98363 matches found
Microsoft Office Information Disclosure
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs, as well as Microsoft Office Online Server, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...
Microsoft Defender for Endpoint for Mac Privilege Escalation
The vulnerability of Microsoft Defender for Endpoint for Mac is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...
Unified Consent System Privilege Escalation
The vulnerability of the Unified Consent System component in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
Online Store Output Encoding Arbitrary Code
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to improper coding or escape sequences in output data. Exploiting these vulnerabilities can allow a remote attacker to execute...
Online Store Authentication Bypass
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
Online Store Input Validation Privilege Escalation
The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to enhance their privileges remotely...
Online Store Authentication Bypass
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
ColdFusion Code Execution
The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ColdFusion Path Traversal
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
ColdFusion Code Execution
The vulnerability of the ColdFusion software platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ColdFusion Session Bypass
The vulnerability of the ColdFusion software platform is related to the incorrect duration of a session. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms remotely...
Adobe Illustrator Heap Buffer Overflow RCE
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Adobe Illustrator Privilege Escalation
The vulnerability of Adobe Illustrator’s graphic editor is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Online Store Privilege Escalation
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the ability to download files of a malicious nature without limitation. Exploiting these vulnerabilities can allow attackers t...
platforms for developing and Security Bypass
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions...
Online Store URL Redirection
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to bypass security restrictions remotely...
Online Store Platform Privilege Escalation
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...
ColdFusion Path Traversal
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
Rockwell Automation Arena Linker.exe Code Execution
The vulnerability of the linker.exe executable of Rockwell Automation Arena’s event simulation and automation software is related to the execution of operations beyond the buffer boundaries in memory, resulting from incorrect validation of input data. Exploiting this vulnerability allows an...
siman.exe Code Execution
The vulnerability of the siman.exe executable file of Rockwell Automation Arena’s discrete event simulation and automation software is related to the execution of operations beyond the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker ...
Mozilla Firefox WebAssembly Disclosure
JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to an incorrect pointer dereferencing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...
R7-Officer document editor Arbitrary JavaScript Execution
The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code...
R7-Officer document editor Code Execution
The vulnerability of the R7-Officer corporate server’s document editor is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...
Content Credentials SDK Insufficient Validation
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...
Content Credentials SDK Insufficient Validation DoS
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
Content Credentials SDK Insufficient Validation DoS
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
Content Credentials SDK Insufficient Validation File Read
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to read arbitrary files...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Apache Camel Code Execution
The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...
Keras TorchModuleWrapper Code Execution
The vulnerability of the TorchModuleWrapper.fromconfig function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Mozilla Firefox JIT Compiler RCE
The vulnerability of the JIT-compiler of the Mozilla Firefox browser is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Brokering File System Privilege Escalation
The vulnerability of the Brokering File System BFS in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Projected File System Privilege Escalation
The vulnerability of the Projected File System ProjFS in Windows operating systems is related to the incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Windows WinRT Privilege Escalation
The vulnerability of the WinRT runtime in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft .NET SSRF
The vulnerability of the Microsoft .NET software platform is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...
Windows Audio Service Privilege Escalation
The vulnerability of the Windows Audio service on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft Office Code Execution
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Project-SMARTPoint Pro PlatformHandler Authentication Bypass
The vulnerability of the PlatformHandler.axd handler in the “Project-SMARTPoint Pro” software platform and the “Suvod-SMARTPoint” software suite is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a remote attacker to upload arbitrary files...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office packages is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
DirectX Graphics Kernel Code Execution
The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Word Buffer Overflow
The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise, as well as the Microsoft Office Server and Microsoft 365 Apps for Enterprise products, is related to buffer overflow in dynamic memory...
USB Audio Class driver Disclosure
The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
NTFS File System Code Execution
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
camel-solr SSRF Unauthorized Access
The vulnerability of the camel-solr component of the Apache Camel Java framework is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or perform a SSRF attack...
Microsoft Office Code Execution
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Resilient File System Privilege Escalation
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
LibreDWG Heap Buffer Overflow DoS
The vulnerability of the dwgnextentity function in the src/dwg.c file of the LibreDWG format processing library is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Pillow MapBuffer Heap Buffer Overflow DoS
The vulnerability of the PyImagingMapBuffer function in the src/map.c component of the Pillow image processing library is related to the issue of the operation exceeding the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...
User Profile Service RCE
The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...