95883 matches found
The vulnerability of the Windows Microsoft PC Manager software, which is used for maintenance, cleaning, and security operations, allows a malicious individual to escalate their privileges.
The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to lack of access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the virtual graphics adapter VMSVGA of the Oracle VM VirtualBox software allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to errors in information processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability in the virtual graphics adapter VMSVGA of the Oracle VM VirtualBox software allows a attacker to trigger a service failure.
The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to deficiencies in access control. This vulnerability allows a malicious actor to trigger a service failure...
The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...
The vulnerability of the Adobe Experience Manager content and media management system, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability in the JavaScript Engine component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.
The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the ip6gre_header() function in the net/ipv6/ip6_gre.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to cause a service failure.
The vulnerability of the ip6greheader function in the net/ipv6/ip6gre.c module of the Linux operating system’s IPv6 kernel implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Docker API interface of the container management platform Portainer allows a attacker to enhance their privileges and execute arbitrary code.
The vulnerability of the Docker API for container management platforms, such as Portainer, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code remotely...
The vulnerability of the setSystemAdmin() function in the embedded web server of the D-Link DCS-933L microprogramming software for IP cameras allows a intruder to execute arbitrary commands.
The vulnerability of the setSystemAdmin function in the embedded web server of the D-Link DCS-933L microprogramming software for IP cameras is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
Vulnerability of the fromGstDhcpSetSer() function (/goform/GstDhcpSetSer): This function in the httpd daemon’s microprogrammed router software Tenda F453 allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the fromGstDhcpSetSer function /goform/GstDhcpSetSer in the Tenda F453 HTTP daemon software is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Naumen Service Management Platform in automating IT and business processes arises from the lack of authentication, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Naumen Service Management Platform for automating IT and business processes is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the virtual graphics adapter VMSVGA of the Oracle VM VirtualBox software allows a malicious individual to gain access to read, modify, or delete data.
The vulnerability of the virtual graphics adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data...
The vulnerability of the command-line interface of FortiOS operating systems and the proxy server used for protection against Internet attacks, FortiProxy, allows a perpetrator to execute arbitrary code.
The vulnerability of the command-line interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to deficiencies in the mechanism for assigning internal resource access levels for debugging purposes. Exploiting this vulnerability allo...
The vulnerability of the IPL-decoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the IPL-decoder in the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a system failure...
Vulnerability of the ngx_http_v3_module in NGINX HTTP servers; NGINX Open Source platform for application monitoring and management; NGINX Ingress Controller, NGINX Gateway Fabric server controller; NGINX Instance Manager automation platform. These tools allow attackers to bypass security restrictions, execute arbitrary code, or cause service failures.
The vulnerability of the ngxhttpv3module in the NGINX HTTP server, the NGINX Ingress Controller for application monitoring and management, the NGINX Gateway Fabric for web server controllers, and the NGINX Instance Manager for automation platforms are related to the ability to exploit memory afte...
The vulnerability of the integrated environment for managing the engineering lifecycle of IBM Engineering Lifecycle Management Jazz Foundation, related to the use of dangerous methods or functions, allows a perpetrator to execute arbitrary code.
The vulnerability of the integrated engineering lifecycle management environment of IBM Engineering Lifecycle Management Jazz Foundation lies in the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the fromqossetting() function (/goform/qossetting) in the Tenda F453 router’s microprogramming software allows a attacker to execute arbitrary code or cause service failures.
The vulnerability of the fromqossetting function /goform/qossetting of the Tenda F453 router’s microprogramming system lies in the fact that the operation results are stored outside the buffer in the parameter qos’s memory. Exploiting this vulnerability allows a remote attacker to execute arbitra...
Vulnerability of the frmL7ProtForm() function (/goform/L7Prot): This function in the httpd daemon of the microprogrammed router Tenda F453 allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the frmL7ProtForm function /goform/L7Prot in the httpd daemon of the microprogramming router Tenda F453 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause...
Vulnerability of the fromSafeUrlFilter() function (/goform/SafeUrlFilter) in the httpd daemon’s microprogramming router Tenda F453, allowing a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the fromSafeUrlFilter function /goform/SafeUrlFilter in the Tenda F453 router microprogramming software is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures remotely...
The vulnerability of the editUser() and updateUserRights() functions in the phpMyFAQ web application, which allows a violator to increase their privileges
The vulnerability of the editUser and updateUserRights functions in the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to an incorrect definition of the link before accessing a file. This allows attackers to exploit their privileges.
The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...
The vulnerability of the software interface of the Fortinet FortiPortal security analysis and management tool allows a attacker to gain unauthorized access to protected information through specially crafted HTTP requests.
The vulnerability of the software interface of the Fortinet FortiPortal security analysis and management tool is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through specially crafte...
Vulnerability of the Audio/Video component: The GMP browser components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow a hacker to trigger a service failure.
Vulnerability of the Audio/Video component: The GMP browsers Mozilla Firefox and Firefox ESR, as well as the email client Thunderbird, are vulnerable due to insufficient checking of unusual or exceptional states. Exploitation of this vulnerability can allow a remote attacker to cause service...
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.
The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability affects the Audio/Video components of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing an attacker to execute arbitrary code.
The vulnerability of the Audio/Video components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the Layout component: Text and Fonts of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows a hacker to cause a service failure.
The vulnerability of the Layout component: Texts and fonts in Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the Tracing component in Google Chrome browser allows a hacker to trigger a service failure.
The vulnerability of the Tracing component in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
Vulnerability of the Networking component: Mozilla Firefox, Firefox ESR, and Thunderbird email client’s HTTP browsers allow attackers to bypass existing security restrictions.
The vulnerability of the Networking component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird rely on bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...
The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations lies in the absence of an authentication process that would allow a malicious individual to escalate their privileges.
The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to the absence of an authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...
Vulnerability of .NET, ASP.NET, and Microsoft Visual Studio software platforms, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the Content Credentials SDK libraries arises from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the Content Credentials SDK libraries arises from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...
The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of Content Credentials SDK library functions is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Adobe Experience Manager content and media management system, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the rds_message_purge function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rdsmessagepurge function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and Thunderbird email client’s Cocoa browser engine, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird have vulnerabilities related to information processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the decorateContainerCreationOperation() function in the Portainer container management platform allows a attacker to gain access to and modify data.
The vulnerability of the decorateContainerCreationOperation function in the Portainer container management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to read and modify data remotely...
The vulnerability of the Guest mode of the Google Chrome browser, which allows attackers to perform spoofing attacks
The vulnerability of the Guest mode in Google Chrome browser is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...
The vulnerability of the software for detecting vulnerabilities and errors in PT Application Inspector, due to the lack of authentication, allows attackers to increase their privileges.
The vulnerability of the PT Application Inspector software lies in its lack of authentication. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...
The vulnerability of the ast_for_if_stmt() function in the CPython interpreter, related to pointer arithmetic errors, allows attackers to trigger a service failure.
The vulnerability of the astforifstmt function in the CPython interpreter is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App, related to the disclosure of information through registration files, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
The vulnerability of the Portainer container management platform, related to the lack of protection for service data, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the Portainer container management platform lies in the lack of protection for service data when processing symbolic links. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of Docker Swarm’s orchestration tool, the Portainer container management platform, allows a hacker to gain unauthorized access to protected information.
The vulnerability of Docker Swarm’s orchestration tool, the Portainer container management platform, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Vulnerability of the fromP2pListFilter() function in the httpd daemon of the microprogrammed routing device Tenda F453, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the fromP2pListFilter function in the Tenda F453 router microprogramming software occurs due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
Vulnerability of the formWrlsafeset() function (/goform/AdvSetWrlsafeset): This function in the httpd daemon’s microprogramming software for Tenda F453 allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the formWrlsafeset function /goform/AdvSetWrlsafeset in the httpd daemon’s microprogramming router Tenda F453 is related to the issue of operations going beyond the buffer boundaries in memory when processing the mitssidindex parameter. Exploiting this vulnerability could all...
The vulnerability of the SimpleTrustManagerFactory component in the TSL client framework for network application development, servers, and Netty protocol clients allows a attacker to carry out a type of “man-in-the-middle” attack.
The vulnerability of the SimpleTrustManagerFactory component in the TSL client of the networking application development framework for Netty involves errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle”...
The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows attackers to escalate their privileges.
The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...