The vulnerability of the getAppLabel method in the ForgetDeviceDialogFragment.java class of Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the getAppLabel method in the ForgetDeviceDialogFragment.java class of Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the `updateState` method in the `GraphicsDriverEnableAngleAsSystemDriverController.java` class in Android operating systems allows a hacker to cause a service failure.

The vulnerability of the updateState method in the GraphicsDriverEnableAngleAsSystemDriverController.java class in Android operating systems is related to incorrect handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the PHPShop content management system lies in the lack of measures taken to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PHPShop content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the endpoint of the cloud software for creating and using a data storage service called Nextcloud Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the endpoint of the cloud software for creating and using a data storage service, Nextcloud Server, involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Grafana monitoring and observation platform, related to deficiencies in authentication procedures, allows unauthorized access by attackers to protected information.

The vulnerability of the Grafana monitoring and observation platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the TmSelfProtect component of the antivirus software Trend Micro Apex One allows a malicious individual to elevate their privileges and execute arbitrary code.

The vulnerability of the TmSelfProtect component of the Trend Micro Apex One antivirus software is related to a data source verification error. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the “Yandex SpeechKit” module of the Content Management System (CMS) 1C-Bitrix: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information

Vulnerability of the “Yandex SpeechKit” module in the Content Management System CMS of 1C-Bitrix: Website management is associated with the absence of authentication for critical functions. Exploiting this vulnerability may allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the PHPShop content management system, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PHPShop content management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server allows a attacker to cause a service failure.

The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the loadSafeLabel() function in Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the loadSafeLabel function in Android operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the KeyguardViewMediator.java class of Android operating systems allows a hacker to disclose protected information.

The vulnerability in the KeyguardViewMediator.java class of Android operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the system’s security measures...

The vulnerability in the UBSAN_throwing_runtime.cpp script of Android operating systems allows a hacker to cause a service failure.

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to the lack of a standardized mechanism for handling errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the getPreferredSize() function in the LauncherProcessImageListener.kt script on Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the getPreferredSize function in the LauncherProcessImageListener.kt script on Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the application for integrating PDF.js files with cloud-based software for creating and using data storage systems like NextCloud Server allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the application for integrating PDF.js files with cloud-based software for creating and using data storage in NextCloud Server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scriptin...

The vulnerability of the UniFi OS Server network management center arises from incorrect restrictions on the path to the directory, allowing unauthorized access by intruders to protected information.

The vulnerability of the UniFi OS Server network management center is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the UniFi OS Server network management center arises from incorrect restrictions on the path to the directory, allowing unauthorized access by intruders to protected information.

The vulnerability of the UniFi OS Server network management center is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the control console of the antivirus software Trend Micro Apex One allows a hacker to execute arbitrary code.

The vulnerability of the management console of the Trend Micro Apex One antivirus software is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the iCore antivirus software service from Trend Micro Apex One allows a malicious actor to escalate their privileges and execute arbitrary code.

The vulnerability of the iCore antivirus software from Trend Micro’s Apex One service is related to a data source verification error. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the onNullBinding method in the HostEmulationManager.java class of Android operating systems allows a hacker to exploit their privileges.

The vulnerability of the onNullBinding method in the HostEmulationManager.java class in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the VoIP gateway software Telecom MG, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the VoIP gateway software of Telecom MG is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `applySimpleFieldMaxSize` method in the `DataRowHandler.java` class in Android operating systems allows a hacker to cause a service failure.

The vulnerability of the applySimpleFieldMaxSize method in the DataRowHandler.java class of Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the client library of the Firebird database management system allows a perpetrator to cause information leakage.

The vulnerability of the client library of the Firebird database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to cause a data leak...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability lies in the built-in virtual table module of the FTS5 database management system for SQLite, which allows a hacker to trigger a service failure.

The vulnerability of the embedded virtual table module in the FTS5 database system of the SQLite database management system is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the UniFi OS Server network management center, related to insufficient validation of input data, allows a perpetrator to execute arbitrary commands.

The vulnerability of the UniFi OS Server network management center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the iCore antivirus software service from Trend Micro Apex One allows a malicious actor to escalate their privileges or execute arbitrary code.

The vulnerability of the iCore antivirus software from Trend Micro’s Apex One lies in synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

The vulnerability of the UniFi OS Server network management center, related to lack of access control, allows a intruder to gain read, modify, or delete access to data.

The vulnerability of the UniFi OS Server network management center is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

The vulnerability of the developer tool “1C:Library of Standard Subsystems” arises from the failure to take measures to neutralize special elements, allowing attackers to execute arbitrary commands on behalf of the server user.

The vulnerability of the developer tool “1C:Standard Subsystems Library” relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the server user remotely...

The vulnerability of the soup_body_input_stream_read_chunked() function in the LibSoup library allows a attacker to circumvent existing security restrictions, implement a cache poisoning attack, or gain unauthorized access to protected information.

The vulnerability of the soupbodyinputstreamreadchunked function in the LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures, execute a cache poisoning attack, or gain unauthorized...

The vulnerability of the Grafana monitoring and observation platform, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of the Grafana monitoring and observation platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

The vulnerability of the IBM HTTP Server’s web server, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the IBM HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability in the l2c_fcr_clone_buf scenario of l2c_fcr.cc in Android operating systems allows attackers to increase their privileges.

The vulnerability in the l2cfcrclonebuf section of the l2cfcr.cc code in Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the PHPShop content management system lies in the lack of measures taken to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PHPShop content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component allows a perpetrator to increase their privileges.

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the control console of the antivirus software Trend Micro Apex One allows a hacker to execute arbitrary code.

The vulnerability of the management console of the Trend Micro Apex One antivirus software is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the handleBondStateChanged method in the AdapterService.java class of Android operating systems allows a hacker to disclose protected information.

The vulnerability of the handleBondStateChanged method in the AdapterService.java class of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by security measures...

The vulnerability of the PHPShop content management system lies in the incorrect limitation of the path name to the catalog, allowing attackers to execute arbitrary code.

The vulnerability of the PHPShop content management system is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the geo-analytics platform BestPlace, which uses machine learning, relates to bypassing authentication via a user-controlled key. This allows unauthorized users to gain access to protected information and steal the user’s account.

The vulnerability of the geo-analytics platform BestPlace with machine learning training involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information and steal the user’s...

The vulnerability of the URL validator in the Keycloak software solution for managing identity verification and access control allows a hacker to expose the protected information.

The vulnerability of the URL validator in the Keycloak identity and access management software relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the synchronization tool for NextCloud’s desktop, related to the lack of security measures for the website structure, allows attackers to execute arbitrary code.

The vulnerability of the synchronization tool for NextCloud’s desktop interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the libinput-device-group interface of the libinput library allows a attacker to elevate their privileges to root level and execute arbitrary code. This vulnerability is related to the implementation of X.Org and Wayland server protocols.

The vulnerability of the libinput-device-group interface in the libinput library, which is used in the implementation of X.Org and Wayland display server protocols, is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root...

The vulnerability of the Apex One NT Listener component of the Trend Micro Apex One antivirus software allows a hacker to escalate their privileges.

The vulnerability of the Apex One NT Listener antivirus software is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the UniFi OS Server network management center, related to insufficient validation of input data, allows a perpetrator to execute arbitrary commands.

The vulnerability of the UniFi OS Server network management center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the performPreInstallChecks() function in the InstallRepository.kt script of the Android operating system’s Framework component allows a malicious actor to escalate their privileges.

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant, related to the lack of measures for cleaning incoming data, allows a perpetrator to disclose protected information.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

The vulnerability of the Django web application software, related to synchronization errors when using shared resources, allows attackers to trigger a service failure.

The vulnerability of the Django web application framework is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the PeerObjects component of the iepeers.dll library in the Microsoft Internet Explorer browser allows a hacker to execute arbitrary code.

The vulnerability of the PeerObjects component of the iepeers.dll library in Microsoft Internet Explorer is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the /goform/formTaskEdit file in the UTT 1200GW networking device software allows a attacker to cause a service failure.

The vulnerability of the /goform/formTaskEdit module in the UTT 1200GW networking device involves the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...