The vulnerability of the full-screen mode implementation in Google Chrome allows a perpetrator to influence the integrity of the protected information.

The vulnerability of the full-screen browser mode implementation in Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information by installing a malicious...

The vulnerability of the __ip_set_put_netlink() function in the net/netfilter/ipset/ip_set_core.c module of the netfilter kernel of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ipsetputnetlink function in the net/netfilter/ipset/ipsetcore.c module of the netfilter component of the Linux operating system is related to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the App ObjectHandler component in the PDF-XChange PDF document viewing and editing software allows a perpetrator to execute arbitrary code.

The vulnerability of the App ObjectHandler component in the PDF-XChange PDF viewing and editing software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the SetAPLanSettings() function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a hacker to execute arbitrary code.

The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster relates to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Visual Studio software, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Ansible Semaphore configuration management interface, related to improper control of code generation, allows a attacker to execute arbitrary code.

The vulnerability of the Ansible Semaphore configuration management interface is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the software interface for Fortinet FortiManager, a centralized device management system, and FortiAnalyzer, a security event monitoring and analysis tool, allows a malicious individual to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the software interface for centralized device management in Fortinet FortiManager, as well as the event monitoring and analysis tool FortiAnalyzer, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of the LuCI interface in the embedded operating system OpenWrt, which allows a hacker to perform XSS attacks.

The vulnerability of the LuCI interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.

The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

The vulnerability in the web interface of the LuCI, a built-in operating system called OpenWrt, allows attackers to execute cross-site scripting attacks.

The vulnerability in the LuCI web interface of the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the x3f_utils_patched.cpp component in the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the x3futilspatched.cpp component in the LibRaw image processing library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions HttpServletRequest.getParameter() and HttpServletRequest.getParts() in the Eclipse Jetty server container allow a attacker to cause a service failure.

The vulnerability of the HttpServletRequest.getParameter and HttpServletRequest.getParts methods in the Eclipse Jetty server container is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Redis database management system lies in the insecure management of privileges, allowing attackers to gain unauthorized access to keys that are clearly not authorized by the ACL configuration.

The vulnerability of the Redis database management system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to keys that are clearly not authorized by the ACL configuration...

The vulnerability of the Apache NiFi data processing platform, related to insufficient comparison, allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Apache NiFi data processing platform is related to insufficient comparison. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Google Chrome browser’s Extensions API allows a hacker to install any extension they desire.

The vulnerability of the Google Chrome browser’s Extensions API relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to install any extension using a specially created HTML page...

The vulnerability of the Fullscreen application interface of Google Chrome’s browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Fullscreen application interface of Google Chrome’s browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions on the browser page through a specially...

The vulnerability of Google Chrome’s permission prompts, which allows a violator to access confidential information

The vulnerability of Google Chrome’s permission prompts is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information through a specially created HTML page...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET Framework software platform is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Webmin control panel in hosting systems stems from the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Java-Framework templates in the Apache Camel framework, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Java framework Apache Camel is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the PHP platform pimcore, related to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the PHP platform pimcore is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the NodeBB Forum software lies in the incorrect path name limitation for accessing the restricted directory. This allows a violator to execute arbitrary code.

The vulnerability of the NodeBB Forum software exists due to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the software platform for operating data management systems, related to the restoration of unreliable data in memory, allows a perpetrator to read and update arbitrary data from various system catalogs. This vulnerability enables unauthorized access and manipulation of system functions.

The vulnerability of the software platform for operating data management in ABB Ability zenon relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows an attacker to read and update arbitrary data in various system catalogs...

The vulnerability of the kernel of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to execute arbitrary code with kernel privileges.

The vulnerability in the kernels of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges...

The vulnerability of the application software interface for process control and automation system monitoring software from Rockwell Automation’s Enhanced HIM allows a attacker to perform a CSRF attack.

The vulnerability of the application software interface for process control and automation system monitoring software from Rockwell Automation, Enhanced HIM, is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack...

The vulnerability in the kernel of operating systems such as macOS Big Sur, macOS Monterey, iOS, iPadOS, tvOS, macOS Ventura, and watchOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the kernel of operating systems such as macOS Big Sur, macOS Monterey, iOS, iPadOS, tvOS, macOS Ventura, and watchOS relates to operations that occur outside of the buffers in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

The vulnerability of the kernel of iOS operating systems, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura allows a perpetrator to execute arbitrary code.

The vulnerability of the kernel of iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Base plugin (gst-plugins-base) in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the Base plugin gst-plugins-base of the Gstreamer multimedia framework is related to the issue where operations occur outside the buffer boundaries in memory during the parsing and decoding of SRT subtitle files. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the kernel of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to execute arbitrary code with kernel privileges.

The vulnerability in the kernels of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges...

The vulnerability of the Repository component of the Oracle Hyperion Financial Reporting application, which allows a perpetrator to gain unauthorized access to protected information or cause partial service failure.

The vulnerability of the Repository component in Oracle Hyperion Financial Reporting’s budget management automation processes is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause a...

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software platform allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or delete...

The vulnerability of the drm_mode_setcrtc() function in the drivers/gpu/drm/drm_crtc.c file of the DRM driver for the Astra Linux Special Edition operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the DRM driver for the Astra Linux Special Edition operating system is related to access and manipulation of dynamically allocated uninitialized memory. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the Jenkins server plugin “Dimensions” in automation tools stems from insufficient protection of service data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins server plugin “Dimensions” relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, relates to the possibility of embedding commands that allow a intruder to execute arbitrary code.

The vulnerability of the StruxureWare Data Center Expert monitoring system relates to the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the console-based graphic editor ImageMagick arises from the lack of data cleaning at the control level when processing parameters like video:vsync or video:pixel-format. This allows an attacker to execute arbitrary commands.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of measures taken at the control level when processing parameters like video:vsync or video:pixel-format. Exploiting this vulnerability allows an attacker to execute arbitrary commands using specially created...

The vulnerability of the fl_set_geneve_opt() function in the net/sched/cls_flower.c module, part of the network scheduling subsystem in the Linux operating system’s kernel, allows a malicious actor to cause service failures or increase their privileges.

The vulnerability of the flsetgeneveopt function in the net/sched/clsflower.c module, within the net/sched scheduling subsystem of the Linux operating system’s kernel, is related to incorrect calculations of buffer boundaries during writing operations. Exploiting this vulnerability may allow a...

The vulnerability of the librenderdoc.so library, a standalone visual debugger for RenderDoc, allows attackers to increase their privileges.

The vulnerability of the librenderdoc.so library, a standalone visual debugger for RenderDoc, is related to an incorrect definition of symbolic references before accessing the file. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of ShareFile StorageZones, related to inadequate access control, allows a intruder to gain full access to the controller.

The vulnerability of ShareFile StorageZones relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the controller...

The vulnerability of the erase-write function in Cisco NX-OS and Cisco FXOS operating systems of Cisco devices allows attackers to increase their privileges.

The vulnerability of the erase-write function in Cisco NX-OS and Cisco FXOS operating systems in Cisco devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router allows a hacker to execute arbitrary code.

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the hedwig.cgi and pigwidgeon.cgi components of the D-Link DIR-868L router’s software allows a attacker to perform a CSRF attack.

The vulnerability of the hedwig.cgi and pigwidgeon.cgi components of the D-Link DIR-868L router software is related to the manipulation of inter-domain requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

The vulnerability of the FTP server function of microprogrammed logic controllers MELSEC RJ71EIP91, SW1DNN-EIPCT-BD, FX5-ENET/IP, SW1DNN-EIPCTFX5-BD allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FTP server functions of microprogrammed logic controllers such as MELSEC RJ71EIP91, SW1DNN-EIPCT-BD, FX5-ENET/IP, and SW1DNN-EIPCTFX5-BD is related to the use of fixed password encoding. Exploiting this vulnerability can allow an intruder to gain unauthorized access to...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to gain unauthorized access to protected information.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to insufficient protection of operational data. Exploiting these vulnerabilities can allow unauthorized attackers to gain unauthorized access to protected information usi...

The vulnerability of the microprogrammed servo system software of Kinetix 5500 allows a intruder to gain unauthorized access to the device.

The vulnerability of the Kinetix 5500 servo-controller software-related microprogramming systems is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating locally, to gain unauthorized access to the device using network protocols like telnet or...

The vulnerability of the Permalink Manager Lite plugin for the WordPress content management system lies in its lack of protection against SQL query structures, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Permalink Manager Lite plugin for the WordPress content management system is related to the lack of protection for the SQL query structure when processing the orderby parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the monitoring tool for VMware Aria Operations, related to deficiencies in access control, allows a perpetrator to execute arbitrary code and increase their privileges.

The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code and increase their privileges...

The vulnerability of the built-in software of the ARIS controller, related to access control errors, allows a intruder to increase their privileges within the system.

The vulnerability of the built-in software of the ARIS controller is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges within the system...

The vulnerability of the built-in software of the ARIS controller, related to the use of cryptographic algorithms that contain defects and risks, allows a perpetrator to gain access to critical information.

The vulnerability of the built-in software of the ARIS controller is related to the use of cryptographic algorithms that contain defects and risks. Exploiting this vulnerability could allow a malicious actor to gain access to critical information...

The vulnerability of the ksmbd module in Linux operating systems allows attackers to compromise the integrity, accessibility, and confidentiality of protected information, and execute arbitrary code.

The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability, and confidentiality of protected information, and to execute arbitra...