The vulnerability of the JavaScript file taskjobs.js in the GLPI system’s scheduling, incident, and computer equipment inventory management module allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript file taskjobs.js in the GLPI system for managing requests, incidents, and inventory of computer equipment is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the configuration management system and remote execution of operations, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of configuration management systems and remote execution of operations like Salt is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Webmin control panel in hosting systems arises from the lack of measures taken to neutralize special elements used in the operating system’s command line. This allows attackers to execute arbitrary commands.

The vulnerability of the Webmin control panel involves a lack of measures to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the universal monitoring system Zabbix, related to deficiencies in the authentication mechanism, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the MOL2 File Handler component of the Open Babel software for converting chemical substance formats allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Open Babel software for converting chemical substance file formats is related to the issue of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the ClumpletReader::getClumpletSize() function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the ClumpletReader::getClumpletSize function in the Firebird database management system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the memory management block for IOMMU operations in AMD’s microprogramming software for processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the UNIX command-line utility set, BusyBox, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.

The vulnerability of the UNIX command-line utility BusyBox is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.

The vulnerability of Windows push-notifications services is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Linux operating system’s kernel, related to insufficient resource control during its existence, allows attackers to trigger service failures.

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Active Directory catalog service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Active Directory catalog service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the libpng library, related to copying buffers without checking the size of the input data, allows a hacker to cause a service failure.

The vulnerability of the libpng library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the libpng library, related to copying buffers without checking the size of the input data, allows a hacker to cause a service failure.

The vulnerability of the libpng library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows attackers to execute arbitrary code.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Python Pillow library for image processing lies in the writing beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Python Pillow library for image processing is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Ed25519 cryptographic library in the Go language, related to incorrect resource initialization, allows a hacker to trigger a service failure.

The vulnerability of the Ed25519 cryptographic library in the Go language is related to incorrect initialization of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the UNIX command-line utility set, BusyBox, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the UNIX command-line utility set of BusyBox is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Firebird database management system, related to the improper processing of syntactically incorrect structures, allows attackers to cause service failures.

The vulnerability of the Firebird database management system is related to the improper processing of syntactically incorrect structures. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the IndexNodes::get function in the btr.cpp module of the “Red Database” database management system allows a hacker to cause a service failure.

The vulnerability of the IndexNodes::get function in the btr.cpp module of the “Red Database” database management system is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Firebird database management system, related to the execution of operations outside the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Firebird database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the GLPI system’s request, incident, and asset inventory management, related to improper session management, allows a perpetrator to intercept the user’s session.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper session management. Exploiting this vulnerability can allow a malicious actor to intercept a user’s session...

The vulnerability of the reporting subsystem of the “Red Database” database management system allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the reporting subsystem of the “Red Database” database management system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the SDL_info function in the Firebird database management system allows a hacker to induce a service failure.

The vulnerability of the SDLinfo function in the Firebird database management system is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the receive_mergeable() function in the drivers/net/virtio_net.c file of the Linux kernel’s network device driver allows a hacker to cause a service failure.

The vulnerability of the receivemergeable function in the drivers/net/virtionet.c file of the Linux kernel’s network device driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the formSetUSBPartitionUmount function in the Tenda W30E router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetUSBPartitionUmount function in the Tenda W30E router microprogramming system is related to the lack of measures taken to neutralize special elements during the processing of the usbPartitionName parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to lack of access control mechanisms. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of Microsoft Edge browser (based on Chromium) relates to information representation errors in the user interface, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge based on Chromium is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Undici Node.js software platform’s HTTP client involves a lack of memory release after the effective lifespan, allowing attackers to trigger a service failure.

The vulnerability of the Undici software platform’s HTTP client involves a lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows attackers to execute arbitrary code.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to deficiencies in the deserialization mechanism, allowing a perpetrator to execute arbitrary code.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the PowerDNS DNS server, related to the unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the PowerDNS server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the TinkerpopClientService component of the Apache NiFi data processing platform allows a hacker to execute arbitrary code.

The vulnerability of the TinkerpopClientService component of the Apache NiFi data processing platform is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to bypass existing security mechanisms

The vulnerability of the Secure Boot protocol for operating systems running Windows lies in the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...

The vulnerability of the Windows Recovery Environment Agent component on Microsoft Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Windows Recovery Environment Agent component in Microsoft Windows operating systems is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Microsoft Component Object Model (COM) in Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Microsoft Component Object Model COM in Windows operating systems relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the golang-x-net package, a programming language, arises from insufficient resource control during its existence. This allows attackers to trigger a service failure.

The vulnerability of the golang-x-net package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Projected File System component in the Windows operating system, which allows attackers to enhance their privileges

The vulnerability of the Projected File System component in the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the VLC Media Player, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the VLC Media Player is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the protobuf library in the Rust programming language, related to an uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the protobuf library in the Rust programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the expr-lang/expr dynamic expression library in the GO programming language, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the expr-lang/expr library in the GO programming language is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the GLPI system’s request, incident, and asset inventory management, due to insufficient verification of incoming requests, allows a perpetrator to carry out an SSRF attack.

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a malicious actor to carry out an SSRF attack remotely...

The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary codes.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

The vulnerability of the op_crypt_key_callback function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the opcryptkeycallback function in the Firebird database management system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the sdl_desc function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the sdldesc function in the Firebird database management system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the CCH_RELEASE function in the cch.cpp module of the database management system “Red Database” allows a hacker to trigger a service failure.

The vulnerability of the CCHRELEASE function in the cch.cpp module of the “Red Database” database management system is related to a violation of expected behavior. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service failure...

The vulnerability of the ASP.NET Core software platform, related to errors in verifying cryptographic signatures, allows attackers to escalate their privileges.

The vulnerability of the ASP.NET Core software platform is related to errors in checking the cryptographic signature. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...