The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function, allowing the attacker to execute arbitrary code.

The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function when processing the username parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...

The vulnerability of the CUPS component on macOS operating systems, which allows a hacker to obtain root privileges

The vulnerability of the CUPS component in macOS systems arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain root privileges a state of dominance...

The vulnerability of the JetBrains Hub account management software, related to bypassing authentication through spoofing, allows attackers to circumvent existing security mechanisms.

The vulnerability of the JetBrains Hub account management software relates to the ability to bypass authentication through phising techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures remotely...

The vulnerability of the validateBindMounts() function in the AI agent OpenClaw (formerly ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.

The vulnerability of the validateBindMounts function in the AI agent OpenClaw formerly ClawdBot or MoltBot is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a attacker to bypass existing security mechanisms...

The vulnerability of the Dell PowerScale OneFS operating system, related to deficiencies in the error reporting mechanism, allows a perpetrator to disclose protected information.

The vulnerability of the Dell PowerScale OneFS operating system is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow attackers to disclose sensitive information that should be protected...

The vulnerability of the TM2 Monitoring platform, related to deficiencies in the authentication process, allows attackers to disclose protected information.

The vulnerability of the TM2 Monitoring platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflows in the stack when processing parameters such as name, en, userid, shibiename, time, act, log, and rpri. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a...

The vulnerability in the script/cgi-bin/wireless.cgi of the WAVLINK WL-WN578W2 signal booster software allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/wireless.cgi microprogramming system of the WAVLINK WL-WN578W2 amplifier is related to the lack of measures taken at the control level for data cleaning. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...

The vulnerability of the Oracle Cloud Infrastructure Designer and Visualization Toolkit (OKIT) software allows a hacker to compromise the system.

The vulnerability of the Oracle Cloud Infrastructure Designer and Visualization Toolkit OKIT software relates to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to compromise the system remotely...

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems, related to access control errors, allows attackers to execute arbitrary code.

The vulnerability of Veeam Backup & Replication’s protection mechanisms for cloud, virtual, and physical systems stems from access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the NeuVector Enforcer security container arises from the lack of data cleaning at the management level, allowing a perpetrator to execute arbitrary code and trigger a service failure.

The vulnerability of the NeuVector Enforcer security container is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and trigger a service failure...

The vulnerability of the Liebert UNITY communication and device management platform, as well as the Liebert RDU101 communication card, stems from buffer overflows in the stack. This allows an attacker to execute arbitrary code.

The vulnerability of the Liebert UNITY communication and device management platform, as well as the Liebert RDU101 communication card, is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Egress Packet Network Interface (EPNI) allows attackers to cause service interruptions on Cisco IOS XR operating systems.

The vulnerability of the Egress Packet Network Interface EPNI in Cisco IOS XR operating systems is related to improper cleaning during exception handling. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the command-line interface (CLI) of Cisco IOS XR operating systems allows attackers to enhance their privileges and bypass existing security mechanisms.

The vulnerability of the command-line interface CLI of Cisco IOS XR operating systems is related to deficiencies in access control based on access control lists ACLs. Exploiting this vulnerability can allow attackers to enhance their privileges and bypass existing security mechanisms...

The vulnerability in the web interface of the Cisco Finesse software for controlling operator operations, as well as the web platform for generating reports in the Cisco Unified Intelligence Center, allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface of the Cisco Finesse software for operator management and the Cisco Unified Intelligence Center reporting web platform is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the multi-media library Ffmpeg, related to reading data beyond the buffer boundary in memory, allows a hacker to cause a service failure.

The vulnerability of the FFmpeg multimedia library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The software of Fortinet FortiSOAR Agent Communication Bridge is vulnerable due to incorrect path name restrictions for the restricted access directory. This allows attackers to gain read, modify, or delete access to data.

The vulnerability of the Fortinet FortiSOAR Agent Communication Bridge software is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to data...

The vulnerability of the FortiAnalyzer and FortiAnalyzer-BigData software tools for monitoring and analyzing security events arises from the lack of protective measures for the SQL query structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiAnalyzer and FortiAnalyzer-BigData security event monitoring and analysis software lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted netwo...

The vulnerability of the application programming interface (API) of FortiOS operating systems allows a perpetrator to trigger a crash in the HTTP daemon.

The vulnerability of the application programming interface API of FortiOS operating systems is related to the lack of checking for the return value. Exploiting this vulnerability allows a malicious actor to cause errors in the HTTP daemon by sending a specially crafted request...

The vulnerability of the command-line interface (CLI) of the Outlookproxy plugin on the cloud platform used for FortiDLP data protection, which allows a malicious actor to escalate their privileges.

The vulnerability of the command-line interface CLI of the Outlookproxy plugin on the cloud platform used for FortiDLP data protection is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to elevate their...

The vulnerability of the ASN.1 library Libtasn1, related to writing outside the buffer boundary, allows a attacker to trigger a service failure.

The vulnerability of the ASN.1 library Libtasn1 is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the poplib module in the Python programming language allows a hacker to execute arbitrary code.

The vulnerability of the poplib module, a programming language interpreter for Python, is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the imaplib module in the Python interpreter allows a hacker to execute arbitrary code.

The vulnerability of the imaplib module in the Python interpreter is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Protobuf data serialization protocol, related to uncontrolled recursion, allows attackers to cause service failures.

The vulnerability of the Protobuf data serialization protocol is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the amdgpu_virt_rlcg_reg_rw() function in the Linux operating system’s drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c kernel module allows a hacker to cause a service failure.

The vulnerability of the amdgpuvirtrlcgregrw function in the drivers/gpu/drm/amd/amdgpu/amdgpuvirt.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the libssh library, related to improper external management of file names or paths, allows a attacker to trigger a service failure.

The vulnerability of the libssh library is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the malware analysis tool Triage, related to uncontrolled resource consumption, allows a perpetrator to cause service failure.

The vulnerability of the malware analysis tool Triage is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the SSL/TLS WolfSSL library, related to errors in the certificate validation process, allows attackers to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SSL/TLS WolfSSL library is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the sprintf() function in the prog.cgi script of the D-Link DIR-882 wireless router allows a hacker to execute arbitrary commands.

The vulnerability of the sprintf function in the prog.cgi script of the D-Link DIR-882 wireless router software is related to the lack of measures taken to neutralize special elements during the processing of the IPAddress parameter. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the memfd_secret() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the memfdsecret function in the Linux operating system’s kernel relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the tcp_rcv_state_process() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tcprcvstateprocess function in the Linux operating system’s kernel is related to insufficient comparison. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `do_unregister_framebuffer()` function in the Linux operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the dounregisterframebuffer function in Linux kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a system failure or execute arbitrary code...

The vulnerability of the functions ah6_output_done() and ah6_output() in the Linux kernel’s net/ipv6/ah6.c file allows a attacker to cause a service failure.

The vulnerability of the functions ah6outputdone and ah6output in the Linux kernel’s net/ipv6/ah6.c file is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of NetworkManager’s software for managing network connections, related to improper storage of permissions, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NetworkManager software for managing network connections is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE involve redirecting URLs to unreliable websites, allowing attackers to perform cross-site scripting (XSS) attacks.

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the redirection of URLs to unreliable websites. Exploiting these vulnerabilities allows a malicious acto...

The vulnerability of the base64 module in the Python programming language allows a hacker to execute arbitrary code.

The vulnerability of the base64 module in the Python programming language is related to incorrect data type conversion. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the dst_dev_rcu() function in the sk_setup_caps() file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dstdevrcu function in the sksetupcaps file of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the do_unregister_framebuffer() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dounregisterframebuffer function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the graphical user interface (GUI) of the FortiSIEM security management system allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the graphical user interface GUI of the FortiSIEM security management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks by sending specially...

The vulnerability of the command-line interface (CLI) of the FortiClient for MAC protection tool allows a attacker to carry out the LaunchDaemon hijacking attack and execute arbitrary code or commands.

The vulnerability of the command-line interface CLI of the FortiClient for MAC security tool is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to carry out a LaunchDaemon hijacking attack and execute arbitrary code or...

The vulnerability of the graphical user interface (GUI) of the FortiVoice corporate telephony software allows a hacker to delete files.

The vulnerability of the graphical user interface GUI of the FortiVoice corporate telephony software is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete files by sending specially crafted HTTP or HTT...

The vulnerability of the cloud platform for data protection, FortiDLP, stems from insufficient protection of registration data, allowing attackers to disclose the protected information.

The vulnerability of the FortiDLP data protection cloud platform lies in the insufficient protection of registration data. Exploiting this vulnerability could allow attackers to disclose protected information by reusing the registration code...

The vulnerability of the SSL-VPN technology of the FortiOS operating system allows a hacker to gain unauthorized access to the device.

The vulnerability of the SSL-VPN technology for the FortiOS operating system is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device by reusing the SAML token...

The vulnerability in the mime.php script of the web client for open-source SquirrelMail allows attackers to execute XSS attacks.

The vulnerability in the mime.php script of the email web client for the open-source SquirrelMail framework exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of D-Link DI-8003 and DI-8003G router microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 and DI-8003G router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the wanping parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a...

The vulnerability of the TextEncoding component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the TextEncoding component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure by using a specially crafted HTML page, as a result of the...

The vulnerability of the Agents component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Agents component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the formSetRoute() function in D-Link DIR-513 router microprogramming software allows a hacker to cause memory corruption.

The vulnerability of the formSetRoute function in D-Link DIR-513 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...

The vulnerability of the special_keys() function in the src/netbeans.c file of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the specialkeys function in the src/netbeans.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...