The vulnerability of the Endpoint Manager Mobile app for managing the lifecycle of mobile devices and mobile applications (formerly known as MobileIron Core) arises from the lack of measures taken to neutralize specific elements. This allows a malicious user to execute arbitrary commands on behalf of the root user.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a...

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in the ability to read data beyond the allowed range of memory, allowing an attacker to disclose protected information.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in the ability to read data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Vulnerability of the Graphics component: Canvas2D in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows attackers to trigger a service failure.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect handling of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the ngx_http_charset_module module in NGINX Plus and NGINX Open Source web servers allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...

The vulnerability of the Review Match Groups Application component of the SAP Master Data Governance data management platform allows a perpetrator to enhance their privileges.

The vulnerability of the “Review Match Groups Application” component in the SAP Master Data Governance data management platform is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The server’s vulnerability regarding the collection, storage, and display of performance data for SAP systems. The SAP Wily Introscope Enterprise Manager (EM) is vulnerable due to insufficient protection of the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the server for collecting, storing, and displaying performance data in SAP SAP Wily Introscope Enterprise Manager is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

The vulnerability of the SINEC INS network infrastructure management software, related to errors in privilege management, allows a perpetrator to escalate their privileges.

The vulnerability of the SINEC INS network infrastructure management software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the SAP Fiori business application deployment panel allows a hacker to gain unauthorized access to the user account.

The vulnerability of the SAP Fiori business application design platform’s startup panel is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the user account...

The vulnerability of the alcorpci_sdmmc_drv_probe() function in the mmc/host/alcor.c driver module for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the alcorpcisdmmcdrvprobe function in the mmc/host/alcor.c driver module for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qcom_add_sysmon_subdev() function in the drivers/remoteproc/qcom_sysmon.c module of the Linux kernel subsystem allows a hacker to cause a service failure.

The vulnerability of the qcomaddsysmonsubdev function in the drivers/remoteproc/qcomsysmon.c module of the Linux kernel subsystem for remote processors is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the publickey_response_success() function in the libssh2 library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the authz-casdoor plugin for the Apache APISIX cloud-based API gateway allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the authz-casdoor plugin for the Apache APISIX cloud API gateway is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in the ability to read data beyond the allowed range of memory, allowing an attacker to disclose confidential information.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose confidential information by opening the malicious file...

The vulnerability of the Azure Active Directory identity management and protection platform, related to authentication process flaws, allows attackers to escalate their privileges.

The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Vulnerability of the Graphics component: Canvas2D in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows attackers to trigger a service failure.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect handling of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its data source confirmation mechanism’s deficiencies, which allows attackers to replace the sender of an email message.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability could allow a malicious actor to replace the sender of an email message...

The vulnerability of the endpoint /api/sftp/uploadFiles of the SINEC INS network infrastructure management software allows a attacker to execute arbitrary commands with system user privileges.

The vulnerability of the endpoint /api/sftp/uploadFiles in the SINEC INS network management software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with system user privileges...

The vulnerability of the SAP S/4HANA Finance financial management software lies in the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to confidential information.

The vulnerability of the SAP S/4HANA Finance financial management software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to confidential information...

The vulnerability of the uvc gpio_parse() function in the drivers/media/usb/uvc/uvc_driver.c file of the multimedia device driver for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the uvc gpioparse function in the drivers/media/usb/uvc/uvcdriver.c file of the Linux operating system’s multimedia device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rtl92cu_tx_fill_desc() function in the drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c driver module of the Realtek wireless communication adapter driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the rtl92cutxfilldesc function in the drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c module of the Realtek wireless adapter driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access protected...

The vulnerability of the `alloc_choose_arg_map()` function in the `net/ceph/osdmap.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the decode_dlta() function in the libavcodec/rasc.c file of the RASC video decoder from the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the decodedlta function in the libavcodec/rasc.c file of the RASC video decoder from the FFmpeg multimedia library is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the JetBrains Hub account management software lies in errors in the code of the pseudo-random number generator used for generating host keys. This allows a hacker to gain full control over the application.

The vulnerability of the JetBrains Hub account management software is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application...

The vulnerability of the cas-auth plugin for the Apache APISIX cloud API gateway allows a attacker to perform a CSRF attack.

The vulnerability of the cas-auth plugin for the Apache APISIX cloud API lies in the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the forward-auth plugin for the Apache APISIX cloud API gateway allows attackers to perform spoofing attacks.

The vulnerability of the forward-auth plugin for the Apache APISIX cloud API gateway is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the Remote Function Call module in the infrastructure for extracting and replicating SAP Operational Data Provisioning Data Replication API (ODP-RFC) allows a perpetrator to disclose protected information or cause service interruptions.

The vulnerability of the Remote Function Call module in the SAP Operational Data Provisioning Data Replication API ODP-RFC infrastructure is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

The vulnerability of the DefaultLdapRealm class in the Apache Shiro framework allows a hacker to bypass security restrictions and perform data substitution.

The vulnerability of the DefaultLdapRealm class in the Apache Shiro framework is related to the failure to eliminate special elements in LDAP requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform data substitution...

The vulnerability in the function lt9611_connector_init() of the module drivers/gpu/drm/bridge/lontium-lt961.c, a driver for the Direct Rendering Infrastructure (DRI) of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the lt9611connectorinit function in the drivers/gpu/drm/bridge/lontium-lt961.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `pp_set_fine_grain_clk_vol()` function in the driver/gpu/drm/amd/pm/powerplay/amd_powerplay.c file of the Direct Rendering Infrastructure (DRI) graphics card driver for Linux kernel is exploited by attackers to cause system failures.

The vulnerability of the ppsetfinegrainclkvol function in the driver/gpu/drm/amd/pm/powerplay/amdpowerplay.c file of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability...

The vulnerability in the embedded software based on Linux for industrial computers and Moxa controllers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Linux-based software on Moxa industrial computers and controllers is related to the absence of the necessary encryption step. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allow attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to dependencies on behaviors that are uncertain for each type of implementation. Exploiting this vulnerability allows a malicious actor to compromise...

The vulnerability of the drm_copy_field() function in the drivers/gpu/drm/drm_ioctl.c driver of the Direct Rendering Infrastructure (DRI) kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmcopyfield function in the drivers/gpu/drm/drmioctl.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_prog_attach() function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the bpfprogattach function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to trigger a servic...

The vulnerability of the BIND DNS server, related to resource release errors, allows a hacker to cause a service failure.

The vulnerability of the BIND DNS server is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the rrd_substitute_host_query_data() function in the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the rrdsubstitutehostquerydata function in the Cacti network monitoring software is related to the failure to take measures to eliminate special elements in the output data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Business Chat function in Microsoft 365 Copilot allows attackers to escalate their privileges.

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the DNS request processing mechanism in the BIND DNS server’s named daemon allows a attacker to cause a service failure.

The vulnerability of the DNS request processing mechanism in the BIND DNS server’s named daemon is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Microsoft Exchange Online for corporate email services, related to the lack of authentication, allows attackers to escalate their privileges.

The vulnerability of Microsoft Exchange Online corporate email service is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the JetBrains YouTrack project management tool and the JetBrains Hub account management software is related to the lack of authentication for a critical function. This allows attackers to bypass security restrictions, gain unauthorized access to protected information, and increase their privileges.

The vulnerability of the JetBrains YouTrack project management tool and the JetBrains Hub account management software is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass security restrictions, gain unauthorized access to...

The vulnerability of the skbuff network component in Linux operating system kernels allows attackers to increase their privileges.

The vulnerability of the skbuff network component in Linux operating systems is related to insufficient resource control during its existence. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant, related to the lack of authentication for a critical function, allows a perpetrator to disclose confidential information.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...

The vulnerability of the Core component of the Oracle Identity Manager Connector, which allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Core component of the Oracle Identity Manager Connector relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the ADPatch component of the Oracle Applications management and support system allows a hacker to gain full access to the device. This component is part of the Oracle E-Business Suite, which is used for automating business processes in enterprises.

The vulnerability of the ADPatch component in the Oracle Application Management and Support System, which is part of the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full access to the device remotely...

The vulnerability of the Platform component for data analysis and management in Oracle Financial Services Analytical Applications Infrastructure allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the GSS-API token processing module of the TKEY authentication mechanism’s DNS server BIND allows a perpetrator to cause a service failure.

The vulnerability of the GSS-API token processing module of the TKEY authentication mechanism’s DNS server BIND relates to the absence of a reference to an active, allocated resource. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the User Interface component of the Oracle Financial Services Transaction Filtering system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Oracle Financial Services Transaction Filtering’s User Interface component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through HTTP requests...

The vulnerability of the User Interface component of the automation tool for checking financial organization customers, Oracle Financial Services Customer Screening, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the User Interface component of the Oracle Financial Services Customer Screening software lies in an incorrect authentication procedure. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the Core component of the Oracle Identity Manager Connector, which allows a perpetrator to trigger a service failure

The vulnerability of the Core component of the Oracle Identity Manager Connector, a software solution for managing user accounts and access rights, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of Component ADF Faces framework for accelerating the development of Oracle Application Development Framework (ADF) allows a attacker to gain full access to the device.

The vulnerability of the ADF Faces framework, which is used for accelerating the development of corporate applications, is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain full access to the device...