Honeywell IQ4 PLC Authentication Bypass

The vulnerability of the microprogrammed software in Honeywell IQ4 programmable logic controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device...

SAP Approuter Node.js Unauthenticated Access

The vulnerability of the SAP Approuter library in Node.js involves redirecting URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

FortiSandbox GUI VNC Access

The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the VNC serv...

Rockwell Automation Communication Adapter Unlimited Resource Distribution DoS

The vulnerability of Rockwell Automation’s communication adapter software models 1718-AENTR and 1719-AENTR lies in their susceptibility to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Rockwell Automation CompactLogix Buffer Overflow DoS

The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...

Windows Push Notification Service Disclosure

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

Windows HID Disclosure

The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...

Media component Windows Privilege Escalation

The vulnerability of the Media component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows kernel Information Disclosure

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Netlogon Privilege Escalation

The vulnerability of the Netlogon service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Microsoft Office Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to a calculated loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Microsoft Office Excel 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SAProuter DLL Loading Code Execution

The vulnerability of the DLL file loading mechanism of the SAProuter proxy server is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

LibTIFF Heap Buffer Overflow DoS

Уязвимость функции readSeparateStripsIntoBuffer библиотеки LibTIFF связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации посредством специально созданных...

NTFS File System Code Execution

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows WebView Privilege Escalation

The vulnerability of the Windows WebView component in operating systems involves the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Message Queuing Queue Service Code Execution

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

Microsoft Office Buffer Overflow Info Disclosure

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft Office Package Buffer Overflow Information Disclosure

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth service for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Remote Desktop Client Code Execution

The vulnerability of the Remote Desktop Client for Windows operating systems regarding client remote desktops is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Network File System Windows Code Execution

The vulnerability of the Network File System NFS on Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

UNIX Disk Format File System Driver Privilege Escalation

The vulnerability of the UNIX Disk Format File System Driver UDFS on Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

DirectX graphics kernel driver Privilege Escalation

The vulnerability of the DirectX graphics kernel driver dxgkrnl.sys on Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft SharePoint Server Office 365 Apps for Enterprise Disclosure Information

The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise programs is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these system...

Microsoft Excel editors Information Disclosure

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Microsoft Excel editors Code Execution

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office programs, and Microsoft 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vim Command Injection

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Graphics Canvas2D Disclosure Protected Information

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...

Audio/Video Web Codecs Code Execution

The vulnerability of the Audio/Video component: The web codecs of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable to errors during initialization. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FreeRDP Heap Buffer Overflow DoS

The vulnerability of the freerdpcertificatedatahash function in the RDP client FreeRDP is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FreeRDP urb_write_completion RCE

The vulnerability of the urbwritecompletion function in the RDP client FreeRDP relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

FreeRDP RDP Code Execution

The vulnerability of the audinserverrecvformats function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

RDP Client Heap Buffer Overflow DoS

The vulnerability of the ainputsendinputevent function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

FreeRDP RDPSND DoS

The vulnerability of the RDPSND async playback thread in the RDP client FreeRDP component relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...

CUPS asn1_decode_snmp Disclosure DoS

The vulnerability of the asn1DecodeSnmp function in the CUPS printing server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

ImageMagick Resource Consumption DoS

The vulnerability of the console-based graphic editor ImageMagick is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco RoomOS DoS

The vulnerability of the Cisco RoomOS operating system is related to improper handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Cisco RoomOS DoS

The vulnerability of the Cisco RoomOS operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ImageMagick SIXEL DoS

The vulnerability of the SIXEL decoder in the console-based image editing software ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick PCL Encoder DoS

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

USB driver Windows Privilege Escalation

The vulnerability of the USB driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Netty QpackDecoder DoS

The vulnerability of the io.netty.handler.codec.http3.QpackDecoder component in the Netty framework, which is used for developing network applications, servers, and clients, involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...

WebRTC DoS

The vulnerability of the WebRTC component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

FreeRDP urb_select_interface RCE

The vulnerability of the urbselectinterface function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...

FreeRDP libusb_udev_select_interface RCE

The vulnerability of the libusbudevselectinterface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

Cisco RoomOS DoS

The vulnerability of the Cisco RoomOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...