The vulnerability of the command-line interface (CLI) of Juniper Networks Junos OS Evolved operating systems, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the command-line interface CLI of Juniper Networks Junos OS Evolved operating systems is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Portal for ArcGIS web portal, related to the lack of measures taken to protect the structure of the web page, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created web page...

The vulnerability of the Dawn component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Dawn component in the Google Chrome browser is related to writing beyond the buffer limit. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers relates to writing beyond the buffer boundaries in memory. This allows an attacker to write data into the kernel memory beyond the boundaries of the system buffer.

The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to write data into the kernel memory beyond the system buffer limits...

The vulnerability of the MiCollab Desktop Client client of the collaborative work platform MiCollab, along with the virtual instance of the MiVoice Business Solution Virtual Instance (MiVB SVI), allows a perpetrator to execute arbitrary code.

The vulnerability of the MiCollab Desktop Client client of the MiCollab collaboration platform, as well as the virtual instance of the MiVoice Business Solution Virtual Instance MiVB SVI, is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allo...

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform is related to an incorrect restriction on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

The vulnerability of Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to incomplete filtering of special elements. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the IB/qib component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the IB/qib component in the Linux operating system’s kernel is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the AjpRequestParser class in the ajp-listener component of the Undertow web server allows a attacker to trigger a service failure.

The vulnerability of the AjpRequestParser class in the ajp-listener component of the Undertow web server is related to an uncontrolled resource consumption due to incorrect decoding of request paths. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to insufficient protection of sensitive data, allows attackers to disclose protected information.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory, due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the microprogramming software of Moxa devices such as EDR-8010, EDR-G9004, EDR-G9010, EDR-G1002-BP, NAT-102 OnCell G4302-LTE4, and TN-4900 stems from the absence of authentication for a critical function. This allows attackers to gain full access to the device’s configuration.

The vulnerability of the microprogramming software in Moxa devices such as EDR-8010, EDR-G9004, EDR-G9010, EDR-G1002-BP, NAT-102 OnCell G4302-LTE4, and TN-4900 lies in the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker operating remotely to...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Storage Port Driver driver for Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Storage Port Driver driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows a hacker to replace the user’s interface.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...

The vulnerability of the Ivanti Cloud Services Appliance’s network interface, related to incorrect path name restrictions for the restricted access catalog, allows a hacker to execute arbitrary code.

The vulnerability of the Ivanti Cloud Services Appliance relates to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the CLI interface of ArubaOS operating systems allows a perpetrator to execute arbitrary commands.

The vulnerability of the CLI interface of ArubaOS operating systems is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the setDiagnosisCfg() function in the microprogramming software of TOTOLINK AC1200 T8 routers allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setDiagnosisCfg function in the microprogramming software of TOTOLINK AC1200 T8 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the dbsrv_asp function in D-Link DI-8100 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the dbsrvasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of Google Chrome’s Autofill function allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s Autofill function is related to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the user interface through a specially created HTML page...

The vulnerability of the io_uring/poll component in the Linux operating system’s kernel allows for a malfunction to occur, leading to service failure.

The vulnerability of the iouring/poll component in the Linux operating system’s kernel is related to the state of the race condition during multi-address request operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cgi_get_fullscreen_photos() function (/cgi-bin/photocenter_mgr.cgi) in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 allows a hacker to execute arbitrary commands.

The vulnerability of the cgigetfullscreenphotos function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345,...

The vulnerability of the fastrpc component in the Linux operating system’s kernel allows for attacks that can affect the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the fastrpc component in the Linux operating system’s kernel is related to a race condition that occurs after memory is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the cgi_FMT_Std2R1_DiskMGR() function (/cgi-bin/hd_config.cgi) in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices allows a hacker to execute arbitrary commands.

The vulnerability of the cgiFMTStd2R1DiskMGR function /cgi-bin/hdconfig.cgi in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04...

The vulnerability of the cgi_photo_search() function (/cgi-bin/photocenter_mgr.cgi) in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 allows a hacker to execute arbitrary commands.

The vulnerability of the cgiphotosearch function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4...

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created HTML page...

The vulnerability of the cgi_FMT_Std2R5_2nd_DiskMGR() function (/cgi-bin/hd_config.cgi) in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices allows a hacker to execute arbitrary commands.

The vulnerability of the cgiFMTStd2R52ndDiskMGR function /cgi-bin/hdconfig.cgi in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04...

The vulnerability of the try_match function in the Python PyPi software repository allows a attacker to compromise the confidentiality of the protected information.

The vulnerability of the trymatch function in Python PyPi software products is related to incorrect handling of registries. Exploiting this vulnerability allows an attacker to influence the confidentiality of protected information by circumventing CORS policies and altering the URL path registry...

The vulnerability of the kernel component of the Linux operating system, related to memory release errors, allows for a malfunction that can lead to service failure.

The vulnerability of the kernel component of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the implementation of the OAuth2 protocol for managing databases in pgAdmin 4 allows a perpetrator to increase their privileges.

The vulnerability of the OAuth2 protocol implementation in the pgAdmin 4 database management tool is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of FactoryTalk Batch View’s software for real-time control and monitoring processes is related to deficiencies in authentication procedures, allowing attackers to circumvent existing security restrictions.

The vulnerability of FactoryTalk Batch View’s software for managing and monitoring manufacturing processes in real-time is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions remotely...

The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security lies in the lack of mechanisms for generating error reports. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities can allow attackers operating remotely to...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to read arbitrary files.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to incorrect path name restrictions for access to restricted catalogs. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

The vulnerability of the rndis component in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the rndis component in the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the blktrace kernel component in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blktrace kernel component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Pydantic data validation library lies in the inefficient complexity of regular expressions, which allows attackers to trigger a service failure.

The vulnerability of the Pydantic data validation library is related to the use of regular expressions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the sched/core component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sched/core component in the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Virtual Delivery Agent component of the Citrix Virtual Apps and Desktops (CVAD) virtualization and delivery software (formerly XenApp and XenDesktop) allows a malicious individual to escalate their privileges.

The vulnerability of the Virtual Delivery Agent component of the Citrix Virtual Apps and Desktops CVAD virtualization and delivery software formerly XenApp and XenDesktop is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileg...

The vulnerability of the Windows SmartScreen security function in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Windows SmartScreen’s security function in Windows operating systems is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker, acting remotely, to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the Netcat module in CMS systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the messaging module in the CMS system Netcat is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to the protected information from the database...

The vulnerability of the netshop CMS system’s Netcat module allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the netshop CMS system’s Netcat module is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

The vulnerability of the Routing and Remote Access Service (RRAS) on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Routing and Remote Access Service RRAS on Windows operating systems is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability in the full-screen notification mode of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allows a hacker to perform spoofing attacks.

The vulnerability in the full-screen notification mode of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird is related to an improper limitation on the number of user interface layers or frames displayed. Exploiting this vulnerability allows a malicious actor to perfo...

The vulnerability of the smc_cdc_tx_handler() function in the net/smc component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smccdctxhandler function in the net/smc component of the Linux operating system’s kernel is related to kernel errors caused by the race condition in smcsock. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Personalization component of the Oracle Applications Framework, a web application development platform, within the Oracle E-Business Suite, allows an intruder to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Personalization component of the Oracle Applications Framework, a platform for developing web applications in enterprise automation systems within the Oracle E-Business Suite, is related to improper authentication. Exploiting this vulnerability allows an attacker to gain...

The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service failures through specially crafted BGP...

The vulnerability of the Junos OS Evolved operating system, related to deficiencies in access control, allows a perpetrator to resume an earlier session and gain access to the user account.

The vulnerability of the Junos OS Evolved operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to resume a previous session and gain access to the user account...