98363 matches found
Rockwell Automation CompactLogix Buffer Overflow DoS
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...
Rockwell Automation CompactLogix Buffer Overflow DoS
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...
Logic Controllers ControlLogix DoS
The vulnerability of the microprogrammed software modules 1756-EN2, 1756-EN3, and 1756-ENBT of Rockwell Automation’s ControlLogix logic controllers is related to improper verification of integrity values. Exploiting this vulnerability can allow an attacker to trigger a service failure using...
NGINX HTTP Server Code Execution
The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...
Windows Runtime Privilege Escalation
The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Windows Search Privilege Exploitation
The vulnerability of the Windows Search search and indexing service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Windows Push Notification Service Disclosure
The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Media component Windows Privilege Escalation
The vulnerability of the Media component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Remote Desktop Protocol Disclosure Sensitive Information
The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Windows Filtering Platform Privilege Escalation
The vulnerability of the Windows Filtering Platform WFP in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Windows Event Logging Service Code Execution
The vulnerability of the Windows Event Logging service in operating systems is related to deficiencies in access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Opcenter X Cryptographic Signature Verification
The vulnerability of cloud-based software for digital production in Opcenter X is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain full access to the application...
Rockwell Automation Communication Adapter Software Unauthorized Access
The vulnerability of Rockwell Automation’s communication adapter software 1715-AENTR relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...
IGSS definition SCADA System Code Execution
The vulnerability of the Def.exe executable of the IGSS Definition SCADA system involves buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Ancillary Function Driver WinSock Privilege Escalation
The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft XML Core Services Privilege Escalation
The vulnerability of the Microsoft XML Core Services on the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
Microsoft Message Queuing Queue Service Code Execution
The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Network File System Privilege Escalation
The vulnerability of the Network File System NFS on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Media Foundation Code Execution
The vulnerability of the Media Foundation component in Windows operating systems relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Windows RDP Information Disclosure
The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component in Windows operating systems is related to insufficient protection of system data. Exploiting this vulnerability can allow an attacker to increase their privileges...
Data.dll Code Execution
The vulnerability of the Data.dll library on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Siemens Engineering Industrial Software Privilege Escalation
The vulnerability of Siemens’ engineering and industrial software is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
FRRouting Privilege Escalation
The vulnerability of the FRRouting software implementation for Unix-like systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
ImageMagick Code Execution
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of mechanisms for encoding or shielding the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ImageMagick Memory Leak DoS
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
GPAC multimedia platform Memory Leak DoS
The vulnerability of the multimedia platform GPAC is related to the lack of memory release after the effective lifespan of the device. Exploiting this vulnerability can allow an attacker to cause a service failure...
Django UpdateCacheMiddleware Unauthorized Access
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
FreeRDP RDP Write Logon Info Buffer Overflow DoS
The vulnerability of the rdpwritelogoninfov2 function in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
RDP Client Heap Buffer Overflow DoS
The vulnerability of the audioformatcompatible function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...
Windows Privilege Escalation
Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
AppX Deployment Extensions Privilege Escalation
The vulnerability of the AppX Deployment Extensions for Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
Cisco RoomOS Data Encryption Disclosure
The vulnerability of the Cisco RoomOS operating system is related to the lack of measures for data encryption. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
Cisco RoomOS Privilege Bypass
The vulnerability of the Cisco RoomOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain increased privileges...
Cisco RoomOS Privilege Escalation
The vulnerability of the Cisco RoomOS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
ImageMagick Raw Image Disclosure
The vulnerability of the raw image format component of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
ImageMagick MSL Encoder DoS
The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ImageMagick MAT Decoder DoS
The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
ImageMagick XWD DoS
The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Microsoft Defender for Endpoint for Mac Access Control Unauthorized Access
The vulnerability of Microsoft Defender for Endpoint for Mac is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
SAP Commerce Cloud Default Credentials Compromise
The vulnerability of the SAP Commerce Cloud e-commerce platform is related to the use of default user credentials. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
HTTP.sys Driver Disclosure Sensitive Information
The vulnerability of the HTTP.sys driver on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Windows Management Services Privilege Escalation
The vulnerability of the Windows Management Services management tool in operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Surface sensor display Privilege Escalation
The vulnerability of Microsoft Surface sensor displays is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft .NET DoS
The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Microsoft Office Integer Overflow Information Disclosure
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose sensitive information by sending a specially crafted malicious file...
Microsoft Excel Buffer Overflow
The vulnerability of Microsoft Excel spreadsheet editors is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...
Wazuh Manager Inventory Sync Code Execution
The vulnerability of the inventorysync function in the Wazuh Manager’s cluster synchronization component, a platform for security monitoring and threat detection, is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability could allow an attacker...