The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent allows a attacker to compromise data integrity.

The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent software relates to the improper definition of symbolic links during access to the file. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, a platform for archiving corporate information, lies in their susceptibility to being bypassed through the use of an alternative authentication method or channel. This allows attackers to trigger a service failure.

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the Microsoft Windows Search component on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft Windows Search component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of the Windows Active Directory operating system management and reporting software allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows Active Directory operating system management and reporting software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows attackers to carry out spear-phishing attacks...

The vulnerabilities of the Microsoft .NET software platform, Microsoft .NET Framework, and the Visual Studio source code editor allow attackers to induce a service failure.

The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the source code editor Visual Studio is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the icns_slurp() function in the Gimp image processing library allows a hacker to cause application failures or expose confidential information.

The vulnerability of the icnsslurp function in the Gimp image processing library is related to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow an attacker to cause the application to crash or expose confidential information...

The vulnerability of the Gimp image processing library, related to incorrect calculations of the buffer size allocated, allows a hacker to cause a service failure.

The vulnerability of the Gimp image processing library is related to incorrect calculations of the buffer size allocated for processing images. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the onRegister() function in the Fastify framework, a Node.js software platform, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the onRegister function in the Fastify framework, a Node.js software platform, is related to the occurrence of interpretation conflicts when processing HTTP headers’ names and values. Exploiting this vulnerability allows an attacker to compromise the confidentiality and...

The vulnerability of the Function Discovery Service (fdwsd.dll) in Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Function Discovery Service fdwsd.dll component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Excel Viewer for spreadsheet viewing, and the Microsoft Office suite, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerabilities of Microsoft Excel editors, Microsoft Excel Viewer, and the Microsoft Office suite are related to improper handling of code generation. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from the failure to take measures to neutralize special elements, allowing the intruder to execute arbitrary code.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the keras.utils.get_file() function in the Keras library allows a hacker to execute arbitrary code.

The vulnerability of the keras.utils.getfile function in the Keras library is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Cisco AsyncOS operating system authentication service for Cisco Secure Web Appliances allows a hacker to bypass the authentication process.

The vulnerability of the Cisco AsyncOS operating system authentication service for Cisco Secure Web Appliances is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process and gain unauthorized access to protected informatio...

The vulnerability of the integrated Cisco Unity Connection messaging system, related to errors in the mechanism for processing relative path to the directory, allows a perpetrator to load arbitrary files.

The vulnerability of the integrated Cisco Unity Connection messaging system is related to errors in the mechanism for processing relative paths to the directory. Exploiting this vulnerability could allow a malicious actor to download arbitrary files remotely...

The vulnerability of the TIM image loader in the Gimp image processing library allows a hacker to induce a service failure.

The vulnerability of the TIM image loader in the Gimp image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Dell PowerScale OneFS operating system, due to insufficient checking of unusual or exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the Dell PowerScale OneFS operating system lies in insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the integrated Cisco Unity Connection messaging system, related to errors in the mechanism for processing relative path to the directory, allows a perpetrator to load arbitrary files.

The vulnerability of the integrated Cisco Unity Connection messaging system is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to download arbitrary files from the vulnerable system...

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to perform cross-site scripting (XSS) attacks.

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the Windows Installer component in Windows operating systems is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the PowerShell command interpreter for Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of PowerShell command interpreters on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform for network policies relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remote...

The vulnerability of the file-seattle-filmworks plugin for the Gimp image processing library allows a hacker to induce a service failure.

The vulnerability of the file-seattle-filmworks plugin for the Gimp image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows Encrypting File System (EFS) component in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the Windows Encrypting File System EFS component in operating systems involves the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of Dell Storage Manager’s cluster management software lies in its lack of access control mechanisms, allowing attackers to increase their privileges.

The vulnerability of Dell Storage Manager’s cluster management software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

The command-line interface of the Cisco Identity Services Engine (ISE) management platform, as well as the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device, are vulnerable. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the command-line interface of the Cisco Identity Services Engine ISE management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to improper encoding or filtering of output data. Exploiting this vulnerabili...

The vulnerability in the web interface for controlling the Cisco Unity Connection integrated messaging system allows attackers to carry out phishing attacks.

The vulnerability of the Cisco Unity Connection messaging system’s web interface is related to the redirection of the URL to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks using a specially created malicious link...

The vulnerability in the application for creating screenshot copies using Snipping Tool on Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the application for creating screenshot copies using Snipping Tool on Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of the Java Message Service (JMS) software platform provided by Apache ActiveMQ, which allows a hacker to execute arbitrary code.

The vulnerability of the Java Message Service JMS software platform provided by Apache ActiveMQ is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created ObjectMessage object...

The vulnerability of the Gimp image processing library, related to integer overflow, allows attackers to execute arbitrary code or cause system failures.

The vulnerability of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the Desktop Agent function on the cloud platform for Cisco WebEx Contact Centers allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Desktop Agent function on the cloud platform for Cisco WebEx Contact Centers relates to the failure to remove script-related HTML tags from the web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protect...

The vulnerability of the strlen() function in thejq programming language allows attackers to influence the integrity and accessibility of the protected information.

The vulnerability of the strlen function in thejq programming language is related to errors that occur when a string or array is terminated with a NULL character. Exploiting this vulnerability can allow an attacker to influence the integrity and accessibility of the protected information...

The vulnerability of the jv_parse_sized() function in the programming language jq, which allows a hacker to trigger a denial-of-service attack.

The vulnerability of the jvparsesized function in the programming language jq is related to reading data beyond the allowable range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the libp2p-rust library server allows a hacker to trigger a service failure.

The vulnerability of the libp2p-rust library server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending DISCOVER requests...

The vulnerability of the CUPS printing server stems from incorrect restrictions on the path to the directory, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the CUPS printing server relates to an incorrect restriction on the path to the directory during the processing of the notify-recipient-uri parameter. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected...

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to lack of access control, which allows an intruder to increase their privileges.

The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to insufficient access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the driver for auxiliary functions in Windows Sockets operating systems allows attackers to increase their privileges.

The vulnerability of the WinSock auxiliary function driver in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Apache Airflow network software, related to the lack of authentication, allows a perpetrator to gain unauthorized access to HITL’s processes.

The vulnerability of the Apache Airflow network software is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the HITL processes...

The vulnerability in the implementation of the WebUSB protocol of Google Chrome allows a perpetrator to disclose protected information.

The vulnerability of the WebUSB protocol implementation in Google Chrome is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose sensitive information through a specially created HTML page...

The vulnerability of microprogrammed software in Schneider Electric Easergy relay protection and control devices, related to the use of pre-installed account data, allows unauthorized access by attackers to protected information.

The vulnerability of microprogrammed software in Schneider Electric Easergy relay protection and control devices is related to the use of pre-installed account data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the syncCodeBase() function in the Composer dependency management tool allows a hacker to inject arbitrary commands.

The vulnerability of the syncCodeBase function in the Composer dependency management tool is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands through specially created source URLs or URLs...

The vulnerability of the libp2p-rust library server allows a hacker to trigger a service failure.

The vulnerability of the libp2p-rust library server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Jenkins automation server lies in the lack of protection for service data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of the Jenkins automation server lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the FortiSandbox threat detection and mitigation system, related to the lack of protection for website structures, allows attackers to execute arbitrary commands or code.

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or code...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to deficiencies in the authorization process, which allows unauthorized users to gain access to protected information.

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to deficiencies in authorization procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ColdFusion interpreter lies in the incorrect limitation on the path name to the catalog, which allows attackers to read arbitrary files.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability allows an attacker who operates remotely to read arbitrary files...

The vulnerability of Google Chrome’s GPU component allows a hacker to execute arbitrary code.

The vulnerability of the Dawn component in the Google Chrome browser is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework is related to the occurrence of interpretation conflicts when processing HTTP header names and values. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...