97943 matches found
Azure SQL Database Privilege Escalation
The vulnerability of Azure SQL Database cloud relational database is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
Azure SRE Agent Authentication Privilege Escalation
The vulnerability of the AI-based tool for automatic analysis of root causes and effective response to incidents in Azure SRE Agents is related to the lack of authentication. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
Web Portal Cloud Services Privilege Escalation
The vulnerability of the web portal for managing cloud services, accounts, subscriptions, and the security of the Microsoft 365 Admin Center is related to errors in verifying cryptographic signatures. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotel...
Windows Installer Privilege Escalation
The vulnerability of the Windows Installer component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...
SveService Component Code Execution
The vulnerability of the SveService component in the Android operating system of Samsung mobile devices is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
VK WorkMail URL Redirection Phishing
The vulnerability in the validation of URL addresses of the corporate email service VK WorkMail involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...
Loki Query Engine DoS
The vulnerability of the Query Engine component of the Loki logging aggregation and storage system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Neo4j Cypher MCP Server Code Execution
The vulnerability of the Neo4j Cypher MCP server is related to a data source verification error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...
Microsoft .NET Integer Overflow Privilege Escalation
The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...
ksmbd DoS
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux driver GPU DRM AMD amdgpu DoS
The vulnerability of the Linux operating system’s components such as drivers, GPU, DRM, AMD, and AMDGPU cores is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures...
fs/orangefs Component DoS
The vulnerability of the fs/orangefs component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
fs/ntfs3 Component DoS
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel/futex Confidential Data Access
The vulnerability of the kernel/futex component of the Linux operating system’s kernel is related to insufficient checking of the state of the shared resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
Linux drivers nvme target fc buffer overflow DoS
The vulnerability in the drivers/nvme/target/fc.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux scmi_pm_domain driver DoS
The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the usbgadgetstatework function in the /drivers/usb/gadget/udc/core.c file of the Linux kernel is related to situations where the signal processing routine is involved in a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Uninitialized Resource DoS
The vulnerability of the Linux operating system’s kernel is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Openvswitch Kernel Module Buffer Overflow DoS
The vulnerability of the queuegsopackets and queueuserspacepacket functions in the openvswitch kernel module of Linux operating systems is related to a single-byte offset error. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Kerberos Privilege Escalation
The vulnerability of the Kerberos protocol for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Excel Office 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Excel, Microsoft Office, and 365 Apps for Enterprise programs is related to data type conversion errors. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially crafted malicious file...
Microsoft PowerPoint Office 365 Apps Disclosure
The vulnerability of Microsoft PowerPoint presentation templates, Microsoft Office packages, and 365 Apps for Enterprise lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...
HTTP.sys Privilege Escalation
The vulnerability of the HTTP.sys driver on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Windows Device Association Service Privilege Escalation
The vulnerability of the Windows Device Association Service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft Teams Authentication Privilege Escalation
The vulnerability of the corporate platform Microsoft Teams is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Azure Active Directory Privilege Escalation
The vulnerability of the Azure Active Directory identity management and protection platform is related to modifications of assumed data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft 365 Apps for Enterprise Buffer Overflow Code Execution
The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
FreeBSD Largepage Privilege Escalation
The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
FreeBSD Largepage Privilege Escalation
The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges...
JetBrains YouTrack Authentication Bypass
The vulnerability of the JetBrains YouTrack project and task management software is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information...
Go OpenTelemetry Memory Exhaustion
The vulnerability of adding additional tools and integration libraries for the Go language with OpenTelemetry is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause memory exhaustion...
Microsoft SharePoint Online content
The vulnerability of the Microsoft SharePoint Online content management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
VK WorkMail Blind SSRF
The vulnerability of corporate email for VK WorkMail is related to insufficient validation of requests on the server side when integration with document editing services is enabled. Exploiting this vulnerability could allow a malicious actor to execute a Blind SSRF attack remotely...
fs/ntfs3 Component DoS
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
Windows DNS Service Privilege Escalation
The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Windows GDI+ Code Execution
The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...
Linux kernel Buffer Overflow DoS
The vulnerability of the Linux operating system’s kernel is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
NTFS Disclosure
The vulnerability of the NTFS file system in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
bpf Component DoS
The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...
btrfs Heap Buffer Overflow DoS
The vulnerability of the btrfsclearspaceinfofull function in the btrfs module of the Linux kernel is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
OpenZFS Memory Corruption
The vulnerability of the ZFSIOCRECVNEW handler of the OpenZFS component in FreeBSD-related operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to corrupt memory...
Desktop Window Manager Privilege Escalation
The vulnerability of desktop window managers in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
OpenZFS Heap Buffer Overflow Privilege Escalation
The vulnerability of the zfsiocuserspacemany function in the OpenZFS component of FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain increased privileges...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component of the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Work Folder Service Privilege Escalation
The vulnerability of the Work Folder Service in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
pgAdmin 4 Import/Export Data Command Execution
The vulnerability of the Import/Export Data function of the pgAdmin 4 database management tool is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on the server remotely...
Firewalld Improper Execution Permissions Data Compromise
The vulnerability of the Firewalld firewall configuration program is related to improper execution permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...
Underscore _flatten _isEqual DoS
The vulnerability of the flatten and isEqual functions in the JavaScript library for working with arrays, Underscore, is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Little CMS CubeSize Function Confidential Data Access DoS
The vulnerability of the CubeSize function in the cmslut.c component of the Little CMS color management library is related to the improper execution of certain operations. Exploiting this vulnerability could allow an attacker to access confidential data and also cause service interruptions...