97848 matches found
Omron NJ/NX Automation Controller Authentication Bypass
The vulnerability of Microprogrammed Software in Omron NJ/NX automation controllers lies in the ability to bypass the authentication process by using capture-replay techniques to intercept and replay captured parameters. Exploiting this vulnerability allows a malicious actor to trigger malfunctio...
Node.js Module App Connect Enterprise Certified Container Compromise Information
The vulnerability of the Node.js module related to the App Connect Enterprise Certified Container management tool is linked to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise protected information...
Remote Desktop Protocol Client Code Execution
The vulnerability of the Remote Desktop Protocol Client on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to deficiencies in handling exceptional states during BIOS call processing. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Edge Privilege Escalation
The vulnerability of Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
LDAP Account Manager Code Execution
The vulnerability of the LDAP Account Manager web application exists due to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the /config/templates/pdf/ directory is accessible to users...
FreeBSD net80211 kernel Code Execution
The vulnerability in the net80211 kernel subsystem of FreeBSD relates to the lack of proper checking for the length of user data before it is copied into the buffer during 802.11 packet processing. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Google Chrome V8 Engine Code Execution
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Core server component DoS
The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using network T3/IIOP protocols...
Outside In Filters DoS
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology toolset exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...
Outside In Filters Component DoS
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...
Win32k Privilege Escalation
The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a specially created application...
Corel Presentations IPPP72.FLT Buffer Overflow Information Disclosure
The vulnerability of the IPPP72.FLT module in the Corel Presentations preparation and presentation software relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
SKADA-NEV DoS
The vulnerability of the SCADA system “SKADA-NEV” is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Cisco Enterprise NFV Infrastructure Software Import Function Disclosure
The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s software import function NFVIS is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using specially created...
Microsoft Windows LDAP Code Execution
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...
Reactive WebServer Component Code Execution
The vulnerability of the Reactive WebServer component within the Helidon library exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via HTTP requests...
Invision Power Board Code Execution
The vulnerability in the “applications/core/modules/front/system/content.php” component of the Invision Power Board software, which is a PHP programming language interpreter, relates to insecure privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Cisco Small Business RV340 DoS
The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P microprogrammed software routers lies in the absence of restrictions on file loading. Exploiting this vulnerability can allow a malicious actor to cause service failures by loading arbitrary files onto...
FTP Server Code Execution
The vulnerability of the FTP servers of the microprogrammed control devices CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors during the verification of the PWD/XPWD command length. Exploiting this vulnerability can allow an attacke...
GUI temperature control software Configuration File Error
The vulnerability of GUI temperature control software is related to errors in processing configuration files .gd1. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service failures...
Advanced Content Filter CKEditor Module Policy Bypass
The vulnerability of the Advanced Content Filter WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow an attacker to circumvent existing policies regarding access restrictions for HTML elements...
libsndfile Heap Buffer Overflow DoS
The vulnerability of the svxreadheader function in the audio file reading and writing library libsndfile is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
TP-Link Archer A54 Wi-Fi Router Code Execution
The vulnerability of the DMFillobjbystr function implementation in TP-Link Archer A54 US Wi-Fi routers lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
libarchive Heap Buffer Overflow DoS
The vulnerability of the implementation of the zipxlzmaaloneinit function in the libarchive library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information or cause service failures...
HEVC Video Extension Code Execution
The vulnerability of the HEVC Video Extension is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...
GPAC MPEG-4 Decoder Heap Buffer Overflow DoS
The vulnerability of the PCRB decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...
GPAC media_tools/mpegts.c Heap Buffer Overflow DoS
The vulnerability of the gfm2tsprocesspmt function in the mediatools/mpegts.c component of the GPAC multimedia platform is related to reading data from buffer memory beyond its allowable limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a speciall...
Oracle VM VirtualBox Core Disclosure Information
The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...
WLAN AutoConfig Service Privilege Escalation
The vulnerability of the WLAN AutoConfig service in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
NETGEAR RAX43 Router Command Injection
The vulnerability of NETGEAR RAX43 router’s built-in software lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
cmark-gfm Integer Overflow
The vulnerability of the cmark-gfm library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code...
AK-EM 800 Debugging Access
The vulnerability in the web-based management interface for the server application used to manage food manufacturing enterprises AK-EM 800 is related to errors in password generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the debugging service...
Microsoft Defender for IoT SQL Injection Code Execution
The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a attacker to execute arbitrary code...
Android Keystore Private Key Extraction
The vulnerability of the software-hardware system for storing protected information in Samsung Galaxy devices’ Android Keystores is related to insufficient validation of entered data. Exploiting this vulnerability can allow attackers to bypass security measures and extract private keys from the...
NETGEAR RAX75 RAX80 RBK752 RBR750 RBS750 RBK852 BR850 R
The vulnerability of the embedded software of NETGEAR’s RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, BR850, and RBS850 routers lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
FortiMail Authentication Token Disclosure
The vulnerability of the FortiMail email security system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to obtain the authentication token of the administrative account...
Evolution CMS XSS
The vulnerability of the Evolution CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
TP-Link Archer AX10 HTTP Request Smuggling
The vulnerability of TP-Link Archer AX10 router’s microprogramming software is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...
Microsoft Office Code Execution
The vulnerability of Microsoft Office packages, Microsoft Word, and Microsoft 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Adobe Photoshop Buffer Overflow RCE
The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer during the processing of PSD files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious PSD file...
Windows Print Spooler Spoofing
The vulnerability of the Windows Print Spooler in operating systems related to the print queue handler is associated with information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
Registration in OO Unauthorized Access
The vulnerability of the automated information system “Registration in OO” is related to the use of pre-set user accounts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Leptonica pixFewColorsOctcubeQuantMixed DoS
The vulnerability of the pixFewColorsOctcubeQuantMixed component in the Leptonica image processing library relates to reading data from buffers within acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...
DwaCompressor Component Uncontrolled Resource Consumption DoS
The vulnerability of the DwaCompressor component of the image storage software for OpenEXR files, which supports a wide dynamic range of brightness levels, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Media Audio Decoder Windows Code Execution
The vulnerability of the Media Audio Decoder driver for the Windows operating system is related to errors in code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Moxa MXView Access Control Violation
The vulnerability of the Moxa MXView network control software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions using the MQTT protocol Message Queuing Telemetry Transport...
VMware vCenter Server Unauthorized Access
The vulnerability of the VMware vCenter Server virtual infrastructure management tool is related to incorrect definition of URI endpoints. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted...
ServerProtect Management Console Authentication Bypass
The vulnerability of the ServerProtect Management Console for Server Protection and ServerProtect for Storage Systems SPFS, ServerProtect for EMC Celerra SPEMC, ServerProtect for Network Appliance Filers SPNAF, and ServerProtect for Microsoft Windows/Novell Netware SPNT is related to authenticati...
VMware vCenter Server SSRF
The vulnerability of the Content Library component in the VMware vCenter Server management tool is related to insufficient verification of URL addresses. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack using a specially created POST request...