The vulnerability of the freerdp-proxy RDP client component, FreeRDP, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the freerdp-proxy RDP client component, FreeRDP, is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to increase their privileges.

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to changes in the user trust policy mask as a result of the introduction or modification of arguments. Exploiting this vulnerability can allow a malicious actor to increase their privilege...

The vulnerability in the script/cgi-bin/dropbox.cgi of the CGI Handler component of the D-Link DNS-340L network storage software allows a hacker to execute arbitrary code.

The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software lies in their susceptibility to information disclosure during data transmission. This vulnerability allows attackers to expose confidential information that should be protected.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerabilities of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed software routers are related to deficiencies in access control. This allows attackers to gain access to confidential information.

The vulnerabilities of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker to gain access to confidential information...

The vulnerability of the rxgk_extract_token() function in the net/rxrpc/rxgk_app.c module, which is part of the RxRPC session support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxgkextracttoken function in the net/rxrpc/rxgkapp.c module, which supports RxRPC session sockets in Linux operating systems, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the pf1550_charger_probe() function in the drivers/power/supply/pf1550-charger.c module of the Linux kernel’s power management driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pf1550chargerprobe function in the drivers/power/supply/pf1550-charger.c module of the Linux kernel’s power management driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the ip6erspan_changelink() function in the net/ipv6/ip6_gre.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6erspanchangelink function in the net/ipv6/ip6gre.c module of the Linux kernel is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to the improper implementation of the sequence of actions to be performed. This allows an attacker to trigger a service failure.

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an improper definition of the link before accessing a file. This allows attackers to delete system files and cause service failures.

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, stems from an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow a malicious actor to delete system files and cause service...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the use of an unreliable search path, allowing attackers to escalate their privileges.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the ThreatSonar Anti-Ransomware tool in detecting and responding to threats lies in its ability to download files of a malicious nature without limitation. This allows attackers to execute arbitrary system commands.

The vulnerability of the ThreatSonar Anti-Ransomware tool lies in its ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows a remote attacker to execute arbitrary system commands by downloading specially created files...

The vulnerability of the drm_gem_fb_init_with_funcs() function in the drivers/gpu/drm/drm_gem_framebuffer_helper.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmgemfbinitwithfuncs function in the drivers/gpu/drm/drmgemframebufferhelper.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploitation of this vulnerability could allow an...

The vulnerability in operating systems macOS, iOS, and iPadOS, related to operations beyond the memory buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of operating systems macOS, iOS, and iPadOS stems from the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software solutions lies in their lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code and disclose sensitive information.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software solutions lies in their lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code and disclose sensitive information.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software lies in their lack of protection against SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Vert.x Java framework in Quarkus allows attackers to exploit it to disclose protected information.

The vulnerability of the Vert.x Java framework in Quarkus relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the configuration file 4_testintegration_fim-tier-0-1-win.yml on the Wazuh security monitoring and threat detection platform allows a perpetrator to gain access to and modify this data.

The vulnerability of the configuration file 4testintegrationfim-tier-0-1-win.yml of the security monitoring and threat detection platform Wazuh is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain read access and modify data...

The vulnerability of the POS platform component of Oracle Hospitality Simphony allows a malicious individual to gain unauthorized access to read, create, delete, and modify data, or to cause service interruptions.

The vulnerability of the Oracle Hospitality Simphony sales management platform component relates to insufficient access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, create, delete, and modify data, or cause service interruptions...

The vulnerability of the __rds_rdma_map() function in the net/rds/rdma.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rdsrdmamap function in the net/rds/rdma.c module of the Linux operating system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the DNS server Dnsmasq, related to errors in information processing, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Dnsmasq DNS server is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the dependency manager for PHP Composer, related to the failure to remove special elements, allows a perpetrator to execute arbitrary commands.

The vulnerability of the dependency manager for PHP Composer is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the copy_post_image() function in the Gravity Forms plugin of the WordPress content management system allows a hacker to upload arbitrary files and execute arbitrary code.

The vulnerability of the copypostimage function in the Gravity Forms plugin of the WordPress content management system is related to the ability to upload unlimited dangerous files. Exploiting this vulnerability allows a malicious actor to upload any files and execute any code...

The vulnerability of the software interface of Rockwell Automation’s ThinManager platform for centralized application management allows a hacker to write arbitrary files.

The vulnerability of the software interface of Rockwell Automation’s ThinManager platform for centralized application management is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...

The vulnerability of the Util-linux command-line utility suite relates to deficiencies in handling error situations, allowing attackers to exploit their privileges.

The vulnerability of the Util-linux command-line utility package is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the WebHandler component in Apple’s operating systems—iOS, Safari, iPadOS, macOS, tvOS, visionOS, and watchOS—allows attackers to trigger a service failure.

The vulnerability of the WebHandler component in Apple’s operating systems—iOS, Safari, iPadOS, macOS, tvOS, visionOS, and watchOS—is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the WAD (Web Access Daemon) in FortiOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of WAD Web Access Daemon in FortiOS operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created sockets...

The vulnerability of the executable file model.exe of the Siman software component for discrete event simulation and automation in Rockwell Automation Arena allows a attacker to execute arbitrary code.

The vulnerability of the model.exe executable file of the Siman software for discrete event simulation and automation in Rockwell Automation Arena lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious...

The vulnerability of the SIMATIC S7 PLC web server, related to insecure resource initialization, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the atmel_sha204a_remove() function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel cryptographic accelerator module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the atmelsha204aremove function in the drivers/crypto/atmel-sha204a.c driver for the Linux kernel cryptographic accelerator is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the biovec_phys_mergeable() function in the block/blk.h module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the biovecphysmergeable function in the block/blk.h module of the Linux kernel is related to an incorrect definition of its internal state. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the process_command_opts() function in the libtiff library, which allows a hacker to execute arbitrary code.

The vulnerability of the processcommandopts function in the libtiff library is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to inconsistencies in the responses to incoming requests. This allows an attacker to gain unauthorized access to protected information.

The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability of the IBM Sterling Partner Engagement Manager software lies in the fact that critical information is transmitted in plaintext, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the IBM Sterling Partner Engagement Manager software lies in the transfer of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software lies in the improper handling of parameter length discrepancies, which allows attackers to trigger service failures.

The vulnerability of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software is related to improper handling of parameter length discrepancies. Exploiting this vulnerability can allow an attacker to trigger service failures...

The vulnerability of the software for providing secure remote access to data in Palo Alto Networks’ GlobalProtect App is related to synchronization errors when using a common resource. This allows attackers to elevate their privileges to the root level.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

The vulnerability of the PAN-OS operating system, related to the use of uninitialized resources, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PAN-OS operating system is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Proxy Cache component of the Red Hat Quay software platform allows a hacker to enhance their privileges.

The vulnerability of the Proxy Cache component of the Red Hat Quay software platform is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the executable file expmt.exe of the Siman software, a discrete event simulation and automation software from Rockwell Automation Arena, allows a hacker to execute arbitrary code.

The vulnerability of the exprt.exe executable component of the Siman software for discrete event simulation and automation in Rockwell Automation Arena lies in the issue of out-of-buffer writing. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially...

The vulnerability of the Silabs CP210x VCP virtual COM port driver lies in its uncontrolled search path, which allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Silabs CP210x VCP virtual COM port driver is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the mpc52xx_spi_probe() function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpc52xxspiprobe function in the drivers/spi/spi-mpc52xx.c driver for Linux’s SPI devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the acomp_save_req() function in the crypto/acompress.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acompsavereq function in the crypto/acompress.c module of the Linux kernel cryptographic subsystem relates to access to resources through incompatible types. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to bypass security restrictions and gain read-only access to data.

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to errors in verifying the cryptographic signature during the incorrect comparison of the RSA public key assigned to the user. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the certificate validation process. This allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

The vulnerability of the high-performance operator panels from the SIMATIC HMI Unified Comfort Panels Standard family lies in their unsafe initialization of resources, allowing attackers to gain unauthorized access to the web browser.

The vulnerability of the high-performance operator panels from the SIMATIC HMI Unified Comfort Panels Standard family relates to the insecure initialization of resources. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the web browser...

The vulnerability of the Authentication Engine component of the Oracle Access Manager access control system allows a perpetrator to gain full control over the application.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

The vulnerability of the ovpn_net_xmit() function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovpnnetxmit function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the make_task_dead() function in the kernel/exit.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the maketaskdead function in the kernel/exit.c module of the Linux operating system’s kernel relates to the simultaneous release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Fortinet FortiClient Windows security tool, related to copying buffers without checking the size of the input data, allows attackers to modify or forge DNS responses for the target host and execute arbitrary code.

The vulnerability of the Fortinet FortiClient Windows security tool lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to remotely alter or forge DNS responses for the target host and execute arbitrary code using specially...