ImageMagick Decoder Code Execution

The vulnerability of the MSL decoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ImageMagick Symbolic Link

The vulnerability of the console-based graphic editor ImageMagick is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

ImageMagick BilateralBlurImage DoS

The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Wavelet DoS

The vulnerability of the WaveletDenoiseImage method in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Text::CSV_XS Memory Leak

The vulnerability of the Perl programming language module Text::CSVXS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Network File System Privilege Escalation

The vulnerability of the Network File System NFS on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

ctsattach Component Code Execution

The vulnerability of the ctsattach component of the SAP Change and Transport System Attach Tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code using a specially created archive file...

camel-neo4j deleteNode retrieveNodes Node Modification

The vulnerability of the deleteNode and retrieveNodes functions in the Neo4jProducer class of the camel-neo4j framework from Apache Camel is related to improper elimination of special elements in data queries. Exploiting this vulnerability could allow an attacker to gain access to read, modify, o...

open5gs-amfd DoS

The vulnerability of the open5gs-amfd process of the Access and Mobility Management Function in the NR/LTE Open5GS network creation and management tool is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause...

PIL EpsImagePlugin Parser DoS

The vulnerability of the parser for EPS files in the Pillow image processing library’s EPSImagePlugin.py module lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause service failures when processing specially crafted EPS...

FortiPAM identity management Command Line Interface Code Execution

The vulnerability of the Command Line Interface CLI of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local software platform is related to an incorrect restriction on the path...

FortiPAM SSL-VPN Code Execution

The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...

Microsoft SharePoint Server Deserialization RCE

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Storage Spaces Direct Windows Code Execution

The vulnerability of the Storage Spaces Direct distributed storage function in Windows operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Windows Access Control Bypass

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass security restrictions...

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to print queues is associated with buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows Remote Desktop Privilege Escalation

The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

Siemens S7 DoS

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in service operations...

NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems is related to integer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges...

WinRT Privilege Escalation

The vulnerability of the WinRT component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Resilient File System Code Execution

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows File Explorer Disclosure

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Microsoft 365 Copilot Intelligent Virtual Assistant Privilege Escalation

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Terminal Code Execution

The vulnerability of the Windows Terminal emulator for operating systems is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Web Proxy Auto-Discovery Protocol Privilege Escalation

The vulnerability of the Web Proxy Auto-Discovery Protocol WPAD implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to increase their privileges...

ImageMagick Use-After-Free

The vulnerability of the console-based graphic editor ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GPAC multimedia platform Resource Leak DoS

The vulnerability of the multimedia platform GPAC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

magick-distribute-cache DoS

The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ImageMagick ASHLAR Encoder DoS

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows Telephony Service Privilege Escalation

The vulnerability of the Windows Telephony Service in Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

SAP Approuter HTTP Request Disclosure

The vulnerability of the node.js library SAP Approuter is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially crafted HTTP request...

MP4Box vobsub_read_idx Heap Buffer Overflow DoS

The vulnerability of the vobsubreadidx function in the file /src/mediatools/vobsub.c of the MP4Box component of the GPAC multimedia platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Pillow TgaRleEncode Disclosure

The vulnerability of the ImagingTgaRleEncode function in the TgaRleEncode.c component of the Pillow image processing library is related to the output of the operation outside the buffer. Exploiting this vulnerability could allow an attacker to disclose protected information through the generated...

Pillow PDF Stream DoS

The vulnerability of the PdfParser.PdfStream.decode function in the PIL/PdfParser.py module of the Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vertx Websocket Component SSRF Information Disclosure

The vulnerability of the VertxWebsocketConsumer.populateExchangeHeaders method in the Vertx WebSocket component from the Java framework Apache Camel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information and...

Windows RCE

The vulnerability of the Windows operating system installation process is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Grafana OnCall Authentication Bypass Code Execution

The vulnerability of the Grafana OnCall notification system is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to trigger service failures or execute arbitrary code by sending a specially crafted POST request...

Apache Fineract SQL Injection

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

ABAP Application Server Buffer Overflow

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...

SAP NetWeaver Application Server Java Configuration Wizard XSS

The vulnerability of the SAP NetWeaver Application Server Java Configuration Wizard web interface is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Schneider Electric Cybersecurity Admin Expert Privilege Escalation

The vulnerability of Schneider Electric’s Security Management Software, EcoStruxure Cybersecurity Admin Expert CAE, is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

FortiOS CLI Data Compromise

The vulnerability of the command-line interface CLI of FortiOS operating systems and FortiProxy proxy servers for protecting against internet attacks is related to operations that go beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the...

FortiOS FortiProxy CRLF Injection

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access and modify...

FortiPAM identity management GUI Code Execution

The vulnerability of the graphical user interface GUI of the FortiPAM identity management system, the FortiOS operating system, and the FortiProxy proxy server for protecting against internet attacks is related to the execution of operations outside of the buffer in memory. Exploiting this...

FortiOS FortiProxy CRLF Injection Code Execution

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Rockwell Automation 1734 POINT I/O Unlimited Resource Distribution DoS

The vulnerability of Rockwell Automation’s 1734 POINT I/O software lies in its unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...