92298 matches found
The vulnerability of Google Chrome’s Skia graphic library allows attackers to gain unauthorized access to protected information.
The vulnerability of Google Chrome’s Skia graphics library is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Google Chrome browser’s Video component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Google Chrome browser’s Video component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Google Chrome’s CORS mechanism allows a hacker to gain unauthorized access to protected information.
The vulnerability of Google Chrome’s CORS mechanism is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.
The vulnerability of the Google Chrome browser’s Media component is related to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Proxy component of Google Chrome, which allows a hacker to bypass the sandboxing protection mechanism
The vulnerability of the Google Chrome browser’s Proxy component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...
The vulnerability of the Perforce::generateP4Command() method in the dependency manager for PHP Composer allows a malicious actor to execute arbitrary commands.
The vulnerability of the Perforce::generateP4Command method in the dependency manager for PHP Composer is related to the failure to take measures to eliminate special elements. Exploiting this vulnerability may allow a perpetrator to execute arbitrary commands using a specially crafted JSON file...
The vulnerability of the Google Chrome browser’s FileSystem API allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Google Chrome browser’s FileSystem API relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the jq JSON processing tool lies in the use of a hash function that does not meet security requirements. This allows attackers to gain unauthorized access to protected information or cause service failures.
The vulnerability of the jq JSON processing tool lies in the use of a hash function that does not meet security requirements. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...
The vulnerability of Google Chrome’s Visuals library allows a hacker to bypass the sandboxing protection mechanisms.
The vulnerability of Google Chrome’s Viz library lies in the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing mechanism...
The vulnerability of the platform for creating, publishing, and reproducing digital advertising on Adobe Experience Manager (AEM) Screens lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM Screens platform, which is used for creating, publishing, and reproducing digital advertisements, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute...
The vulnerability of the platform for creating, publishing, and reproducing digital advertising on Adobe Experience Manager (AEM) Screens lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM Screens platform, which is used for creating, publishing, and reproducing digital advertisements, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute...
The vulnerability of the Remote Procedure Call (RPC) technology in the Windows operating system allows attackers to enhance their privileges.
The vulnerability of the Remote Procedure Call RPC technology in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows Speech Brokered API in operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows Speech Brokered API in operating systems is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Remote Procedure Call component in the Windows operating system, which allows a hacker to disclose protected information
The vulnerability of the Remote Procedure Call component in the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the SAP Business Planning and Consolidation solution for managing financial indicators, as well as the SAP Business Warehouse data management and analytics system, stems from the lack of measures taken to protect the SQL query structure. This allows attackers to gain access to read, modify, and delete data.
The vulnerability of the SAP Business Planning and Consolidation system for managing financial indicators, as well as the SAP Business Warehouse data management and analytics system, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can all...
The vulnerability of the Web Dynpro Java component in SAP NetWeaver Java Application Server web applications allows a perpetrator to execute arbitrary code.
The vulnerability of the Web Dynpro Java component in SAP NetWeaver Java Application Servers is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the ColdFusion software platform, related to uncontrolled resource consumption, allows attackers to cause service failures for the application.
The vulnerability of the ColdFusion software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures for the application...
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in the ability to write beyond the buffer boundary, allowing an attacker to cause memory corruption.
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause memory corruption...
The vulnerability of the Boot Manager download process for Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the Boot Manager download process in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a hacker to bypass existing security restrictions...
The vulnerability of the Windows operating system’s Management Services service allows attackers to escalate their privileges.
The vulnerability of the Windows operating system’s Management Services function is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Microsoft Visual Studio software development tool and the .NET software platform lies in the fact that operations beyond the buffer boundaries in memory can lead to service interruptions for attackers.
The vulnerability of the Microsoft Visual Studio software development tool and the .NET software platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the OLE technology in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the OLE technology in Windows operating systems is related to errors in data type mixing. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems lies in its ability to exploit memory after it is freed, allowing an attacker to increase their privileges.
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability in applications for creating screenshot copies using Snipping Tool on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of applications for creating screenshot copies using Snipping Tool on the Windows operating system is related to the lack of data cleaning at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Framemaker desktop publishing system, related to the use of an uninitialized pointer, allows a hacker to disclose protected information.
The vulnerability of the Adobe Framemaker desktop publishing system lies in the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability of the software for controlling power supply units like PowerChute Serial Shutdown, which stems from uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure by sending specially crafted POST and helpabout requests...
The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps exposes operating systems running on Windows to exploitation. This allows attackers to escalate their privileges.
The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps, when operating on Windows operating systems, is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain elevat...
The vulnerability of the Windows operating system’s kernel, related to insufficient protection of registration data, allows attackers to disclose protected information.
The vulnerability of the Windows operating system’s kernel is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the UPnP Device Host operating system in Windows allows a hacker to execute arbitrary code.
The vulnerability of the UPnP Device Host operating system in Windows relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Power Apps development environment, related to the lack of measures to neutralize specific elements, allows a perpetrator to circumvent security restrictions.
The vulnerability of the Microsoft Power Apps development environment is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
The vulnerability of SAP Business Analytics and SAP Content Management systems lies in their inadequate authentication procedures, which allow unauthorized users to gain access to protected information.
The vulnerability of SAP Business Analytics and SAP Content Management systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Adobe Bridge file manager, related to the lack of checks for division by zero, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the trusted execution environment of the Windows operating system’s Virtualization-Based Security (VBS) allows attackers to circumvent existing security restrictions.
The vulnerability of the trusted execution environment for the Windows operating system’s Virtualization-Based Security VBS mechanism is related to access control errors. Exploiting this vulnerability can allow a perpetrator to circumvent existing security restrictions...
The vulnerability of the Cloud Files Mini Filter driver for the Windows operating system allows a hacker to increase their privileges.
The vulnerability of the Cloud Files Mini Filter driver for the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to unreliable pointer reclamation. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the server for automating work processes in n8n-MCP, related to insufficient validation of requests on the server side, allows attackers to influence the integrity and accessibility of protected information.
The vulnerability of the n8n-MCP server for automating processes is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...
The vulnerability of the Adobe Framemaker desktop publishing system lies in insufficient validation of input data, allowing attackers to read arbitrary files.
The vulnerability of the desktop publishing system Adobe Framemaker is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...
The vulnerability of the software for controlling uninterruptible power supplies (UPS) of the PowerChute Serial Shutdown system lies in the lack of measures to handle CRLF sequences, allowing a intruder to trigger a service failure.
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending specially crafted POST...
The vulnerability of the validate_stub() function in the FTLDNS DNS server (pihole-FTL) allows a hacker to execute arbitrary commands.
The vulnerability of the validatestub function in the FTLDNS pihole-FTL DNS server is related to the lack of measures taken to eliminate special elements during the processing of the parameter dns.upstreams. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, and Acrobat 2024 lies in the uncontrolled modification of object prototype attributes, allowing attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs Acrobat DC, Acrobat Reader DC, and Acrobat 2024 is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Windows operating system’s kernel, related to insufficient protection of registration data, allows attackers to disclose protected information.
The vulnerability of the Windows operating system’s kernel is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the biometric authentication function of the Windows Hello operating system allows a perpetrator to circumvent existing security restrictions.
The vulnerability of the biometric authentication function of the Windows Hello operating system relates to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...
The vulnerability of the Adobe Bridge file manager, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Bridge file manager, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Brokering File System (BFS) of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Brokering File System BFS in the Windows operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...