Windows HID Disclosure

The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...

Remote Desktop Protocol Disclosure Sensitive Information

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Netlogon Privilege Escalation

The vulnerability of the Netlogon service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Microsoft Office Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to a calculated loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...

IGSS definition SCADA System Code Execution

The vulnerability of the Def.exe executable of the IGSS Definition SCADA system involves buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Siemens S7 DoS

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in service operations...

Microsoft Office Package Buffer Overflow Information Disclosure

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Remote Desktop Client Code Execution

The vulnerability of the Remote Desktop Client for Windows operating systems regarding client remote desktops is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Resilient File System Code Execution

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows File Explorer Disclosure

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Microsoft Excel editors Information Disclosure

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Windows Terminal Code Execution

The vulnerability of the Windows Terminal emulator for operating systems is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vim Command Injection

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

USB driver Windows Privilege Escalation

The vulnerability of the USB driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

GPAC multimedia platform Memory Leak DoS

The vulnerability of the multimedia platform GPAC is related to the lack of memory release after the effective lifespan of the device. Exploiting this vulnerability can allow an attacker to cause a service failure...

WebRTC DoS

The vulnerability of the WebRTC component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Django UpdateCacheMiddleware Unauthorized Access

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

RDP Client Heap Buffer Overflow DoS

The vulnerability of the audioformatcompatible function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...

FreeRDP libusb_udev_select_interface RCE

The vulnerability of the libusbudevselectinterface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

Cisco RoomOS Data Encryption Disclosure

The vulnerability of the Cisco RoomOS operating system is related to the lack of measures for data encryption. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Cisco RoomOS Privilege Escalation

The vulnerability of the Cisco RoomOS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

ImageMagick ASHLAR Encoder DoS

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick PCL Encoder DoS

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick MAT Decoder DoS

The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ImageMagick XWD DoS

The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Defender for Endpoint for Mac Access Control Unauthorized Access

The vulnerability of Microsoft Defender for Endpoint for Mac is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ImageMagick Raw Image Disclosure

The vulnerability of the raw image format component of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Opcenter X Cryptographic Signature Verification

The vulnerability of cloud-based software for digital production in Opcenter X is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain full access to the application...

Vim Command Injection

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CouchbaseProducer Component Data Access

The vulnerability of the CouchbaseProducer class in the camel-couchbase component of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

FRRouting Buffer Overflow DoS

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

USB Hub Driver Windows Privilege Escalation

The vulnerability of the USB Hub Driver for Windows operating systems is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

Netty Decompression Bypass DoS

The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and protocol clients related to Netty involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

libzypp metadata processing Code Execution

The vulnerability of the file metadata processing mechanism in the repomd.xml repository file of the libzypp library is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Sensor Data Service Windows Privilege Escalation

The vulnerability of the Sensor Data Service system service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

Windows Management Services Privilege Escalation

The vulnerability of the Windows Management Services management tool in operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows HTTP/2 DoS

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Active Directory Federation Server DoS

The vulnerability of the Active Directory Federation Server operating system on Windows is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Microsoft .NET DoS

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

DirectX Graphics Kernel Privilege Escalation

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

DHCP DoS

The vulnerability of DHCP servers for Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Wazuh Manager Inventory Sync Code Execution

The vulnerability of the inventorysync function in the Wazuh Manager’s cluster synchronization component, a platform for security monitoring and threat detection, is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability could allow an attacker...

netty-codec-http Arbitrary HTTP Request Injection

The vulnerability of the netty-codec-http module in the framework for developing network applications, servers, and clients using the Netty protocol is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP requests...

Vim Command Injection

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

LibreDWG decompress Buffer Overflow DoS

The vulnerability of the decompressR2004section function in the library for processing DWG format files by LibreDWG is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

TOTOLINK X5000R exportOvpn Function Unauthorized Access

The vulnerability of the exportOvpn function in the /web/cgi-bin/cstecgi.cgi component of the TOTOLINK X5000R router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to ga...

LibreDWG Heap Buffer Overflow DoS

The vulnerability of the dwgbmp function in the src/dwg.c file of the LibreDWG library, which handles DWG format files, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

GitLab EE Access Rights Data Compromise

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...