StruxureWare Data Center Expert Code Execution

The vulnerability of the StruxureWare Data Center Expert monitoring system is related to errors that occur when one user maintains devices owned by another user. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe After Effects Heap Buffer Overflow

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

StruxureWare Data Center Expert XSS

The vulnerability of the StruxureWare Data Center Expert monitoring system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

GE Proficy Historian MSO Protocol File Access

The vulnerability of the MSO protocol implementation in the GE Proficy Historian industrial data management platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to files by executing the...

CGAL SNC_io Parser Heap Buffer Overflow DoS

The vulnerability of the SNCioparser function, namely readsface and SD.linkasfacecycle, in the NefS2/SNCioparser.h component, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

CentOS Web Panel Login Command Execution

The vulnerability of the login/index.php implementation of the server management application for CentOS Web Panel is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

VMware Workspace ONE Assist XSS

The vulnerability of the remote access tool for VMware Workspace ONE Assist exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Google Chrome Profiles Code Execution

The vulnerability of the Profiles component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Linux kernel DoS

The vulnerability of Linux operating system kernels relates to how it handled the I2CSMBUSBLOCKPROCCALL scenario via the ioctl I2CSMBUS with malicious input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Connman Memory Use After Free

The vulnerability of the Connman connection dispatcher’s WISPR support implementation lies in the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

mtk_vcodec_fw_vpu_init() function in the Privilege Escalation

The vulnerability of the mtkvcodecfwvpuinit function in the Linux kernel’s drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c file is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the doprocdointvec function in the Linux operating system’s kernel is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

Linux driver Heap Buffer Overflow DoS

The vulnerability in the driver drivers/usb/mon/monbin.c of Linux operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

“Language” parameter in the Code Execution

The vulnerability of the “Language” parameter in the web interface of the POWER METER SICAM Q100 microprogramming system for power measurement devices is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to disable the device remotely, causing it to...

XRDP Heap Buffer Overflow DoS

The vulnerability of the xrdpmmtransprocessdrdynvcchannelclose function on the XRDP server is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause service failures...

Redfish API Code Execution

The vulnerability of the API interface of the microprogramming software for AMI MegaRAC controllers is related to errors during code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP request...

Windows ALPC Privilege Escalation

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

OLE DB driver for SQL Server Code Execution

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

MediaWiki Special:UserRights Disclosure

The vulnerability of the Special:UserRights component of the MediaWiki software, which is used to implement the hypertext environment, is related to errors in permission handling. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

HAProxy htx_add_header Component Data Compromise

The vulnerability of the htxaddheader function in the include/haproxy/htx.h component of HAProxy server software is related to integer overflow. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

Microsoft Exchange Server Privilege Escalation

The vulnerability of Microsoft Exchange Server servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Microsoft Exchange Server Privilege Escalation

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cisco Identity Services Engine DoS

The vulnerability of the Cisco Identity Services Engine ISE network policy management platform is related to inadequate management of system resources. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through specially created RADIUS traffic...

Grub2 Buffer Overflow

The vulnerability of Grub2 operating system loaders is related to the issue where operations occur outside of the buffer in memory when rendering certain Unicode sequences using a specially crafted font. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Point to Point Tunneling Protocol Windows DoS

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Moxa NE-4100T Authentication Bypass

The vulnerability of the Microprogrammed Software for Serial Interface Converters Moxa NE-4100T is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Cisco Identity Services Engine Local File Load

The vulnerability of the local disk management function of the Cisco Identity Services Engine ISE is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to upload files to arbitrary locations in the...

Adobe Dimension Use-After-Free

The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed during the analysis of SKP files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Windows jscript9.dll Code Execution

The vulnerability of the dynamically linked script engine library jscript9.dll in Windows operating systems is related to the possibility of code injection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

shapelib malloc Heap Buffer Overflow DoS

The vulnerability of the malloc function implementation in the shapelib library is related to the double deallocation of memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Developer Tools Security Bypass

The vulnerability of developer tools for web developers in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and expose sensitive information through a specially created...

Fortinet FortiClient NDIS Miniport DoS

The vulnerability of NDIS Network Driver Interface Specification Miniport drivers in the Fortinet FortiClient for Windows security device is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Adobe Photoshop Use-After-Free

The vulnerability of the Adobe Photoshop graphic editor is related to the use of an uninitialized pointer. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

FFmpeg Buffer Overflow DoS

The vulnerability in the src/libavutil/mathematics.c file of the FFmpeg multimedia library is related to the insufficient use of the assert function. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Firefox Insufficient Validation

The vulnerability of Firefox browsers is related to insufficient validation of input data when processing values of array elements. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

Oracle FLEXCUBE Universal Banking Simulation Model Data Read Modify

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify...

Infrastructure Component Unauthorized Access

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, or add data, or cause a service...

RPKI Validator DoS

The vulnerability of the RPKI validator OctoRPKI is related to the lack of verification of returned data during the generation of Route Origin Authorisations. Exploiting this vulnerability could allow a malicious actor to cause service failures...

NodeBB Forum Software Privilege Escalation

The vulnerability of the utilsGenerateUUID function in the NodeBB Forum Software is related to errors in the code for generating pseudo-random numbers for password reset codes. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

Eclipse Jetty Uncontrolled Resource Consumption DoS

The vulnerability of Eclipse Jetty servlet containers is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Measuresoft ScadaPro Server Code Execution

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

SAP Enterprise Extension Privilege Escalation

The vulnerability of SAP Enterprise Extension Defense Forces & Public Security software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Core Component Oracle Coherence DoS

The vulnerability of the Core component of the Oracle Coherence data processing software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using the specially crafted T3 network protocol...

Apache Geode REST API Code Execution

The vulnerability of the REST API interface of the Apache Geode data management platform involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

BD Synapsys Session Duration

The vulnerability of the BD Synapsys software lies in the incorrect duration of a session. Exploiting this vulnerability can allow an attacker to gain access, modify, or delete confidential information...

D-LINK DIR-818LW Router Code Execution

The vulnerability of the binary.soapcgimain function in the D-LINK DIR-818LW router’s microprogramming software is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

iHistorian Data Display OPC-server XSS

The vulnerability of the iHistorian Data Display OPC-server workstation exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PDF viewing and editing programs Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to execute arbitrar...

Teamcenter File Server Cache DoS

The vulnerability of the File Server Cache service in the Teamcenter product lifecycle management system is related to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Jenkins Automation Server Code Execution

The vulnerability in the stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java file of the Jenkins Automation Server’s Stapler component relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...