97848 matches found
RPC Endpoint Mapper Privilege Escalation
The vulnerability of the RPC Endpoint Mapper service on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Docker --userns-remap Path Traversal
The vulnerability of the --userns-remap option, a tool for automating application deployment and management in Docker containerized environments, is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability allows a malicious actor to compromise data...
Node.js Resource Consumption DoS
The vulnerability of the Node.js software platform is related to the improper handling of a large number of requests sent to the unknownProtocol. Exploiting this vulnerability allows an attacker who operates remotely to cause service failures...
Ruby on Rails mem_cache_store.rb redis_cache_store.rb Confidential Data Compromise
The vulnerability of the memcachestore.rb and rediscachestore.rb components of the Ruby on Rails software framework is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...
libjpeg Zero Division DoS
The vulnerability of the libjpeg library is related to errors during division by zero. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
NVIDIA GeForce Graphics Driver DoS
The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, NVS, and Tesla graphics drivers for Windows operating systems is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service...
Cisco NX-OS IPv6 DoS
The vulnerability of the IPv6 implementation of the Cisco NX-OS network operating system’s Cisco routers is related to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
Adobe Photoshop Heap Buffer Overflow
The vulnerability of the Adobe Photoshop graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cisco Unified Communications Manager SQL Injection
The vulnerability of the Web interface for managing the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to input validation errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...
Cisco Web Security Appliance Code Execution
The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of Cisco Web Security Appliance lies in insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cisco SD-WAN vManage SQL Injection
The vulnerability in the vManage web interface of the Cisco SD-WAN programmatically defined network is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
Kafka Protocol Dissector Disruption
The vulnerability of the Kafka Protocol Dissector component epan/dissectors/packet-kafka.c in the Wireshark traffic analyzer software is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
eDocLib Platform XSS
The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect its web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the user’s browser by creating a...
Sudo parse_args() Privilege Escalation
The vulnerability of the parseargs function in the Sudo system administration program is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
HEVC Video Extension Code Execution
The vulnerability of the HEVC Video Extension codec exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Sailfish Buffer Overflow
The vulnerability of the document.title property in the Sailfish Browser application for the “Autora” operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
TrueConf Authentication Bypass
The vulnerability of the TrueConf software is related to deficiencies in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor to lock out a user’s account by attempting more than 10 unsuccessful password entries...
SAP Business Objects Business Intelligence Platform XSS
The vulnerability of the SAP Business Objects Business Intelligence Platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute XSS attacks remotely...
Moxa EDR-810 Function Emergency Shutdown
The vulnerability of the varlldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...
Windows User Profile Service Privilege Escalation
The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to errors in handling network connections. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Helm Path Traversal
The vulnerability of the Helm package manager exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to unpack the diagram archive files outside of the target directory using commands like “helm fetch --untar” an...
Microsoft Excel Memory Object Handling Code Execution
The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted document...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Windows iSCSI Target Privilege Escalation
The vulnerability of the Windows iSCSI Target service in the Windows operating system is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Windows Error Reporting Privilege Escalation
The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected...
Intel Converged Security and Manageability Engine DoS
The vulnerability of the Intel Dynamic Application Loader DAL subsystem within the Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could...
Global Protect Agent for Linux Privilege Escalation
The vulnerability of the Global Protect Agent for Linux endpoint protection software lies in the insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
Microsoft Office Online Server XSS
The vulnerability of Microsoft Office Online Server and Microsoft Office Web Apps Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...
PDF Reader Buffer Overflow Unauthorized Access
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...
Microsoft .NET Bond DoS
The vulnerability of the Microsoft .NET Bond software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Microsoft SharePoint Server XSS
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
Windows kernel Unauthorized Access
The vulnerability of the Windows operating system’s kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
RemoteFX vGPU Windows Code Execution
The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted...
Apache Flex BlazeDS File Disclosure Network Scanning
The vulnerability of the Apache Flex BlazeDS component, a software tool for managing devices in OnCell Central Manager networks, is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to remotely access and view the content of any file on the...
Windows Push Notification Service Privilege Escalation
The vulnerability of the Windows Push Notification Service is related to errors in memory object handling on Windows operating systems. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
parc inode permission module Unix sockets Data Compromise
The vulnerability of the parsec inode permission module in the linux-astra-modules package is related to deficiencies in access control for non-functional Unix sockets. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...
WordPress Content Management System Data Compromise
The vulnerability of the WordPress content management system’s functions is related to an error in the XSS attack reproduction process in the tool panel. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...
Google Chrome Authentication Bypass
The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...
Omnibox Authentication Bypass
The vulnerability of the Omnibox address bar in Google Chrome relates to the bypassing of authentication processes through spamming. Exploiting this vulnerability allows a malicious actor to compromise data integrity by using a specially created HTML page...
ANGEL graphics engine Heap Buffer Overflow DoS
The vulnerability of the ANGEL graphics engine in Google Chrome browsers is related to a buffer overflow error in dynamic memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Django Truncator DoS
The vulnerability of the django.utils.text.Truncator class’s chars and words methods in the Django web development framework is related to the improper handling of the True value as an argument to html. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Xilinx Programmable Integrated Circuits Intercept File Control
The vulnerability of the programmable user-programmable gate array PPVM for Xilinx Spartan, Artix, Kintex, and Virtex programmable logic integrated circuits lies in the ability to intercept or replace the file containing the encrypted control bitstream. Exploiting this vulnerability can allow an...
GNU Binutils get_count Heap Buffer Overflow DoS
The vulnerability of the getcount function in the GNU Binutils development toolset is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
rustdoc Code Execution
The vulnerability of the Rust programming language plugin rustdoc is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Visio graphic editors Code Execution
The vulnerabilities of Microsoft Visio, a graphic editor; Microsoft Excel, an electronic spreadsheet editor; Microsoft PowerPoint, a presentation software; Microsoft Word, a text editor; the Microsoft Office and Office 365 software suite; Microsoft Outlook, a mail client; Microsoft Publisher,...
Hyper-V Hardware Virtualization Privilege Escalation
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
libxl Heap Buffer Overflow DoS
The vulnerability of the libxl function in Xen hypervisors is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...
VLC demux/asf/asf.c Buffer Overflow
The vulnerability of the demux/asf/asf.c component of the VideoLAN VLC media player lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Bash disable_priv_mode Privilege Escalation
The vulnerability of the disableprivmode command in the GNU Bash shell relates to a privilege reset error. This occurs when the command is executed with a valid UID, but the UID does not match its actual value. Exploiting this vulnerability can allow an attacker to access confidential data,...