Global Protect Agent for Linux Privilege Escalation

The vulnerability of the Global Protect Agent for Linux endpoint protection software lies in the insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

Microsoft Office Online Server XSS

The vulnerability of Microsoft Office Online Server and Microsoft Office Web Apps Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

Microsoft .NET Bond DoS

The vulnerability of the Microsoft .NET Bond software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Microsoft SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Windows kernel Unauthorized Access

The vulnerability of the Windows operating system’s kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Oracle VM VirtualBox Core Component Data Modification

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

RemoteFX vGPU Windows Code Execution

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted...

Apache Flex BlazeDS File Disclosure Network Scanning

The vulnerability of the Apache Flex BlazeDS component, a software tool for managing devices in OnCell Central Manager networks, is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to remotely access and view the content of any file on the...

Windows Push Notification Service Privilege Escalation

The vulnerability of the Windows Push Notification Service is related to errors in memory object handling on Windows operating systems. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

parc inode permission module Unix sockets Data Compromise

The vulnerability of the parsec inode permission module in the linux-astra-modules package is related to deficiencies in access control for non-functional Unix sockets. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

WordPress Content Management System Data Compromise

The vulnerability of the WordPress content management system’s functions is related to an error in the XSS attack reproduction process in the tool panel. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

Google Chrome Authentication Bypass

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

Google Chrome Unauthorized Access

The vulnerability of Google Chrome lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML page...

Omnibox Authentication Bypass

The vulnerability of the Omnibox address bar in Google Chrome relates to the bypassing of authentication processes through spamming. Exploiting this vulnerability allows a malicious actor to compromise data integrity by using a specially created HTML page...

ANGEL graphics engine Heap Buffer Overflow DoS

The vulnerability of the ANGEL graphics engine in Google Chrome browsers is related to a buffer overflow error in dynamic memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Django Truncator DoS

The vulnerability of the django.utils.text.Truncator class’s chars and words methods in the Django web development framework is related to the improper handling of the True value as an argument to html. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Xilinx Programmable Integrated Circuits Intercept File Control

The vulnerability of the programmable user-programmable gate array PPVM for Xilinx Spartan, Artix, Kintex, and Virtex programmable logic integrated circuits lies in the ability to intercept or replace the file containing the encrypted control bitstream. Exploiting this vulnerability can allow an...

GNU Binutils get_count Heap Buffer Overflow DoS

The vulnerability of the getcount function in the GNU Binutils development toolset is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

rustdoc Code Execution

The vulnerability of the Rust programming language plugin rustdoc is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Visio graphic editors Code Execution

The vulnerabilities of Microsoft Visio, a graphic editor; Microsoft Excel, an electronic spreadsheet editor; Microsoft PowerPoint, a presentation software; Microsoft Word, a text editor; the Microsoft Office and Office 365 software suite; Microsoft Outlook, a mail client; Microsoft Publisher,...

Hyper-V Hardware Virtualization Privilege Escalation

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

VLC demux/asf/asf.c Buffer Overflow

The vulnerability of the demux/asf/asf.c component of the VideoLAN VLC media player lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Bash disable_priv_mode Privilege Escalation

The vulnerability of the disableprivmode command in the GNU Bash shell relates to a privilege reset error. This occurs when the command is executed with a valid UID, but the UID does not match its actual value. Exploiting this vulnerability can allow an attacker to access confidential data,...

Xen Hypervisor Loop DoS

The vulnerability of Xen hypervisors is related to incorrect processing of bits during iterations. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Visual Studio Credential Transmission

The vulnerability of the Microsoft Visual Studio software relates to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information by monitoring network traffic between...

Live Data Component DoS

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center system is related to errors in processing incoming Live Data traffic. Exploiting this vulnerability can allow an attacker to cause service interruptions using...

Oracle Database Server Unauthorized Access

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the OracleNet...

Oracle Java SE Networking Data Modification Unauthorized Access

The vulnerability of Oracle Java SE and Java SE Embedded software’s Networking component is related to errors in URL normalization. Exploiting this vulnerability can allow an attacker to gain access to, modify, add, or delete data, or to obtain unauthorized access to protected information...

Enterprise Config Management Unauthorized Access

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, obtain unauthorized access to protected information, ...

MySQL Database Management System DoS

The vulnerability of the C API component of the MySQL Database Management System client is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL Protocol network protocol...

Enterprise Manager Base Platform Privilege Escalation

The vulnerability of the Discovery Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information...

Cisco SD-WAN User Interface Command Execution

The vulnerability of the programmable user interface in Cisco SD-WAN networks is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with privileges as the vmanage user on the vulnerable system...

Easy XML Editor XML Parsing DoS File Read

The vulnerability of the XML Parsing component in the Easy XML Editor is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to cause service failures in the application or enable them to read arbitrary files in the system by running a specially craft...

Intel NUC Kit Buffer Overflow DoS

The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause system failures, or gain unauthorized access to protected information...

Windows Defender Vulnerable Service

The vulnerability of Microsoft Windows Defender operating system is related to security configuration errors. Exploiting this vulnerability can allow attackers to trigger false alerts and incorrect responses by Windows Defender services...

i40e controller drivers DoS

The vulnerability of Intel Ethernet Series 700 controller drivers i40e exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Intel Graphics Driver Disclosure

The vulnerability of the Intel Graphics Driver’s API driver component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose protected information...

D-Link Router Code Execution

The vulnerability of D-Link DIR-655, D-Link DIR-866L, D-Link DIR-652, and D-Link DHP-1565 router microprogramming software is related to insufficient testing of the arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a...

Galaktika ERP File Disclosure Overwrite

The vulnerability of the GALAXY ERP resource management system is related to architectural weaknesses in the components .res files that have XML file export functionality. Exploiting this vulnerability allows a malicious actor to read or re-write any file on the server by entering the file path...

libssh2 Heap Buffer Overflow DoS

The vulnerability of the libssh2 library lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, execute arbitrary code, or disclose sensitive information...

Firefox ESR XSS

The vulnerability of the Content Security Policy component in Firefox ESR is related to the lack of measures for sanitizing input data. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

FortiOS Security Configuration Bypass

The vulnerability of the FortiOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using specially crafted SSL/TLS or HTTP traffic...

Site Isolation Bypass

The vulnerability of Site Isolation in the Google Chrome web browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions by using a specially crafted web page...

Sound eXchange Audio Editor Heap Buffer Overflow DoS

The vulnerability of the bitrv2 function fft4g.c in the Sound eXchange audio editor is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

IcedTea-Web Plugin File Write

The vulnerability of the IcedTea-Web plugin is related to errors in processing JNLP files. Exploiting this vulnerability allows a remote attacker to write arbitrary files to the device’s file system using a specially created application...

Printer Web Page Data Compromise

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Oracle VM VirtualBox Partial DoS

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a partial service outage...

Regional electronic budget Authentication Bypass

Vulnerability of the software complex: Regional electronic budget. The integration platform is connected to the shortcomings of the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability can allow a malicious actor to select a user password remotely...