The vulnerability of the graphical user interface of the network access control device FortiNAC-F allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the graphical user interface of the FortiNAC-F network access control device lies in the redirection of URLs to an unreliable website using a specially created CSV file. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the protected...

The vulnerabilities of the FortiOS operating system, the FortiPAM identity management system, and the FortiProxy proxy server, related to incorrect path name restrictions for restricted access directories, allow attackers to write or delete arbitrary files.

The vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server for protection against internet attacks are related to incorrect restrictions on the path to the restricted directory. Exploiting these vulnerabilities could allow attacker...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the ColdFusion interpreter lies in the incorrect limitation on the path name to the catalog, which allows attackers to bypass existing security restrictions.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the Windows Shell component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Shell component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of the Multimodal Message Handler component in the Spring AI development framework allows a attacker to perform an SSRF attack.

The vulnerability of the Multimodal Message Handler component in the Spring AI development framework relates to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of Google Chrome’s Codecs component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Codecs component is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the rewriteRequestHeaders() function in the Fastify framework, a Node.js software platform, allows a malicious actor to gain unauthorized access and modify protected information.

The vulnerability of the rewriteRequestHeaders function in the Fastify framework, a Node.js software platform, is related to HTTP request processing flaws. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

The vulnerability of the Pillow image processing library, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Pillow image processing library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Apache Airflow network software lies in the improper assignment of permissions for critical resources, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Airflow network software relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ColdFusion interpreter, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code in the context of the current user, by loading a malicious file...

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR allows a hacker to obtain passwords for the installed connectors.

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to the storage of passwords in a recoverable format. Exploiting this vulnerability can...

The vulnerability of Fortinet FortiOS operating systems lies in the lack of authentication for critical functions, allowing attackers to execute derivative code or commands.

The vulnerability of Fortinet FortiOS operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute derived code or commands using specially crafted packages...

The vulnerability of FortiWeb web applications, related to writing beyond the buffer boundary, allows attackers to execute arbitrary code.

The vulnerability of FortiWeb web applications is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands using specially crafted HTTP requests...

The vulnerability of the software for coordinating the operation of security systems and for managing real-time incident responses in Fortinet FortiSOAR lies in the lack of protection for website structures. This allows attackers to execute XSS attacks.

The vulnerability of the graphical user interface of the software solution for coordinating the operation of cybersecurity systems and for managing incident responses in real-time is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a...

The vulnerability of the monitoring and surveillance system of the Grafana platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the monitoring and surveillance platform for Grafana relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to synchronization errors when using a shared resource (“Race Situation”). This vulnerability allows a hacker to gain increased privileges.

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of Google Chrome’s augmented reality technology on Android operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s augmented reality technology in Android operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

The vulnerability of the Accessibility component in the Google Chrome browser for Windows operating systems, which allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the Accessibility component in the Google Chrome browser for Windows operating systems is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

The vulnerability of Google Chrome’s Skia graphic library allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the Password component in the Google Chrome browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Password component in Google Chrome browsers is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Forms component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Forms component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser allows a hacker to execute arbitrary code.

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Dawn component in the Google Chrome browser, which allows a hacker to bypass the sandboxing protection mechanism

The vulnerability of the Dawn component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser allows a hacker to execute arbitrary code.

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Google Chrome browser’s Video component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Video component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerabilities of the Fuji and Olympus modules in the Libexif library for grammatical analysis of EXIF files allow a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Fuji and Olympus modules in the Libexif library for grammatical analysis of EXIF files is related to a numerical overflow condition. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information or cause service failures...

The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the ANGLE library in Google Chrome browsers is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

The vulnerability of the PDFium component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform, related to an incorrect limitation on the path name to the restricted access catalog, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of Google Chrome’s Codecs component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Codecs component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Apache Tomcat application server, related to deficiencies in the error reporting mechanism, allows attackers to execute a type of attack known as Padding Oracle attack.

The vulnerability of the Apache Tomcat application server is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability allows a malicious actor to carry out a type of attack known as Padding Oracle, which involves using “padding” to manipulate data...

The vulnerability of the Cast component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Cast component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome’s Codecs component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Codecs component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the PDFium component of the Google Chrome browser on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome’s Payments component on Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Payments component on Android operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE web interface and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of measures taken at the management level for data cleansing. Exploiting this vulnerability could all...

The vulnerability of the Cisco Identity Services Engine (ISE) platform, related to the lack of data cleansing at the management level, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome’s Graphite component, which allows a hacker to bypass the sandboxing protection mechanism

The vulnerability of Google Chrome’s Graphite component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

The vulnerability of the grub_crypto_memcmp function in the GNU GRUB operating system’s loader (formerly Grub2) allows a attacker to compromise the confidentiality of the protected information.

The vulnerability of the grubcryptomemcmp function in the GNU GRUB formerly Grub2 operating system is related to the disclosure of information due to timing discrepancies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of Google Chrome’s graphics processor allows a hacker to bypass the sandboxing protection mechanisms.

The vulnerability of the Google Chrome browser’s graphics processor is related to memory writes beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE web interface and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability...

The vulnerability of the Google Chrome browser’s CSS component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s CSS component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Permissions control element in the Google Chrome browser for Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Permissions control element in the Google Chrome browser for Android operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of Google Chrome’s Codecs component allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Google Chrome’s Codecs component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the PDFium component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Cisco Webex web conferencing platform, related to errors in the authentication process, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Cisco Webex web conferencing platform is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Prerender component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Prerender component in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Apache Tomcat application server, related to deficiencies in the encryption of confidential data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to deficiencies in the encryption of confidential data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...