of the Microsoft.SqlServer.XEvent.Configuration.dll file in the Microsoft SQL Server database management system is related to the use of an insecure search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DLL...
Microsoft Office Outlook Code Execution
The vulnerability of the Microsoft Office software and the Microsoft Outlook email client is related to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Mercedes-Benz User Experience NWS_PF_setMacAddrExceptionIP Handler Command Execution
The vulnerability of the NWSPFsetMacAddrExceptionIP handler of the NetworkingService service in the Mercedes-Benz User Experience MBUX system is related to insufficient validation of input data during MAC address processing. Exploiting this vulnerability can allow an attacker to execute arbitrary...
Packet Tunneling Protocol Source Check
The vulnerability of IPv4-to-Ipv6 and IPv6-to-Ipv4 tunneling protocols is related to insufficient checks on the source of the communication channel. Exploiting this vulnerability allows a remote attacker to execute “host object substitution” attacks by sending a specially crafted packet with two ...
GLPI XSS
The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management functions is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
PrintWorkflowUserSvc Privilege Escalation
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
Apache Spark CookieSigner Unauthorized Access
The vulnerability of the CookieSigner class in the Apache Spark framework and the Apache Hive database is related to the disclosure of the digital signature of cookies due to an incorrect mechanism for generating error reports. Exploiting this vulnerability can allow a remote attacker to gain...
Teamcenter Visualization Siemens Tecnomatix Plant Simulation Heap Buffer Overflow
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to simulation modeling involves reading data beyond the acceptable range in memory. Exploiting this vulnerability could allow an attacker to execu...
go-git git-upload-pack Data Compromise
The vulnerability of the git-upload-pack method in the go-git library is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information...
Redis Memory Use After Free Code Execution
The vulnerability of the Redis database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code by injecting a specially crafted Lua script...
Cisco Common Services Platform Collector XSS
The vulnerability in the web interface for collecting device information on Cisco Common Services Platform Collector CSPC is related to the failure to remove unacceptable symbols from identifiers on web pages. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...
Ivanti Connect Secure Buffer Overflow Privilege Escalation
The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA, which are tools for managing IT services, is related to a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to increase their privileges...
System Component Code Execution
The vulnerability of the System component of the Android operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Teamcenter Visualization Siemens Tecnomatix Plant Simulation Heap Buffer Overflow
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to simulation modeling involves reading data beyond the acceptable range in memory. Exploiting this vulnerability could allow an attacker to execu...
Substance 3D Painter Pointer Assignment DoS
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models is related to pointer assignment errors. Exploiting this vulnerability can allow attackers to cause service failures...
Teamcenter Visualization Pointer Assignment Error
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to simulation modeling of systems and processes is linked to errors in the assignment of pointers during the processing of WRL files. Exploiting...
Linux kernel vmscan Wakeup Kswapd DoS
The vulnerability of the wakeupkswapd function in the vmscan component of the Linux operating system’s kernel is related to inconsistencies in memory management procedures. Exploiting this vulnerability could allow an attacker to cause a service failure...
DrayTek Vigor Router Code Execution
The vulnerability in the mainfunction.cgi web interface of the DrayTek Vigor router software exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands during the processing of parameters...
PrintWorkflowUserSvc Privilege Escalation
The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
UEFI Loading Mode Privilege Escalation
The vulnerability of the UEFI boot mode of the BIOS microprogramming system on Intel Server Board M20NTP is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
f2fs DoS
The vulnerability in the f2fs kernel of the Linux operating system is related to improper input validation in the f2fsPutSuper function. Exploiting this vulnerability can allow an attacker to cause a service failure...
SIPORT Access Control Privilege Escalation
The vulnerability of the access control and working time recording system within SIPORT is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
Umbraco UI-O-Matic SQL Injection
The vulnerability of the /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r component of the software for automatically generating integrated user interfaces in Umbraco UI-O-Matic is related to the lack of security measures for handling SQL queries. Exploiting this vulnerability allows a...
Siemens Tecnomatix Plant Simulation Heap Overflow Code Execution
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to reading data beyond the permissible range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created WRL files...
Siemens RUGGEDCOM CROSSBOW SQL Injection
The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
Intel Video Processing Library Pointer Dereferencing DoS
The vulnerability of the software tools for accelerated video processing at the hardware level, the Intel Video Processing Library VPL, is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
needrestart Code Execution Root
The vulnerability of the needrestart utility is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user, when processing the RUBYLIB variable...
enetc Kernel DoS
The vulnerability of the enetc component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle MySQL Server DoS
The vulnerability of the Oracle MySQL Server database management system’s component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...
Adobe Illustrator Buffer Overflow RCE
The vulnerability of Adobe Illustrator’s graphic editor arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...
Task Scheduler Privilege Escalation
The vulnerability of the Task Scheduler in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges, provided that a specially crafted application is executed. Additionally, updates from...
Portal for ArcGIS XSS
The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...
libbpf DoS
The vulnerability of the libbpf component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the bpfxdpquery function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Binder Code Execution
The vulnerability of the binder component in the Linux operating system’s kernel is related to errors at the bindergetobject function. Exploiting this vulnerability allows an attacker to execute arbitrary code...
NFS Kernel Component DoS
The vulnerability of the NFS kernel component in Linux operating systems is related to incorrect blocking in the nfsnetfsissueread function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Windows DWM Privilege Escalation
The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Ivanti Endpoint Manager SQL Injection RCE
The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures regarding SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Autodesk Navisworks w3dtk.dll Code Execution
The vulnerability of the w3dtk.dll library in Autodesk Navisworks software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Autodesk Navisworks w3dtk.dll Code Execution
The vulnerability of the w3dtk.dll library in Autodesk Navisworks software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Palo Alto Networks GlobalProtect App Privilege Escalation
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...
Window.open() Unauthenticated Access
The vulnerability of the Window.open function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the disclosure of information through improper handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
atf_asm_interface.dll Code Execution
The vulnerability of the atfasminterface.dll library in AutoCAD simulation, design, and drawing software arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or execute arbitrary code using ...
Lucene.Net Replicator Code Execution
The vulnerability of the Lucene.Net.Replicator replication utility for.NET platform’s full-text search library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain unauthorized access to protected...
CLFS driver Privilege Escalation
The vulnerability of the CLFS driver in Microsoft Windows operating systems is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level using a specially crafted blk-file...
MasterSCADA Deserialization RCE
The vulnerability of the SCADA system MasterSCADA is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PKIAuthenticationPlugin Plugin Data Compromise
The vulnerability of the PKIAuthenticationPlugin plugin for the Apache Solr search server is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
DrayTek Vigor Router ft_payloads_dns DNS Failure
The vulnerability of the ftpayloadsdns function in the web interface of the DrayTek Vigor router software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Quality Manager Specification Oracle Process Manufacturing Data Access
The vulnerability of the Quality Manager Specification component in the Oracle Process Manufacturing OPM application for process development management system of the Oracle E-Business Suite is related to deficiencies in the authorization procedures. Exploiting this vulnerability could allow an...
SIPLUS TIM DoS
The vulnerability of web-servers of microprogramming software for SIMATIC CP, SIMATIC HMI, SIMATIC IPC, and SIMATIC WinCC Runtime Advanced DiagBase, as well as SIPLUS TIM, is related to errors in variable name assignments. Exploiting this vulnerability can allow attackers to cause system failures...