95971 matches found
The vulnerability of the decompress_R2004_section() function in the LibreDWG file processing library allows a perpetrator to cause service interruptions.
The vulnerability of the decompressR2004section function in the library for processing DWG format files by LibreDWG is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the decompress_R2004_section() function in the LibreDWG file processing library allows a perpetrator to cause service interruptions.
The vulnerability of the decompressR2004section function in the library for processing DWG format files by LibreDWG is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the check_password script of the DCE/RPC SAMR server in the Samba networking interaction software package allows a hacker to execute arbitrary code.
The vulnerability of the checkpassword script in the DCE/RPC SAMR server of the Samba networking software package is related to the failure to eliminate special elements during the processing of the parameter %u. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...
The vulnerability of the plugin for the GLPI system, Mreporting, relates to the lack of security measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the Mreporting plugin for the GLPI system is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Valkey data structure server arises from insufficient neutralization of special elements in queries, allowing attackers to execute arbitrary code.
The vulnerability of the Valkey data structure server is related to insufficient neutralization of special elements in requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the JavaScript library for cryptography, Jwcrypto, arises from incorrect processing of highly compressed input data, allowing attackers to cause service failures.
The vulnerability of the JavaScript library for cryptography, Jwcrypto, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the aiohttp HTTP client, related to the registration of excessive data, allows a hacker to trigger a service failure.
The vulnerability of the aiohttp HTTP client is related to the registration of excessive data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the network infrastructure for Flannel containers, related to the lack of measures taken at the management level to clean data, allows a perpetrator to execute arbitrary commands.
The vulnerability of the Flannel container’s network infrastructure is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.
The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.
The vulnerability of the networking routing implementation software on Unix-like systems is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the CommuniGate Pro mail server, related to insufficient validation of input data, allows a hacker to gain unauthorized access to confidential information.
The vulnerability of the CommuniGate Pro mail server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to confidential information...
The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.
The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the SAML Endpoint component of the Keycloak identity and access management software allows a attacker to trigger a service denial.
The vulnerability of the SAML Endpoint component of the Keycloak identity and access management software lies in improper syntax validation during input verification. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the lxml_html_clean library in the Python programming language arises from improper encoding or escaping of output data. This allows attackers to perform cross-site scripting (XSS) attacks or phishing attacks, or to modify the user interface.
The vulnerability of the lxmlhtmlclean library in the Python programming language is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows an attacker to perform cross-site scripting XSS attacks or phishing attacks, or to modify the user interface...
The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of authentication mechanisms. This allows attackers to create or modify arbitrary files.
The vulnerability of the XWiki Platform lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to create or modify arbitrary files remotely...
The vulnerability of the formAccept() function in microprogramming software of Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.
The vulnerability of the formAccept function in microprogrammed software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the formSDHCP() function in the microprogrammed software of Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.
The vulnerability of the formSDHCP function in the microprogrammed software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability in the file brut/androlib/res/decoder/ResFileDecoder.java of the Android APK reverse-engineering tool Apktoo,l allows a hacker to write or rewrite any data.
The vulnerability in the brut/androlib/res/decoder/ResFileDecoder.java file of the Apktool tool for reverse-engineering Android APK files is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write or rewrite...
The vulnerability of the Squid proxy server, related to reading beyond the buffer in memory, allows attackers to cause a service failure.
The vulnerability of the Squid proxy server is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the container management system and the Incus virtual machine manager, related to the failure to take measures to neutralize special elements in the template creation mechanism, allows a perpetrator to execute arbitrary code.
The vulnerability of the container management system and the virtual machine manager Incus is related to the failure to take measures to neutralize special elements in the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Packetbeat network packet analyzer, related to unvalidated array indexing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Network Packetbeat analyzer is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Dell BSAFE Crypto-J cryptographic library, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Dell BSAFE Crypto-J cryptographic library is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the container management system and the virtual machine manager Incus, related to unlimited resource distribution, allows a hacker to trigger a service failure.
The vulnerability of the container management system and the virtual machine manager Incus is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the formConnectionSetting() function in the /goform/formConnectionSetting file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the formConnectionSetting function in the /goform/formConnectionSetting file of the Edimax BR-6675nD router’s microprogramming software is related to the lack of data cleaning measures at the control level when processing the maxConn and timeOut parameters. Exploiting this...
The vulnerability of the formWanTcpipSetup() function in the /goform/formWanTcpipSetup file of the Edimax BR-6675nD router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the formWanTcpipSetup function in the /goform/formWanTcpipSetup file of the Edimax BR-6675nD router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the pppUserName parameter. Exploiting this...
The vulnerability of the formWlanMP() function in the /goform/formWlanMP file of the Edimax BR-6675nD router’s microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the formWlanMP function in the /goform/formWlanMP file of the Edimax BR-6675nD router’s microprogramming system is related to the lack of data cleaning measures at the management level when processing parameters such as ateFunc, ateGain, ateRate, ateChan, ateTxCount,...
The vulnerability of the formWlSiteSurvey() function in the /goform/formWlSiteSurvey file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the formWlSiteSurvey function in the /goform/formWlSiteSurvey file of the Edimax BR-6675nD router’s microprogramming system is related to the issue where the operation’s output goes beyond the buffer in memory when processing the selSSID parameter. Exploiting this vulnerabili...
The vulnerability of the formWlSiteSurvey() function in the /goform/formWlSiteSurvey file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formWlSiteSurvey function in the /goform/formWlSiteSurvey file of the webs component of the microprogramming software for wireless signal amplifiers like Edimax EW-7438RPn is related to the issue where the operation output goes beyond the buffer in memory when processing...
The vulnerability of the formUSBStorage() function in the /goform/formUSBStorage file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the formUSBStorage function in the /goform/formUSBStorage file of the Edimax BR-6675nD router’s microprogramming system is related to the lack of data cleaning at the control level when processing the subdir parameter. Exploiting this vulnerability allows an attacker to execu...
The vulnerability of the formEZCHNwlanSetup() function in the /goform/formEZCHNwlanSetu file of the Edimax BR-6675nD router’s microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the formEZCHNwlanSetup function in the /goform/formEZCHNwlanSetu file of the Edimax BR-6675nD router microprogramming system is related to the lack of data cleaning measures at the control level when processing the method parameter. Exploiting this vulnerability allows an...
The vulnerability of the CInStream::GetCuSize() function in the NTFS archiver 7-Zip allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the CInStream::GetCuSize function in the 7-Zip NTFS archiver lies in the writing beyond buffer boundaries to memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Border Gateway Protocol (BGP) in the Cisco NX-OS operating system of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches allows a attacker to cause service interruptions.
The vulnerability of the Border Gateway Protocol BGP on Cisco NX-OS operating systems of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches is related to permission processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the learning platform IQ SCHOOL, related to deficiencies in verifying user input data, allows a hacker to obtain hash values of other users’ passwords.
The vulnerability of the learning platform IQ SCHOOL is related to deficiencies in the verification of data entered by users. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain the hash values of other users’ passwords...
The vulnerability of the learning platform IQ SCHOOL, related to deficiencies in verifying user input data, allows a hacker to obtain the passwords of other users.
The vulnerability of the learning platform IQ SCHOOL is related to deficiencies in the verification of data entered by users. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain the hash values of other users’ passwords...
The vulnerability of the formWlbasic() function in the /goform/formWlbasic microprogramming system for Edimax BR-6428NS routers allows a hacker to execute arbitrary commands.
The vulnerability of the formWlbasic function in the /goform/formWlbasic microprogramming system for Edimax BR-6428NS routers is related to the lack of data cleaning measures at the control level when processing the repeaterSSID parameter. Exploiting this vulnerability allows an attacker to execu...
The vulnerability of the formWlanMP() function in the /goform/formWlanM file of the Edimax BR-6428NS router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the formWlanMP function in the /goform/formWlanM microprogramming system for Edimax BR-6428NS routers is related to the lack of data cleaning measures at the management level when processing parameters such as ateFunc, ateGain, ateTxCount, ateChan, ateRate, ateMacID,...
The vulnerability of the learning platform IQ SCHOOL, related to deficiencies in verifying user input data, allows a hacker to obtain hash values of other users’ passwords.
The vulnerability of the learning platform IQ SCHOOL is related to deficiencies in the verification of data entered by users. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain the hash values of other users’ passwords...
The vulnerability of the formsetPPPoE() function in the /goform/formsetPPPoE file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the formsetPPPoE function in the /goform/formsetPPPoE file of the Edimax BR-6675nD router microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the pppUserName parameter. Exploiting this vulnerability allows an...
The vulnerability of the formWizSurvey() function in the /goform/formWizSurvey file of the webs component of the microprogramming software for wireless signal amplifiers, Edimax EW-7438RPn, allows a hacker to execute arbitrary commands.
The vulnerability of the formWizSurvey function in the /goform/formWizSurvey file of the webs component of the microprogramming software for wireless signal amplifiers, such as Edimax EW-7438RPn, is related to the lack of measures taken to neutralize special elements used in the operating system’...
The vulnerability of the mp() function in the /goform/mp software for router devices from Edimax BR-6675nD allows a hacker to execute arbitrary commands.
The vulnerability of the mp function in the /goform/mp microprogramming system for Edimax BR-6675nD routers is related to the lack of data cleaning at the control level when processing the command parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending...
The vulnerability of the REST API interface of the Cisco Secure Workload (formerly Tetration) security tool allows a attacker to access confidential information or modify system configurations.
The vulnerability of the REST API interface of the Cisco Secure Workload formerly Tetration security tool for multi-cloud data centers relates to the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to...
The vulnerability of the formHwSet() function in the /goform/formHwSet file of the Edimax EW-7438RPn wireless signal amplifiers’ software component allows a hacker to execute arbitrary code or cause malfunctions in the device’s functionality.
The vulnerability of the formHwSet function in the /goform/formHwSet component of the Edimax EW-7438RPn wireless signal amplifiers’ software lies in the fact that the output of the operation goes beyond the buffer in memory when processing parameters such as Anntena, Mcs, regDomain, nic0Addr,...
The vulnerability of the formWlanMP function in the /goform/formWlanMP file of the webs component of the Edimax EW-7438RPn wireless signal amplifiers’ microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the formWlanMP function in the /goform/formWlanMP file of the webs component of the Edimax EW-7438RPn wireless signal amplifiers’ microprogramming system is related to the lack of measures to neutralize certain parameters during the processing of ateFunc, ateGain, ateTxCount,...
The vulnerability of the formWpsStart() function in the /goform/formWpsStart file of the webs component of the microprogramming software for wireless signal amplifiers Edimax EW-7438RPn allows a hacker to execute arbitrary commands.
The vulnerability of the formWpsStart function in the /goform/formWpsStart file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn is related to the failure to take measures to neutralize special elements used in the operating system’s...
The vulnerability of the formAccept() function in the /goform/formAccep file of the Edimax BR-6675nD router microprogramming software, which allows a hacker to execute arbitrary commands.
The vulnerability of the formAccept function in the /goform/formAccep file of the Edimax BR-6675nD router microprogramming software is related to the lack of data cleaning at the control level when processing the submit-url parameter. Exploiting this vulnerability allows an attacker to send...
The vulnerability of the formWlanMP() function in the /goform/formWlanMP file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formWlanMP function in the /goform/formWlanMP file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn is related to the output of operations that go beyond the buffer in memory when processing parameters such as...
The vulnerability of the BuildKit container-building software lies in the improper restriction of the path name to the restricted-access directory, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the web framework and the asynchronous network library Tornado, related to improper handling of special elements, allows a perpetrator to execute arbitrary code.
The vulnerability of the web framework and the asynchronous network library Tornado is related to improper handling of special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the PyPDF2 library for processing PDF files, related to the execution of a loop with an unreachable exit condition, allows a hacker to cause a service failure.
The vulnerability of the PyPDF2 library for processing PDF files relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the PyPDF2 library for processing PDF files, which stems from the use of a regular expression with inefficient computational complexity, allows attackers to trigger service failures.
The vulnerability of the PyPDF2 library for processing PDF files relates to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...