The vulnerability of the pstrip64.sys driver, a utility for configuring video card and monitor parameters, allows a hacker to modify critical kernel structures or increase their privileges.

The vulnerability of the pstrip64.sys driver, a utility for configuring video card and monitor parameters, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify critical kernel structures or increase their privileges...

The vulnerability of the SiYuan personal knowledge management system, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the SiYuan personal knowledge management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the npm library Color-Convert, related to the presence of undeclared functions, allows a hacker to execute arbitrary code.

The vulnerability of the npm library Color-Convert is related to the presence of undeclared capabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient restrictions on authentication attempts. This allows a intruder to compromise the accessibility of protected information.

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the accessibility of protected...

The vulnerability of the setWizardCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setWizardCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming software is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability could allow a remote attacker to execute...

The vulnerability of the setUrlFilterRules() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setUrlFilterRules function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken at the management level to prevent data corruption. Exploiting this vulnerability could allow a remote attacker t...

The vulnerability of the implementation of the time series collection in the MongoDB database management system allows a hacker to execute arbitrary code.

The vulnerability of the MongoDB database management system’s time series collection implementation is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The software for deploying and executing AI models, NVIDIA Triton Inference Server (previously TensorRT Inference Server), is vulnerable due to synchronization errors when using a shared resource. This vulnerability allows attackers to cause service failures.

The vulnerability of the software for deploying and executing AI models in NVIDIA Triton Inference Server previously known as TensorRT Inference Server stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause service failur...

The vulnerability of the SENADB microprogramming software for Epson printers and scanners allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the SENADB microprogramming software for Epson AcuLaser CX17NF-WF printers and scanners is related to the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability can allow an attacker to gain elevated privileges and execute arbitrary...

The vulnerability of the doCertificateUpdate() function in the LXD container management system allows a attacker to escalate their privileges.

The vulnerability of the doCertificateUpdate function in the LXD container management system is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the API request handler of the Mattermost instant messaging application allows a attacker to trigger a service failure.

The vulnerability of the API request handler for Mattermost instant messaging applications is related to improper validation of the specified data type. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the formSetEnableWizard() function in TRENDnet TEW-432BRP router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetEnableWizard function in TRENDnet TEW-432BRP router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Mocca Calendar application lies in the improperly encrypted color and text fields in the event modal window, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Mocca Calendar application exists because the background and text colors in the event details panel are not properly encrypted. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the qfq_reset_qdisc() function in the net/sched/sch_qfq.c module of the network scheduling subsystem of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the qfqresetqdisc function in the net/sched/schqfq.c module, within the net/sched subsystem of the Linux operating system’s kernel, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the automation application and the Conda-build package for distributing Python packages, related to errors in inherited permissions, allows a perpetrator to trigger a “Race Situation” and execute arbitrary code.

The vulnerability of the automation application and the Conda-build package distribution in Python is related to errors in inherited permissions. Exploiting this vulnerability could allow a perpetrator to trigger a “race condition” and execute arbitrary code...

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to incorrect restrictions on the path name to the restricted access directory. This allows a intruder to write arbitrary files.

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...

The vulnerability of the setWanCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setWanCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the Linux operating system’s kernel security module, AppArmor, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel security module, AppArmor, arises from a race condition. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in its ability to restore unreliable data in memory. This allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing is related to the recovery of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain...

The vulnerability of the training library for NVIDIA Megatron-LM, related to the restoration of unreliable data in memory, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data using ...

The vulnerability of the OpenShift AI platform, related to insufficient spatial partitioning, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the OpenShift AI platform for developing artificial intelligence models is related to insufficient spatial partitioning. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FlinkSessionJob component in the automation tool for deploying, managing, and scaling a distributed data processing platform. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the FlinkSessionJob component in the automation tool for deploying, managing, and scaling a distributed data processing platform called Apache Flink Kubernetes Operator is related to the use of files and directories accessible to external parties. Exploiting this vulnerabilit...

The vulnerability of the IPX image optimizer developed by Sharp and SVGO lies in the improper restriction on the path name to the restricted directory. This allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the IPX image optimizer developed by Sharp and SVGO is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain unauthorized access to protected...

The vulnerability of the ConnectToSynactis method of the ActiveX Synactis PDF In-The-Box control (PDF_IN_1.ocx) allows a attacker to execute arbitrary code.

The vulnerability of the ConnectToSynactis method of the ActiveX Synactis PDF In-The-Box control PDFIN1.ocx is related to the issue of operations going out of the buffer in memory when the code generation is not properly managed. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the SM2 Handler component in the C++ Botan cryptographic library allows a hacker to induce a service failure and disclose confidential information.

The vulnerability of the SM2 Handler component in the C++ Botan cryptographic library is related to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow a remote attacker to cause service failures and expose confidential information...

The vulnerability of the npm library Color-Name relates to the presence of undeclared functions, allowing a hacker to execute arbitrary code.

The vulnerability of the npm library Color-Name is related to the presence of undeclared functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the npm library Color, related to the presence of undeclared features, allows a hacker to execute arbitrary code.

The vulnerability of the npm library Color is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the setPptpServerCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setPptpServerCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability could allow an attacker to execute arbitrary...

The vulnerability of the Linux operating system’s kernel security module, AppArmor, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel security module, AppArmor, arises due to a race condition. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the nossrf software lies in its insufficiently checked incoming requests, which allows a perpetrator to execute an SSRF attack.

The vulnerability of the nossrf software is related to insufficient testing of incoming requests. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

The vulnerability of the wxAdminLogin() function in the Metinfo CMS system allows a hacker to execute arbitrary code.

The vulnerability of the wxAdminLogin function in the Metinfo CMS system is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript-based Thymeleaf framework lies in the lack of measures taken to neutralize special elements used in the expression language. This allows attackers to execute Server Side Template Injection (SSTI) attacks.

The vulnerability of the JavaScript-based Thymeleaf framework is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability can allow a remote attacker to execute a Server Side Template Injection SSTI attack...

The vulnerability of the libarchive library, related to reading beyond the buffer in memory, allows an attacker to disclose protected information.

The vulnerability of the libarchive library relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the formPortFw() function in TRENDnet TEW-432BRP router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formPortFw function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SSH service in the TP-Link Archer C64 router’s microprogramming software allows a attacker to execute a brute-force attack.

The vulnerability of the SSH service in TP-Link Archer C64 software routers involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack remotely...

The vulnerability of the cifs_get_spnego_key() function in the cifs.upcall tool of the cifs-utils package in Linux kernel allows a attacker to elevate their privileges to root and execute arbitrary code.

The vulnerability of the cifsgetspnegokey function in the cifs.upcall tool of the cifs-utils package in Linux kernel systems is related to the lack of authentication for the critical function. Exploiting this vulnerability can allow an attacker to elevate their privileges to root and execute...

The vulnerability of the server audit plugin of the MariaDB database management system allows attackers to bypass existing security mechanisms.

The vulnerability of the server audit plugin of the MariaDB database management system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies arises from improper encoding or shielding of output data. This allows a intruder to compromise the integrity of the protected information.

The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to improper encoding or shielding of output data. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity of the protected information...

The vulnerability of the setPortalConfWeChat() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setPortalConfWeChat function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken at the management level to protect data. Exploiting this vulnerability could allow an attacker to execute...

The vulnerability of the setSyslogCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a intruder to execute arbitrary commands.

The vulnerability of the setSyslogCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the setVpnAccountCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setVpnAccountCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitra...

The vulnerability of the verify_dfa() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the verifydfa function in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the platform for customer support and IT service management lies in errors related to access control to saved backup files and configurations. This allows attackers to impersonate users without the need for authentication.

The vulnerability of the customer support and IT service management platform is related to errors in restricting access to saved backup files and configurations. Exploiting this vulnerability allows a malicious actor to impersonate users without the need for authentication...

The vulnerability in the software for downloading pyLoad files arises from incorrect path restrictions for the restricted access directory. This allows attackers to elevate their privileges and execute code as the root user.

The vulnerability of the software for downloading pyLoad files is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute code as the root user...

The vulnerability of the formSetMACFilter() function in TRENDnet TEW-432BRP router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetMACFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform allows a attacker to perform XSS attacks.

The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the software for automating browser processes in Skyvern lies in the lack of measures to neutralize special elements in the template creation mechanism. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for automating browser processes in Skyvern is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the setWiFiGuestCfg() function in TOTOLINK LR350 router software allows a intruder to trigger a service failure.

The vulnerability of the setWiFiGuestCfg function in TOTOLINK LR350 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The software for deploying and executing AI models, NVIDIA Triton Inference Server (previously TensorRT Inference Server), is vulnerable due to synchronization errors when using a shared resource. This vulnerability allows attackers to cause service failures.

The vulnerability of the software for deploying and executing AI models in NVIDIA Triton Inference Server previously known as TensorRT Inference Server stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause service failur...

The vulnerability of the training library for NVIDIA Megatron-LM, related to the restoration of unreliable data in memory, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and replace data.

The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data...