74701 matches found
The vulnerability of the Intel VTune Profiler performance analyzer and the Intel oneAPI Base Toolkit software development tools is related to an uncontrolled element in the search process, allowing attackers to exploit their privileges.
The vulnerability of the Intel VTune Profiler performance analyzer and the Intel oneAPI Base Toolkit software development tools is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Mozilla Firefox browser on Android operating systems, related to the use of open redirection, allows a hacker to redirect users to any desired URL address.
The vulnerability of the Mozilla Firefox browser on Android operating systems is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect a user to any desired URL address remotely...
The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA)’s set of utilities is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.
The vulnerability of the Intel Graphics Performance Analyzer Intel GPA utility is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Kernel Streaming Service Driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kernel Streaming Service Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the MapUrlToZone component in the Windows operating system, which allows a hacker to circumvent existing security restrictions
The vulnerability of the MapUrlToZone component in the Windows operating system is related to incorrect path equivalence resolution. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions...
The vulnerability of Microprogramming Software in the Wiren Board controller, related to access control errors, allows a intruder to execute arbitrary commands.
The vulnerability of Microprogramming software for Wiren Boards, related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted URL command remotely...
The vulnerability of Microprogramming software for Wiren Boards, related to the lack of authentication for critical web services, allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the lack of ability to authenticate with the critical web service. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office packages, WordL, and 365 Apps for Enterprise lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the FreeType font rendering library, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the FreeType font rendering library relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a specially crafted file containing variable fonts...
The vulnerability of the unserialize function in the Aspro content management platform allows attackers to execute arbitrary code. This vulnerability stems from defects in the deserialization mechanism.
The vulnerability of the unserialize function in the Aspro content management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted POST request...
The vulnerability of the axios library, related to insufficient validation of requests on the server side, allows a attacker to perform an SSRF attack.
The vulnerability of the axios library is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...
The vulnerability of Juniper Networks Junos OS’ kernel, related to insufficient spatial partitioning, allows a hacker to execute arbitrary code.
The vulnerability of Juniper Networks Junos OS’s kernel is related to insufficient spatial partitioning. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted file...
The vulnerability of Microsoft Surface sensor display microprogramming software, related to insufficient validation of input data, allows a hacker to bypass security functions.
The vulnerability of Microsoft Surface sensor display software is related to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to bypass security measures...
The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Windows Common Log File System Driver in the operating system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Local Security Authority (LSA) service, which is responsible for authenticating users and managing local security policies in Windows operating systems, allows attackers to escalate their privileges.
The vulnerability of the Local Security Authority LSA in Windows operating systems, which is responsible for verifying identities and managing user policies, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of Microprogramming Software in the Wiren Board controller lies in the lack of implementation for authentication when changing access rights, allowing attackers to escalate their privileges.
The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the absence of authentication mechanisms for changing access rights. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Cross Device Service on the Windows operating system allows attackers to increase their privileges.
The vulnerability of the Cross Device Service on the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the multi-purpose debugger WinDbg, related to errors in checking cryptographic signatures, allows a hacker to execute remote code.
The vulnerability of the multi-purpose debugger WinDbg is related to errors in checking the cryptographic signature. Exploiting this vulnerability can allow a remote attacker to execute malicious code remotely...
The vulnerability of the Iced training platform’s classes allows a hacker to execute arbitrary code.
The vulnerability of the Iced training platform for machine learning H2O is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the overflowing of buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages, related to the misuse of a trusted pointer, allows an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an untrusted pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the SINAMICS S200 servo-system loader, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code.
The vulnerability of the SINAMICS S200 servo drive system’s loader is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of Adobe InDesign’s automation tool for computer design, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...
The vulnerability of the BT Controller component of Qualcomm’s embedded software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the BT Controller component in the microprogramming software of Qualcomm’s integrated chips is related to data encryption errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Adobe InDesign’s automation tool for computer design lies in the possibility of buffer overflow in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the compatibility subsystem’s kernel allows for the execution of Linux applications on Windows operating systems through the Windows Subsystem for Linux (WSL2). This enables attackers to execute arbitrary code.
The vulnerability in the kernel of the compatibility subsystem for running Linux applications, namely Windows Subsystem for Linux WSL2 on Windows operating systems, involves a pointer manipulation issue. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the software for managing assets and processes in Cityworks and Cityworks with Office Companion, related to deficiencies in deserialization mechanisms, allows attackers to execute remote code.
The vulnerability of the Cityworks and Cityworks with Office Companion asset management and process management software lies in the deficiencies of the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...
The vulnerability of Microprogramming Software in Control Boards is related to the presence of vulnerabilities in the borrowed components. This allows attackers to compromise the confidentiality and accessibility of the protected information.
The vulnerability of Microprogramming Software in the Wiren Board controller is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to compromise the confidentiality and accessibility of the...
The vulnerability of the Kernel Streaming Service Driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kernel Streaming Service Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Default Header Filtering component in the Apache Camel framework, which is related to insufficient registry checks, allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.
The vulnerability of the Default Header Filtering component in the Java framework of Apache Camel is related to insufficient registration checks. Exploiting this vulnerability allows an attacker to influence the integrity, availability, and confidentiality of the protected information...
The vulnerability of the DCM files on the medical image and data management system, as well as the Sante PACS Server, allows a perpetrator to trigger a service failure.
The vulnerability of the DCM files on the medical image and data management system, as well as those on the Sante PACS Server, is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass security restrictions.
The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the USB-Audio component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the USB-Audio component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Zoom video conferencing software, related to improper assignment of ownership rights, allows a violator to disclose protected information.
The vulnerability of Zoom video conferencing software is related to the improper assignment of ownership rights. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the nnq_Sigmoid() function in the Quantized Sigmoid Module framework of the PyTorch machine learning library allows attackers to exploit it to compromise the integrity of protected information.
The vulnerability of the nnqSigmoid function in the Quantized Sigmoid Module of the PyTorch machine learning framework is related to incorrect initialization of resources when processing parameters scale and zeropoint. Exploiting this vulnerability can allow attackers to compromise the integrity ...
The vulnerability of the Golang programming language, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to user credentials.
The vulnerability of the Golang programming language is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to account information...
The vulnerability of the PCX Image development platform’s SDP code base allows attackers to trigger a service failure.
The vulnerability of the PCX Image development platform’s SDP is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Vulnerability of the pam_sm_authenticate() function in the Yubico PAM module, pam-u2f, which allows a intruder to elevate their privileges
The vulnerability of the pamsmauthenticate function in the Yubico PAM module, specifically in pam-u2f, is related to the return of an incorrect status code. Exploiting this vulnerability could allow attackers to increase their privileges...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. These vulnerabilities allow attackers to influence the integrity of protected information.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected information...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Model.load_model function in the Keras library allows a hacker to execute arbitrary code.
The vulnerability of the Model.loadmodel function in the Keras library is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The command-line interface vulnerability of the FortiSandbox system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the command-line interface of the FortiSandbox threat detection and removal system is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of Visual Studio Code’s source editor lies in its uncontrolled pathfinding mechanism, which allows attackers to escalate their privileges.
The vulnerability of Visual Studio Code’s source editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...