The vulnerability of the Flare file-sharing platform, related to bypassing authentication using a user-controlled key, allows attackers to escalate their privileges.

The vulnerability of the Flare file-sharing platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

The vulnerability of the Shell command shell in Windows operating systems allows attackers to bypass security restrictions.

The vulnerability of the Shell command shell in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent security restrictions remotely...

The vulnerability of the Simple Search and Discovery Protocol (SSDP) service in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Simple Search and Discovery Protocol SSDP service in the Windows operating system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Simple Search and Discovery Protocol (SSDP) service for Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Simple Search and Discovery Protocol SSDP service for Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the user interface of Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the user interface UI of Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Gimp image processing library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems lies in the fact that operations are performed outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Function Discovery Service (fdwsd.dll) on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the user interface of Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of Windows operating system user interfaces is related to synchronization errors when using common resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the print spooler daemon on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue handler is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of BitLocker’s data protection function in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of BitLocker’s data protection function in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the NFS module in the network monitoring system LibreNMS allows a intruder to execute arbitrary code.

The vulnerability of the nfsen module in the LibreNMS network monitoring system is related to incorrect path name restrictions when processing the nfsen parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted PHP file...

The vulnerability of the Windows Ancillary Function Driver for WinSock operating system allows attackers to increase their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft Excel spreadsheet editors, related to memory usage after it is released, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft Excel spreadsheet editors is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the insufficient validation of requests on the server side, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability in the implementation of the system call ioctl of the MxGeneralIo utility allows a attacker to escalate their privileges and cause a service failure.

The vulnerability in the implementation of the ioctl utility MxGeneralIo is related to an open IOCTL with insufficient access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges and cause service failures...

The vulnerability of the Gimp image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Gimp image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Gimp image processing library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the PID parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request to the /trace.asp endpoin...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Projected File System (ProjFS) file system in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Projected File System ProjFS in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the biometric authentication function of the Windows Hello operating system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the biometric authentication function of the Windows Hello operating system lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the User Interface Core component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the User Interface Core component in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to access control errors, allows a perpetrator to disclose protected information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to access control errors. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of Microsoft Excel spreadsheet editors within Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the IBM Langflow Desktop software for visual AI development lies in its deserialization mechanism flaws, allowing attackers to execute arbitrary code.

The vulnerability of IBM Langflow Desktop, a software for visual development of AI agents, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the Synology SSL VPN Client lies in the storage of passwords in an unencrypted form, which allows a hacker to intercept VPN traffic during user interactions.

The vulnerability of the Synology SSL VPN Client relates to the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating remotely, to intercept VPN traffic during interactions with users...

The vulnerability of the Universal Plug and Play (UPnP) Device Host Service in Windows operating systems allows a hacker to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP Device Host Service in Windows operating systems is related to unreliable pointer reassignments. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data when processing the id parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET reques...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the name parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the final destination...

The vulnerability of the Shell command shell in Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the Shell command shell in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the encryption mechanism for flash memory (XTS-AES with pseudo-rounds) in the ESP32-C5 chip allows a hacker to recover the AES keys.

The vulnerability of the XTS-AES encryption mechanism with pseudo-rounds on the ESP32-C5 chip is related to the lack of protection for service data. Exploiting this vulnerability allows a hacker to recover the AES keys...

The vulnerability of the Desktop Windows Manager in operating systems Windows allows attackers to increase their privileges.

The vulnerability of the Desktop Windows Manager in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Redirected Drive Buffering System (RDBS) allows a perpetrator to cause a service failure.

The vulnerability of the Redirected Drive Buffering System RDBS is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.

The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise, related to the possibility of exploiting memory after release, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerabilities of the jvp_string_append() and jvp_string_copy_replace_bad() functions, which are utilities for processing JSON files in jq, allow a malicious actor to cause service interruptions.

The vulnerabilities of the jvpstringappend and jvpstringcopyreplacebad functions, which are used to process JSON files in jq, are related to integer overflow. Exploiting these vulnerabilities could allow an attacker to cause a service failure by sending a specially crafted request...

The vulnerability of the LibSoup HTTP server access library, related to the disclosure of information during data transmission, allows attackers to gain unauthorized access to protected information.

The vulnerability of the LibSoup library for HTTP servers relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the os.path.expandvars() function in the Python interpreter allows a hacker to trigger a service failure.

The vulnerability of the os.path.expandvars function in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the DataHandler component in the Python programming language interpreter allows a attacker to compromise the integrity of the protected information.

The vulnerability of the DataHandler component in the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition (EE) involves improper authorization, allowing an intruder to gain read and edit access to data.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain read and edit access to data...

The vulnerability of the Comindware Platform for business process management lies in the incorrect limitation of the path name to the restricted access catalog, allowing a hacker to execute arbitrary code.

The vulnerability of the Comindware Platform for business process management is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Crypt::NaCl::Sodium library, related to integer overflow, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Crypt::NaCl::Sodium library is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability in the script/cgi-bin/wireless.cgi of the Wavlink WL-WN579A3 router software, which allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the Emby Server, a management and multimedia transmission server, relates to the lack of a password recovery mechanism, allowing attackers to gain full access to the system.

The vulnerability of the Emby Server, a management and multimedia transmission server, is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to gain full access to the system remotely...

The vulnerability of Novakon P Series human-machine interface programming software lies in the lack of authentication procedures, allowing attackers to gain access to the upload and download of arbitrary files.

The vulnerability of Novakon P Series human-machine interface programming software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to the ability to download and save any arbitrary files...

The vulnerability of the Gogs self-managed Git repository creation software lies in its insufficient verification of data authenticity, allowing a violator to re-archive LFS objects.

The vulnerability of the Gogs self-managed Git repository creation software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-archive LFS objects...