95883 matches found
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
The vulnerability of Adobe Dreamweaver HTML editor lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Dreamweaver HTML editor stems from deficiencies in the authentication process, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Dreamweaver HTML editor is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability in the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe InCopy text creation and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages lies in insufficient input validation, allowing attackers to perform spoofing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
The vulnerability of the Updates Environment Management component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to execute arbitrary code.
The vulnerability of the Updates Environment Management component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows a hacker to execute arbitrary code by allowing the operation to escape out of the buffer in memory.
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Dreamweaver HTML editor lies in its dependence on a vulnerable external component, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Dreamweaver HTML editor is related to its dependence on a vulnerable external component. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the incorrect path name limitation of the directory, which allows an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
The vulnerability of the MFlash file-sharing platform, which stems from inconsistencies in responses to incoming requests, allows attackers to gain unauthorized access to protected information.
The vulnerability of the MFlash file-sharing platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Management Web Interface component of the PAN-OS operating system allows a hacker to bypass existing security restrictions and execute arbitrary code with root privileges.
The vulnerability of the Management Web Interface component of the PAN-OS operating system relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code with root...
The vulnerability of the Trend Micro Apex One antivirus software arises from an incorrect limitation on the path to the catalog, allowing a malicious actor to execute arbitrary code.
The vulnerability of the Trend Micro Apex One antivirus software is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability allows a hacker to execute arbitrary code...
The vulnerability of the CheckKeyTypes() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the CheckKeyTypes function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges and cause service...
The vulnerability of the __glXDisp_ChangeDrawableAttributes() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the glXDispChangeDrawableAttributes function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to cause service failures.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Kerberos protocol for Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Kerberos protocol for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Enterprise browsers’ components, Google Chrome and Microsoft Edge, allows attackers to enhance their privileges.
The vulnerability of the Enterprise browsers’ components in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through malicious network traffic...
The vulnerability of Google Chrome and Microsoft Edge web browser components allows attackers to bypass the sandboxing protection mechanisms.
The vulnerability of Google Chrome and Microsoft Edge web browsers’ Bluetooth components stems from the absence of a mechanism for verifying input data on the server side. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...
The vulnerability of the Windows Performance Monitor component of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the Windows Performance Monitor component of the Windows operating system relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems in relation to client machines is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the RuBackup backup system, related to insufficient resource capacity, allows a perpetrator to trigger a service failure.
The vulnerability of the RuBackup backup system is related to insufficient resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the RuBackup backup system, related to access control errors, allows a intruder to gain unauthorized access to confidential information.
The vulnerability of the RuBackup backup system is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information in the “Global Configuration” panel...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.
The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the SyncChangeCounter() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the SyncChangeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious...
The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.
The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client is related to the use of an untrusted network policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Bindings component (WebIDL) in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.
The vulnerability of the Bindings component WebIDL in browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.
The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to elevate their privileges.
The vulnerability of the Winlogon entry program in Windows operating systems is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Boot Manager (bootmgr) loader in Windows operating systems, which allows a hacker to circumvent security restrictions
The vulnerability of the Windows Boot Manager bootmgr loader in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...
The vulnerability in the API for working with foldable devices allows a hacker to bypass existing security mechanisms. This vulnerability is present in the Foldable API of Google Chrome and Microsoft Edge browsers.
The vulnerability of the API for working with foldable devices, such as Google Chrome and Microsoft Edge browsers’ APIs, is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...
The vulnerability of Google Chrome and Microsoft Edge web browsers allows attackers to bypass existing security measures.
The vulnerability of Google Chrome and Microsoft Edge browser-based services is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through the created HTML pages...
The vulnerability of the Windows Graphics Component, which allows a hacker to execute arbitrary code on Windows operating systems
The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the RuBackup backup system, related to access control errors, allows a perpetrator to gain unauthorized access to edit information.
The vulnerability of the RuBackup backup system is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Local File Servers” panel...
The vulnerability of the Braille support module of the text-to-speech application for blind and visually impaired users, allowing the intruder to enhance their privileges
The vulnerability of the Braille support module in the text-to-speech application for blind and visually impaired users like Narrator is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the parse_version_item() function in the RuBackup backup system allows a perpetrator to trigger a service failure.
The vulnerability of the parseversionitem function in the RuBackup backup system is related to insufficient resource capacity. Exploiting this vulnerability could allow a malicious actor to cause service failures...