92434 matches found
The vulnerability of the Omnibox address bar in the Google Chrome browser on iOS operating systems allows a hacker to replace the user interface.
The vulnerability of the Omnibox address bar in the Google Chrome browser for iOS operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of the Synology-chat module of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.
The vulnerability of the Synology-chat module of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
The vulnerability in the implementation of IOCTL commands in Qualcomm’s embedded software allows a hacker to damage memory.
The vulnerability of the IOCTL command implementation in Qualcomm’s embedded software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to damage the memory...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to cause memory corruption.
The vulnerability of embedded software developed by Qualcomm relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause damage to the memory...
The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.
The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to bypass existing security mechanisms...
The vulnerability of the collectConfigEnvVars() function in the OpenClaw AI agent (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary code.
The vulnerability of the collectConfigEnvVars function in the OpenClaw AI agent previously known as ClawdBot or MoltBot is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the Google Chrome browser’s user interface allows a perpetrator to gain unauthorized access to the rendering process and perform a substitution of the user interface.
The vulnerability of Google Chrome’s user interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the rendering process and replace the user interface by sending a speciall...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.
The vulnerability of the Google Chrome browser’s Media component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTML page...
The vulnerability of the PDFium component in the Google Chrome browser allows a perpetrator to execute a brute-force attack.
The vulnerability of the PDFium component in the Google Chrome browser is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack remotely...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) is related to deficiencies in the authentication process, allowing attackers to bypass existing security mechanisms.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to deficiencies in the authorization process when processing the parameter groupPolicy=allowlist. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of the sigd_send() function in Linux operating system kernels, which allows a hacker to trigger a service failure
The vulnerability of the sigdsend function in Linux operating system kernels is related to unreliable pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the src/infra/archive.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to write arbitrary files.
The vulnerability in the src/infra/archive.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to write arbitrary files...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from the failure to take measures to neutralize special elements, allowing the intruder to execute arbitrary commands.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to cause memory corruption.
The vulnerability of embedded software developed by Qualcomm relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause damage to the memory...
The vulnerability of the N8n automation platform, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the N8n automation platform for work processes is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the vvdec_push_data2() function in the HEIF File Parser component, a decoder and file format parser library, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the vvdecpushdata2 function in the HEIF File Parser component, a decoder and file format parser library, is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
The vulnerability of the JavaScript library for creating dynamic and interactive Billboard.js charts lies in the uncontrolled modification of prototype attributes of objects. This allows attackers to execute arbitrary code and cause service failures.
The vulnerability of the JavaScript library for creating dynamic and interactive Billboard.js charts is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service interruptions...
The vulnerability of the axios library, related to insufficient validation of requests on the server side when processing NO_PROXY rules, allows attackers to execute SSRF attacks.
The vulnerability of the axios library is related to insufficient validation of requests on the server side when processing NOPROXY rules. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...
The vulnerability of the software interface of the tool for creating and deploying agents and working processes in Langflow allows a perpetrator to execute arbitrary code.
The vulnerability of the software interface of the tool for creating and deploying agents and processes of Langflow is related to the absence of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Omnibox address bar in the Google Chrome browser on iOS operating systems allows a hacker to replace the content in the URL bar.
The vulnerability of the Omnibox address bar in Google Chrome browsers on iOS operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace the content in the URL bar using a specially created domain name...
The vulnerability of the Audio component in the Google Chrome browser allows a hacker to bypass the sandboxing protection mechanism.
The vulnerability of the Audio component in Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing protection mechanisms...
The vulnerability of the PAN-OS operating system, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the PAN-OS operating system is related to the disclosure of system data by unauthorized parties within the controlled area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the allowlist mode of the AI agent OpenClaw (formerly ClawdBot or MoltBot) allows a violator to execute any code they desire.
The vulnerability of the allowlist mode of the AI agent OpenClaw previously – ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the interaction platform between users and large language models like ParisNeo/lollms, related to incorrect session duration, allows attackers to gain access to user accounts.
The vulnerability of the ParisNeo/lollms platform for user interaction with large language models is related to an incorrect session duration. Exploiting this vulnerability can allow a remote attacker to gain access to the user’s account...
The vulnerability of the system for monitoring and analyzing physical activity and health status of FITSTATS Technologies AthleteMonitoring, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site attacks.
The vulnerability of the FITSTATS Technologies AthleteMonitoring system for monitoring and analyzing physical activity and health status is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site...
The vulnerability of the Maxthon3 browser lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary code.
The vulnerability of the Maxthon3 browser is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the /admin/edit-user.php web application in the PHPGurukul Small CRM customer relationship management system allows a attacker to bypass existing security restrictions.
The vulnerability of the /admin/edit-user.php web application in the PHPGurukul Small CRM customer relationship management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
The vulnerability of the allowlist mode of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a violator to bypass existing security mechanisms.
The vulnerability of the allowlist mode of the AI agent OpenClaw formerly ClawdBot or MoltBot is related to the use of an incomplete black list. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of the g_buffered_input_stream_peek() function within the GLib library allows a hacker to cause a service failure.
The vulnerability of the gbufferedinputstreampeek function in the GLib library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the Track::load() function in the stsz/stts component of the file format decoding and encoding library libheif allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Track::load function in the stsz/stts component of the file format decoding and encoding library libheif is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protect...
The vulnerability of the OpenEMR system for managing medical documents, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary codes.
The vulnerability of the OpenEMR system for medical documentation is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...
The vulnerability of the OpenEMR system for managing medical documents, related to the failure to take measures to neutralize certain elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the OpenEMR system for medical documentation lies in the lack of measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the UltraJSON programming language package in Python, related to integer overflow, allows attackers to trigger a service failure.
The vulnerability of the UltraJSON programming language package in Python is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Python programming language-based UltraJSON package lies in the lack of memory release after the effective lifespan, which allows a malicious actor to trigger a service failure.
The vulnerability of the Python programming language-based UltraJSON package is related to the lack of memory release after the effective lifespan of the package. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of Google Chrome’s WebCodecs interface allows attackers to disclose protected information.
The vulnerability of Google Chrome’s WebCodecs interface is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information by sending a specially crafted HTML page...
The vulnerability of the Downloads component of the Google Chrome browser allows a hacker to bypass existing security restrictions and replace the user interface.
The vulnerability of the Downloads component in the Google Chrome browser is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures and replace the user interface by sending a specially...
The vulnerability of the Downloads component of the Google Chrome browser for Windows operating systems allows a hacker to circumvent existing security restrictions.
The vulnerability of the Downloads component of the Google Chrome browser for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending a specially crafted HTML page...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) relates to synchronization errors when using a shared resource, allowing a hacker to execute arbitrary commands.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a hacker to execute arbitrary commands...
The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary commands.
The vulnerability in the src/daemon/schtasks.ts script of the AI agent OpenClaw previously known as ClawdBot or MoltBot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...
The vulnerability of embedded software developed by Qualcomm, related to buffer overflows in the stack, allows attackers to cause memory corruption.
The vulnerability of embedded software developed for Qualcomm chips is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause memory corruption...
The vulnerability of the framework for creating applications based on the combination of language models (LLMs) like LangChain arises from the lack of protective measures for SQL query structures. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the framework for creating applications based on the combination of language models LLMs like LangChain relates to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected informatio...
The vulnerability of the Libraesva ESG software, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of the Libraesva ESG software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
The vulnerability of the Linkwarden bookmark management server relates to external control of file names or paths, allowing attackers to disclose protected information.
The vulnerability of the Linkwarden bookmark management server relates to external control of file names or paths. Exploiting this vulnerability could allow attackers to disclose protected information...
The vulnerability of the Avahi service detection system in local networks, related to uncontrolled recursion, allows a hacker to trigger a service failure.
The vulnerability of the Avahi service detection system in local networks is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the OpenEMR system for managing medical documents, related to incorrect encoding or filtering of output data, allows a malicious individual to read arbitrary files.
The vulnerability of the OpenEMR system for medical documentation is related to incorrect encoding or masking of output data. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...
The vulnerability of the protectWhitespace() function in the FTP-client library basic-ftp of the Node.js software platform allows a hacker to execute arbitrary commands.
The vulnerability of the protectWhitespace function in the FTP-client library of the Node.js software platform’s basic-ftp library is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary commands.
The vulnerability of the tools.exec.safeBins configuration in the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...
The vulnerability of the formCrossBandSwitch function in the /goform/formCrossBandSwitch module of the Belkin F9K1015 router’s microprogramming system, which allows a intruder to trigger a service failure.
The vulnerability of the formCrossBandSwitch function in the /goform/formCrossBandSwitch module of the Belkin F9K1015 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of embedded Qualcomm software is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of embedded software developed by Qualcomm, related to the possibility of using memory after release, allows a hacker to cause memory corruption.
The vulnerability of embedded software developed by Qualcomm relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause damage to the memory...