98363 matches found
Redirected Drive Buffering System Windows Privilege Escalation
The vulnerability of the Redirected Drive Buffering System RDBS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
GDI+ Component Code Execution
The vulnerability of the GDI+ component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
DWM Core Library Disclosure
The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Windows Push Notification Service Privilege Escalation
The vulnerability of the Windows Push Notification Service is related to buffer overflows in the dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
External Tools Module Code Execution
The vulnerability of the External Tools module in the integrated Studio 5000 Logix Designer environment is related to the absence of quotation marks when writing elements or search paths. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially created...
Microsoft Office Uninitialized Resource Disclosure
The vulnerability of the Microsoft Office suite is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to disclose protected information...
Cryptographic Services Disclosure
The vulnerability of the Windows Cryptographic Operating System services is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
Microsoft SharePoint Server Access Control Error
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to access control errors. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...
Microsoft Office Disclosure Information Disclosure
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
NTFS File System Code Execution
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Excel Office Privilege Escalation
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
Windows Cloud Files Mini Filter Disclosure
The vulnerability of the Windows Cloud Files Mini Filter driver in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Devexpress/Dashboard Component XSS
The vulnerability of the Devexpress/Dashboard component of the “Project-SMARTPoint” software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
ADFS DoS
The vulnerability of Active Directory Federation Services AD FS is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
dhcpcd parse_option() DoS
The vulnerability of the parseoption function in the DHCP server dhcpcd is related to its dependence on behaviors that are uncertain for each implementation type. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially crafted configuration file...
MKS/Spreadsheet Component XSS
The vulnerability of the MKS/Spreadsheet component of the “S-SMARTH” software suite is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FactoryTalk DataMosaix Private Cloud Code Execution
The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform and its production process optimization capabilities is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...
Rockwell Automation CRL Bypass
The vulnerability of the Certificate Revocation List CRL function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 is related to improper verification of certificate revocation. Exploiting this vulnerability...
Concurrent Ruby AtomicReference Heap Buffer Overflow DoS
The vulnerability of the update method in the Concurrent::AtomicReference class in the Ruby Concurrent library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Wazuh wazuh-analysisd DoS
The vulnerability of the wazuh-analysisd module of the security monitoring and threat detection platform Wazuh is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Content Credentials SDK Uncontrolled Resource Consumption DoS
The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...
Content Credentials SDK Insufficient Validation DoS
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
Wazuh Auth Bypass Unauthorized Access
The vulnerability of the registration demon authd and the synchronization demon remoted of the Wazuh platform for security monitoring and threat detection is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Insufficient Protection Privilege Escalation
The vulnerability of Content Credentials SDK libraries is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
HTTP.sys DoS
The vulnerability of the HTTP.sys driver on Windows operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
NTFS Disclosure
The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Windows Cryptographic Services Bypass
The vulnerability of Windows operating system’s Cryptographic Services is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
DWM Core Library Disclosure
The vulnerability of the DWM Core Library in Windows operating systems is related to writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Windows Privilege Escalation
The vulnerability of Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows DHCP Client Code Execution
The vulnerability of DHCP clients of Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
Microsoft Office Excel 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Disclosure Information Disclosure
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to an unreliable pointer assignment mechanism. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these security measures...
NTFS File System Code Execution
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Key Guard Privilege Escalation
The vulnerability of the Key Guard component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows QoS Packet Scheduler Info Disclosure
The vulnerability of the Windows QoS Packet Scheduler in the operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
SessionSecurityTokenHandler Code Execution
The vulnerability of the SessionSecurityTokenHandler class in Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute...
camel-solr SSRF Unauthorized Access
The vulnerability of the camel-solr component of the Apache Camel Java framework is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or perform a SSRF attack...
Microsoft Office Code Execution
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Content Credentials SDK Insufficient Validation Privilege Escalation
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow attackers to enhance their privileges...
ASUS System Control Interface IOCTL Disclosure DoS
The vulnerability of the IOCTL handler of the ASCI driver allows an attacker to exploit it to disclose protected information or cause service failures. This vulnerability is related to errors that occur during the update of the link counters. Exploiting this vulnerability could enable a remote...
camel-pqc Apache Camel Component Code Execution
The vulnerability of the camel-pqc component in the Apache Camel Java framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
DHCP Server Service Windows Code Execution
The vulnerability of the DHCP Server Service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office and Office 365 packages relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Studio 5000 Logix Designer Auth Bypass RCE
The vulnerability of the integrated design environment Studio 5000 Logix Designer is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to execute arbitrary code by replacing the configuration file of external tools...
Studio 5000 Logix Designer Path Traversal Code Execution
The vulnerability of the integrated design environment of Studio 5000 Logix Designer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to file creation and execute arbitrary code by sending a speciall...
Microsoft Office Excel 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
SMB Server Privilege Escalation
The vulnerability of the SMB server for Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to disclose sensitive information that is protected by security measures...
NTFS File System Code Execution
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...