The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data when processing the wans parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted GET reques...

The vulnerability of the TrueConf Server software, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the TrueConf Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows Advanced Rasterization Platform (WARP) in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Advanced Rasterization Platform WARP in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

The vulnerability of the Projected File System (ProjFS) file system in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Projected File System ProjFS in the Windows operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Container Isolation FS Filter driver for Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Container Isolation FS Filter driver for Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to gain increased privileges...

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Gimp image processing library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the USB Printing Stack driver (usbprint.sys) on Windows operating systems, which allows a hacker to escalate their privileges

The vulnerability of the USB Printing Stack driver usbprint.sys in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows a hacker to trigger a service failure

The vulnerability of the HTTP.sys driver on Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the IBM Tivoli Netcool Impact platform for automating work processes allows a perpetrator to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IBM Tivoli Netcool Impact automation platform lies in the ability to disclose information through registration files. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access systems lies in the insufficient validation of requests at the server-side. This allows attackers to gain unauthorized access to protected information.

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access lies in insufficient validation of requests at the server-side. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library, which allows attackers to influence the integrity of protected information.

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access systems lies in the fact that they allow functions to be accessed from an untrusted controlled area, enabling attackers to compromise the confidentiality of protected information.

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access lies in the fact that these systems enable functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to compromise the confidentiality of protected information...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, relates to the absence of authentication mechanisms. This allows attackers to manipulate the integrity, accessibility, and confidentiality of information.

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to manipulate the integrity, accessibility, and confidentiality of information...

The vulnerability of the validate_auth() function in the framework for working with Marimo data allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the information.

The vulnerability of the validateauth function in the Marimo framework relates to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to a memory reallocation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows User Interface Core component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows User Interface Core component of Windows operating systems is related to synchronization errors when using common resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information using a specially created file with the EMF extension...

The vulnerability of the Microsoft SQL Server database management system, related to the swapping of an unreliable pointer, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft SQL Server database management system is related to the use of an unreliable pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Windows operating system’s Web Account Manager allows a hacker to disclose protected information.

The vulnerability of the Windows operating system’s Web Account Manager is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

The vulnerability affects the `/_og/d/` component of the Open Graph image generation module from the Nuxt OG Image framework. This framework is used for creating web applications and websites using Nuxt.js. It allows attackers to trigger a denial-of-service attack.

The vulnerability of the og/d/ component of the Open Graph image generation module of the Nuxt OG Image framework, which is used for creating web applications and sites using Nuxt.js, relates to improper resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Universal Plug and Play (UPnP) Device Host Service in Windows operating systems allows a hacker to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP Device Host Service in Windows operating systems is related to unreliable pointer reassignments. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Universal Plug and Play (UPnP) Device Host Service in Windows operating systems allows a hacker to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP Device Host Service in Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the user interface of Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the user interface UI of Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Biometric Service (WbioSrvc), a data processing service for biometric data, allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Windows Biometric Service WbioSrvc in operating systems with Windows-based biometric data processing is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the Desktop Windows Manager in operating systems Windows allows attackers to increase their privileges.

The vulnerability of the Desktop Windows Manager in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Function Discovery Service (fdwsd.dll) on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Speech Runtime component in operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Runtime component in operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Brokering File System BFS in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Projected File System (ProjFS) file system in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Projected File System ProjFS in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the axios library, related to the failure to handle CRLF sequences in HTTP headers, allows attackers to bypass existing security mechanisms.

The vulnerability of the axios library is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms by sending specially crafted HTTP requests...

The vulnerability of Windows Defender’s antivirus protection allows attackers to increase their privileges.

The vulnerability of Windows Defender’s antivirus protection for Windows operating systems is related to deficiencies in the access control mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the OpenShift Update Service, a service for updating corporate platform Red Hat OpenShift Container Platform, allows attackers to increase their privileges.

The vulnerability of the OpenShift Update Service, a component of the Red Hat OpenShift Container Platform corporate platform, is related to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to add a new user with any arbitrary UID and gain...

The vulnerability of the Gimp image processing library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Flare file-sharing platform, related to bypassing authentication using a user-controlled key, allows attackers to influence the confidentiality of protected information.

The vulnerability of the Flare file-sharing platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to influence the confidentiality of the protected information...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the name parameter. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by sending a...

The vulnerability of the Synology SSL VPN Client lies in the use of files and directories accessible to external parties, allowing a hacker to gain access to protected information.

The vulnerability of the Synology SSL VPN Client lies in the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of the retrieveById() function in the Laravel Passport OAuth2 server implementation allows a hacker to gain unauthorized access to protected information.

The vulnerability of the retrieveById function in the Laravel Passport OAuth2 server implementation is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Gimp image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Gimp image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router’s microprogramming software is related to buffer overflow in the stack when processing the customerror parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the /user.asp...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router’s microprogramming software lies in the copying of buffers without checking the size of input data when processing the id parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request to the final destination...

Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation software, related to memory usage after it is released, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation software is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Server Update Service WSUS for Windows operating systems relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the trusted execution environment for Virtualization-Based Security (VBS) operating systems in Windows allows attackers to circumvent security restrictions.

The vulnerability of the trusted execution environment for Windows-based Virtualization-Based Security VBS operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially crafted GET request to the /urlmember.asp endpoint...