95971 matches found
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information from a remote location...
The vulnerability of the Dialog component in Google Chrome and Microsoft Edge browsers allows attackers to perform spear-phishing attacks.
The vulnerability of the Dialog component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of the WebDialer service in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) allows a attacker to perform an SSRF attack.
The vulnerability of the WebDialer service in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a maliciou...
The vulnerability of the ogs_sbi_xact_add() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.
The vulnerability of the ogssbixactadd function, a component of the NR/LTE Open5GS mobile network creation and management tool, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the add_adev() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the addadev function in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `sco_sock_connect()` function in Linux operating system kernels, which allows a hacker to cause a service failure
The vulnerability of the scosockconnect function in Linux operating systems is related to a race condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability in the Mattermost instant messaging application, related to the manipulation of cross-site requests, allows a hacker to perform a CSRF attack.
The vulnerability of the Mattermost instant messaging application is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to perform a CSRF attack remotely...
The vulnerability of the formStaDrvSetup() function in the /goform/formStaDrvSetup file of the EDIMAX BR-6478AC router’s microprogramming software allows a hacker to inject arbitrary commands.
The vulnerability of the formStaDrvSetup function in the /goform/formStaDrvSetup file of the EDIMAX BR-6478AC router’s microprogramming software is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability could allow a remote attacker ...
The vulnerability of the parser for NF-profiles in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.
The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability in the implementation of the SSL protocol by Google Chrome and Microsoft Edge browsers allows attackers to perform spoofing attacks.
The vulnerability of the SSL Secure Sockets Layer protocol implementation in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created HTML page...
The vulnerability of the sock_def_readable() function in the Linux operating system’s kernel allows a hacker to trigger a denial-of-service attack.
The vulnerability of the sockdef-readable function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the ChromeDriver component for Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the ChromeDriver component for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...
The vulnerability of the Updater service for Google Chrome and Microsoft Edge allows a hacker to escalate their privileges.
The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges using the malicious file...
The vulnerability of the FacAtFunction() function in Android mobile devices from Samsung allows a hacker to execute arbitrary commands.
The vulnerability of the FacAtFunction function in Android mobile devices from Samsung is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
The vulnerability of the Dawn component in browsers such as Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Autofill function in browsers such as Google Chrome and Microsoft Edge allows attackers to expose protected information.
The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow attackers to disclose sensitive information remotely...
The vulnerability of the graphics processing units in Google Chrome and Microsoft Edge browsers allows attackers to bypass the sandboxing protection mechanisms.
The vulnerability of the graphics processing units in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...
The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Telnet protocol implementation in the cryptographic security tool PuTTY, which allows attackers to perform spoofing attacks
The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
The vulnerability of the at_distributor component in Android mobile device operating systems allows a hacker to execute arbitrary commands.
The vulnerability of the atdistributor component in Android mobile devices from Samsung relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the handle_scp_info() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.
The vulnerability of the handlescpinfo function, a tool for creating and managing NR/LTE Open5GS mobile networks, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the parser for NF-profiles in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.
The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the ogs_pool_id_calloc() function in the library /lib/sbi/nghttp2-server.c, which is used for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.
The vulnerability of the ogspoolidcalloc function in the library /lib/sbi/nghttp2-server.c, which is used for creating and managing mobile networks like NR/LTE Open5GS, is related to improper cleanup or release of resources. Exploiting this vulnerability could allow a malicious actor to cause...
The vulnerability of the ssh_rsakex_freekey() function in the PuTTY cryptographic protection tool allows a hacker to induce a service failure.
The vulnerability of the sshrsakexfreekey function in the PuTTY cryptographic protection tool is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the ECDSA algorithm (Elliptic Curve Digital Signature Algorithm) in the PuTTY cryptographic protection tool allows a hacker to induce a service failure.
The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the ip4ip6_err() function in the net/ipv6/ip6_tunnel.c module of the Linux operating system allows a hacker to execute arbitrary code.
The vulnerability of the ip4ip6err function in the net/ipv6/ip6tunnel.c module of the Linux kernel is related to buffer out-of-buffer writing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Companion component in Google Chrome and Microsoft Edge browsers allows attackers to increase their privileges.
The vulnerability of the Companion browser components in Google Chrome and Microsoft Edge is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
The vulnerability of the ShortcutService system service in Android mobile devices from Samsung allows a perpetrator to re-record or create arbitrary files.
The vulnerability of the ShortcutService system service in Android mobile devices from Samsung is related to an incorrect path limitation for accessing the directory. Exploiting this vulnerability could allow a attacker to re-record or create arbitrary files...
The vulnerability of the Updater service for Google Chrome and Microsoft Edge allows a hacker to escalate their privileges.
The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Media components in Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Vulnerability of the user interface of Google Chrome and Microsoft Edge browsers, allowing a hacker to execute arbitrary code
The vulnerability of the user interfaces of Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability in the DataTransfer interface of Google Chrome and Microsoft Edge allows a hacker to gain access to and modify data.
The vulnerability of the DataTransfer interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to and modify data...
Vulnerability of the user interface of Google Chrome and Microsoft Edge browsers, allowing a hacker to execute arbitrary code
The vulnerability of the user interfaces of Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...
The vulnerability of the xfsattr3_node_inactive() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the xfsattr3nodeinactive function in the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the getCallingPackageName method in the Shared.java class of Android operating systems allows a hacker to increase their privileges.
The vulnerability of the getCallingPackageName method in the Shared.java class of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the onNullBinding method in the HostEmulationManager.java class of Android operating systems allows a hacker to exploit their privileges.
The vulnerability of the onServiceConnected method in Android operating systems arises due to a race condition. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the PHPShop content management system, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the PHPShop content management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the UBSAN_throwing_runtime.cpp script of Android operating systems allows a hacker to cause a service failure.
The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework allows a hacker to escalate their privileges.
The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the formSetPortTr() function in the /goform/formSetPortTr file of the TRENDnet TEW-432BRP router microprogramming system allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the formSetPortTr function in the /goform/formSetPortTr file of the TRENDnet TEW-432BRP router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or...
The vulnerability of the caching mechanism of the anti-virus software Trend Micro Apex One, which allows a hacker to enhance their privileges
The vulnerability of the caching mechanism of the anti-virus software Trend Micro Apex One is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the KeyChainActivity component in Android operating systems allows attackers to escalate their privileges.
The vulnerability of the KeyChainActivity component in Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the isSameApp method in the NotificationManagerService.java class of Android operating systems allows a hacker to trigger a service failure.
The vulnerability of the isSameApp method in the NotificationManagerService.java class of Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of the “Yandex SpeechKit” module of the Content Management System (CMS) 1C-Bitrix: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information
Vulnerability of the “Yandex SpeechKit” module in the Content Management System CMS of 1C-Bitrix: Website management is associated with the absence of authentication for critical functions. Exploiting this vulnerability may allow a malicious actor to compromise the confidentiality, integrity, and...
The vulnerability of the sprintf() function in the /httpddebug.asp file of the D-Link DI-7001 MINI router’s microprogramming system allows a hacker to cause a service failure or execute arbitrary commands.
The vulnerability of the sprintf function in the /httpddebug.asp file of the D-Link DI-7001 MINI router’s microprogramming system is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the zipfileInflate function in the SQLite database management system allows attackers to circumvent security restrictions and cause service failures.
The vulnerability of the zipfileInflate function in the SQLite database management system is related to improper cleaning of dynamic memory. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and cause service failures by sending specially crafted smb2 packets...