95883 matches found
The vulnerability of the Media component of the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Media component in the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to cause service failures.
The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor involves the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the DHCP Client Service for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the DHCP Client Service for Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the VXLAN (Virtual Extensible LAN) and GRE (Generic Routing Encapsulation) encapsulation configuration of the Arist EOS operating system allows a attacker to compromise the integrity of the protected information.
The vulnerability of the VXLAN Virtual Extensible LAN and GRE Generic Routing Encapsulation encapsulation configuration of the Arist EOS operating system lies in the comparison of objects without considering their characteristics. Exploiting this vulnerability allows a remote attacker to compromi...
The vulnerability of the Apache Tomcat application server, related to the bypassing of authentication, allows attackers to increase their privileges.
The vulnerability of the Apache Tomcat application server is related to the bypassing of authentication checks. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
The vulnerability of the Apache Tomcat application server, related to the lack of protection for operational data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Tomcat application server is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in their ability to exploit memory after it is freed, allowing attackers to disclose protected information.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow attackers to disclose protected information by opening the malicious file...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
The vulnerability of the PlatformIntegration component of Microsoft Edge and Google Chrome browsers allows a perpetrator to execute arbitrary code.
The vulnerability of the PlatformIntegration component of Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Active Directory Domain Services service on the Microsoft Windows Server operating system allows a perpetrator to execute arbitrary code.
The vulnerability of Active Directory Domain Services is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Hyper-V component of the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor is related to buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability relates to the Azure Kubernetes Service (AKS), which handles the deployment of container applications and their management. It stems from an incorrect path name limitation in the directory structure, allowing a malicious actor to execute arbitrary code.
The vulnerability of the Container Application Deployment and Management service provided by Azure Kubernetes Service AKS is related to an incorrect path name limitation for the catalog. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of the Microsoft Office software package, related to a countable loss of significance, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office suite is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Blitz Identity Provider software, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Blitz Identity Provider software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the privacy protection function of Fenced Frames in Microsoft Edge and Google Chrome browsers allows attackers to bypass existing security mechanisms.
The vulnerability of the confidentiality function of Fenced Frames in Microsoft Edge and Google Chrome is related to a lack of verification mechanism for the source of the data. Exploiting this vulnerability can allow attackers to bypass existing security measures remotely...
The vulnerability of the PointerLock component in Microsoft Edge and Google Chrome browsers allows a hacker to replace the user interface.
The vulnerability of the PointerLock component in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to replace the user interface through a specially created HTML page...
The vulnerability of Google Chrome and Microsoft Edge browsers, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the browser’s sandbox through the created HTML page...
The vulnerability of the vgic_its_invalidate_cache() function in the arch/arm64/kvm/vgic/vgic-its.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the vgicitsinvalidatecache function in the arch/arm64/kvm/vgic/vgic-its.c module of the Linux operating system is related to errors during link time. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in an uncontrolled search path element, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 are related to an uncontrolled search path element. Exploiting these vulnerabilities can allow attackers to execute arbitrary code by opening malicious files...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a malicious file...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the ability to read data beyond the allowed range in memory, which allows an attacker to cause a service failure.
The vulnerability of PDF file viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the reading of data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by opening the malicious fi...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024, related to integer overflow, allows attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the ability to read data beyond the allowed range in memory, allowing attackers to disclose protected information.
The vulnerability of PDF file viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the reading of data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information by opening the...
The vulnerability of the client for remote desktop sessions on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Cryptographic Services for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of Microsoft Cryptographic Services in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Azure Network Adapter for Windows Server operating systems allows attackers to escalate their privileges.
The vulnerability of the Azure Network Adapter for Windows Server operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of the professional speech recognition and document automation platform Nuance PowerScribe, related to a significant loss of significance, allows a violator to execute arbitrary codes.
The vulnerability of the Nuance PowerScribe professional speech recognition and document automation platform is related to the lack of a disassembly mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
The vulnerability of the Apache Tomcat application server, related to defects in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the search-ms handler in Windows operating systems allows a hacker to disclose protected information (NTLM hashes).
The vulnerability of the search-ms handler in Windows operating systems is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to disclose protected information NTLM hashes...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an improper authorization process based on a list of permitted senders. This allows attackers to bypass existing security mechanisms.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect authorization process based on a list of permitted senders. Exploiting this vulnerability could allow a hacker to bypass existing security mechanisms...
The vulnerabilities of the GOMODPROXY and GOSUMDB modules in the Go programming language allow attackers to circumvent security restrictions and gain access to read and modify data.
The vulnerability of GOMODPROXY and GOSUMDB modules written in the Go programming language is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to read and modify data...
The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to incorrect pathname restrictions. This vulnerability allows attackers to disclose sensitive information or cause service failures.
The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) relates to the use of an incomplete black list, which allows a perpetrator to execute arbitrary code.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Windows Defender operating systems, which allows attackers to increase their privileges
The vulnerability of Microsoft Windows Defender operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the formModifyWebAuthWhiteUser() function in the Tenda W15E router’s microprogramming software allows a hacker to cause a service failure.
The vulnerability of the formModifyWebAuthWhiteUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteID parameter. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the formDelwebAuthPic() function in the Tenda W15E router software allows a hacker to cause a service failure.
The vulnerability of the formDelwebAuthPic function in the Tenda W15E router’s microprogramming software is related to the operation of pushing data out of the buffer into memory when processing the picName parameter. Exploiting this vulnerability could allow an attacker to cause a service failur...
The vulnerability of the formAddWebAuthWhiteUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.
The vulnerability of the formAddWebAuthWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteUserInfo parameter. Exploiting this vulnerability allows a malicious actor to...
The vulnerability of the formAddWebAuthUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.
The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserPwd parameter. Exploiting this vulnerability could allow a malicious actor to cause...
The vulnerability of the formAddWebAuthUser() function in the Tenda W15E router software allows a hacker to trigger a service failure.
The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...
The vulnerability of the formPortalAuth() function in the Tenda W15E router’s microprogramming software allows a hacker to trigger a service failure.
The vulnerability of the formPortalAuth function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the gotoUrl parameter. Exploiting this vulnerability allows a malicious actor to cause service failure b...