DrayTek Vigor Router ft_payloads_dns DNS Failure

The vulnerability of the ftpayloadsdns function in the web interface of the DrayTek Vigor router software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Quality Manager Specification Oracle Process Manufacturing Data Access

The vulnerability of the Quality Manager Specification component in the Oracle Process Manufacturing OPM application for process development management system of the Oracle E-Business Suite is related to deficiencies in the authorization procedures. Exploiting this vulnerability could allow an...

SIPLUS TIM DoS

The vulnerability of web-servers of microprogramming software for SIMATIC CP, SIMATIC HMI, SIMATIC IPC, and SIMATIC WinCC Runtime Advanced DiagBase, as well as SIPLUS TIM, is related to errors in variable name assignments. Exploiting this vulnerability can allow attackers to cause system failures...

optimizing compilers like oneAPI Privilege Escalation

The vulnerabilities of oneAPI DPC++/C++ Compiler, Intel Fortran Compiler, software development tools such as the Intel oneAPI Toolkit, and the Intel oneAPI Base Toolkit are related to an uncontrolled element in the search process. Exploiting these vulnerabilities can allow attackers to enhance...

Linux io_uring Heap Buffer Overflow DoS

The vulnerability of the ioallocpbufring function in the iouring/kbuf.c module of the iouring subsystem in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

SAP Shared Service Framework Privilege Escalation

The vulnerability of the SAP Shared Service Framework’s network service management software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Downloads Component Google Chrome Microsoft Edge UI Replacement

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...

sun6i kernel Unauthenticated Access Disclosure

The vulnerability of the sun6i component in the Linux operating system’s kernel is related to competitive access to resources a state of competition. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

mysql2 readCodeFor Code Execution

The vulnerability of the readCodeFor function in the mysql2 library relates to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DI-8004W Router Arbitrary Command Execution

The vulnerability of the mspinfohtm function in D-Link DI-8004W router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PDF-XChange Editor Heap Buffer Overflow

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux iommu/arm-smmu DoS

The vulnerability of the iommu/arm-smmu component in the Linux operating system is related to the lack of registration cancellation when the process terminates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Ice DoS

The vulnerability of the ice component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the kzalloc function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Firefox Authentication Data Compromise

The vulnerability in the Firefox web browser is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

D-Link cgi_photo_search() Arbitrary Command Execution

The vulnerability of the cgiphotosearch function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4...

Linux kernel Memory Release DoS

The vulnerability of the kernel component of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Veeam ONE Access Control Privilege Escalation

The vulnerability of the Veeam ONE monitoring software relates to deficiencies in access control. Exploiting this vulnerability allows a perpetrator to execute arbitrary code and enhance their privileges...

Xen Hypervisor Privilege Escalation

The vulnerability of the DeviceHandler component in the cross-platform hypervisor Xen of the Linux operating system is related to the incorrect placement of the preprocessor directive in the source code. Exploiting this vulnerability can allow an attacker to increase their privileges...

OCC API Endpoint SAP Commerce Cloud Unauthorized Access

The vulnerability of the OCC API Endpoint component in the SAP Commerce Cloud platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or compromise the integrity of data...

HDF5 Heap Buffer Overflow DoS

The vulnerability of the H5Rdecodeheap function in the HDF5 library is related to buffer overflow based on a stack-based mechanism. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Libstb Start Decoder Integer Overflow DoS

The vulnerability of the startdecoder component in the C/C++ Libstb library is related to integer overflow. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

Windows Installer Privilege Escalation

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Magento Path Traversal

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to incorrect path name restrictions for access to restricted catalogs. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

Core server component Oracle WebLogic Server Access

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to the software environment by sending specially craft...

Juniper Networks’ Junos OS DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Hotspot Component Unauthorized Data Access

The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...

Cisco SPA300/SPA500 DoS

The vulnerability in the web interface for managing Microprogramming software in Cisco Small Business SPA300 and SPA500 phones is related to the copying of input data into the buffer without checking its size. Exploiting this vulnerability can allow an attacker, operating remotely, to cause servi...

Quality Management Specs Oracle Process Manufacturing Unauthorized Access

The vulnerability of the Quality Management Specs component in the Oracle Process Manufacturing OPM application for process development involves deficiencies in the authorization procedures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, modify, or dele...

Dell iDRAC Buffer Overflow RCE

The vulnerability of the Dell iDRAC Service Module integrated service module controllers in remote access iDRAC devices relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

Portal Component Unauthorized Data Access

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or...

FortiAIOps CSRF

The vulnerability of the graphical user interface of the artificial intelligence-based security threat detection software FortiAIOps is related to the of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack by sending specially crafted GET requests...

PT Application Inspector Privilege Escalation

The vulnerability of the PT Application Inspector software arises due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

Junos Telemetry Interface DoS

The vulnerability of the Junos Telemetry Interface interface of Juniper Networks’ Junos OS is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Server MySQL Privilege Escalation

The vulnerability of the MySQL Server component relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Zemana AntiLogger IOCTL Handler DoS

The vulnerability of the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in the Zemana AntiLogger software is related to improper checking of ownership of critical resources. Exploiting this vulnerability allows an attacker to cause a service failure by executing the IOCTL...

Tesseract File Function Unauthorized Access

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through...

Windows kernel Unauthorized Access

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft SharePoint Server Deserialization RCE

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PostX Plugin Privilege Escalation

The vulnerability of the postxpresetscallback function in the PostX plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges and gain access to read, modify,...

Linksys E5600 Router API Command Injection

The vulnerability of the /API/info component of the Linksys E5600 router’s microprogramming system lies in the lack of measures taken to neutralize special elements used in the OS commands. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands using the PinCode...

Cryptographic Services Code Execution

The vulnerability of Windows operating system’s Cryptographic Services is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Windows Cryptographic Services Bypass

The vulnerability of Windows operating system’s Cryptographic Services is related to data encryption errors. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

System Recovery Bootloader Privilege Escalation

The vulnerability of the System Recovery Bootloader for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and gain increased privileges...

Netcat Inter-site Request Code Execution

The vulnerability of the CMS system Netcat is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary code...

MediaWiki CampaignEvents XSS

The vulnerability of the CampaignEvents extension of the software for implementing the hypertext environment in MediaWiki is related to improper input validation during the creation of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

Wikibase Extension DoS

The vulnerability of the extension of the Wikibase software for implementing the MediaWiki hypertext environment is related to the lack of speed limits on the merging of elements. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libheif Decoder Encoder Data Compromise

The vulnerability of the /libheif/exif.cc decoder and file format encoder in the libheif library is related to a segmentation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Easergy Studio Path Traversal

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to the absence of quotation marks in the wording of elements or search paths. Exploiting this vulnerability can allow attackers to increase their privileges...

jq Heap Buffer Overflow DoS

The vulnerability of the JQ programming language lies in buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause system failures...

Flowmon Web Interface Command Execution

The vulnerability of the web interface for controlling the Flowmon operating system in devices for network monitoring exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute...