The vulnerabilities of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to pointer manipulation, allow attackers to trigger service failures.

The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to pointer manipulation. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Imagination’s microprogramming software for graphics processors allows a hacker to extract data from the local memory of the GPU.

The vulnerability of Imagination’s microprogramming graphics software is related to improper handling of insufficient resolutions or privileges. Exploiting this vulnerability could allow an attacker to extract data from the GPU’s local memory...

The vulnerability of Imagination’s microprogramming software for graphics processors allows a hacker to execute arbitrary code.

The vulnerability of microprogrammed software in graphics processors is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

The vulnerability of the blocked_path() function in the Python package for creating Gradio applications allows a intruder to gain unauthorized access to protected information.

The vulnerability of the blockedpath function in the Python package for creating Gradio applications relates to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the `usbg_make_tpg()` function in the `drivers/usb/gadget/function/f_tcm.c` file of the Linux USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbgmaketpg function in the drivers/usb/gadget/function/ftcm.c file of the Linux USB device driver module is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of Autodesk Fusion’s 3D model development software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to disclose protected information and execute arbitrary code.

The vulnerability of Autodesk Fusion’s 3D model development software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute arbitrary code when a user opens a specially...

The vulnerability of Autodesk Fusion’s 3D model development software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to disclose protected information and execute arbitrary code.

The vulnerability of Autodesk Fusion’s 3D model development software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute arbitrary code when a user opens a specially...

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems allows attackers to bypass existing security mechanisms.

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems involves bypassing authentication due to a fundamental error. Exploiting this vulnerability allows an attacker to circumvent existing security mechanisms remotely...

The vulnerability of the privacy protection function of Google Chrome’s Fenced Frames allows a hacker to replace the user interface.

The vulnerability of the Fenced Frames privacy function in Google Chrome relates to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the loadRLE() function in the TGA-image loader (PluginTARGA.cpp) from the Freeimage graphics library allows a malicious actor to cause a service failure or execute arbitrary code.

The vulnerability of the loadRLE function in the TGA-image loader PluginTARGA.cpp from the Freeimage graphics library relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the CCF (Cluster Client Failover) mechanism in Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the CCF Cluster Client Failover mechanism in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the NTLM protocol implementation in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the NTLM protocol in Windows operating systems is related to external file name or path control. Exploiting this vulnerability allows attackers to perform spoofing attacks...

The vulnerability of the Windows Storage Services data storage service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Azure IoT Explorer software, related to its reliance on open IP addresses, allows a perpetrator to expose protected information.

The vulnerability of the Azure IoT Explorer software is related to its reliance on open IP addresses. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

The vulnerability of Microsoft ACI Confidential Containers, related to the lack of data cleaning at the management level, allows attackers to enhance their privileges.

The vulnerability of Microsoft ACI Confidential Containers relates to the lack of measures taken at the management level to ensure data cleanup. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Google Chrome’s PictureInPicture component, which allows a hacker to compromise the confidentiality of protected information

The vulnerability of Google Chrome’s PictureInPicture component is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information through a specially created HTML page...

The vulnerability of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to writing beyond the buffer boundaries, allows attackers to trigger a service failure.

The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to writing beyond the buffer boundaries. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of Intel Ethernet E810 controller’s microprogramming software, related to insufficient exception handling, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet E810 controller’s microprogramming software is related to insufficient exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Advanced DNS Security (ADNS) security service for the PAN-OS operating system allows a attacker to trigger a service failure.

The vulnerability of the Advanced DNS Security ADNS security service for the PAN-OS operating system is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted package...

The vulnerability of SK Hynix’s DDR5 RAM modules, related to improper cleaning or release of resources, allows attackers to execute a Rowhammer-type attack.

The vulnerability of SK Hynix’s DDR5 memory modules is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to perform a Rowhammer attack alter data in memory cells by repeatedly accessing the same memory block over short periods of time...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary code and gain unauthorized access to confidential information.

The vulnerability of the web interface of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized...

The vulnerability of CodeMeter license control software, related to deficiencies in access control, allows a violator to trigger a service failure.

The vulnerability of CodeMeter License Management software is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to cause service interruptions...

Siemens network software vulnerabilities, related to an uncontrolled search element in the search process, allow attackers to execute arbitrary code.

The vulnerability of Siemens network software is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems lies in the improper use of standard permissions, allowing attackers to increase their privileges.

The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the png_set_quantize() function in the library for working with PNG bitmap graphics in libpng allows a hacker to execute arbitrary code.

The vulnerability of the pngsetquantize function in the library for working with PNG bitmap graphics in libpng is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted PNG file...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office suites, Excel, and 365 Enterprise Apps, relates to insufficient protection of sensitive data, allowing attackers to carry out spear-phishing attacks.

The vulnerability of the Microsoft Outlook client, as well as Microsoft Office suites, Excel, and 365 Enterprise Apps, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...

The vulnerability of Microsoft Visual Studio Code’s source editor, related to the lack of data cleaning at the control level, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...

The vulnerability of Azure AI Language Authoring lies in the lack of deserialization mechanism, which allows attackers to execute arbitrary code.

The vulnerability of Azure AI Language Authoring is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Hyper-V component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense (FTD) allows a perpetrator to trigger a service failure.

The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense FTD is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker operating remotely to cause a service failure...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM), allows attackers to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager EPNM, relates to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to carry...

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...

The vulnerability of the service layer of the Cisco Intersight Virtual Appliance software allows a hacker to gain full control over the device.

The vulnerability of the service layer of the Cisco Intersight Virtual Appliance software management system for cloud systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain full control over the device...

The vulnerability of the SSH service of Cisco Ultra-Reliable Wireless Backhaul (URWB) network devices on Cisco IEC6400 Wireless Backhaul Edge Compute devices allows a attacker to cause a service failure.

The vulnerability of the SSH service of Cisco’s Ultra-Reliable Wireless Backhaul URWB network devices for Cisco IEC6400 Wireless Backhaul Edge Compute devices is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability in the web interface of the Cisco Unified Computing System (UCS) Manager allows a perpetrator to execute arbitrary code and expose confidential information.

The vulnerability of the web interface of the Cisco Unified Computing System UCS Manager relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code and disclose confidential information...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a malicious actor to execute arbitrary code and gain unauthorized access to confidential information.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software lies in the lack of protective measures for the web page structure. Exploiting this vulnerability allows an attacker to execute arbitra...

The vulnerability of the .NET software platform, related to the improper handling of missing special elements, allows attackers to perform spoofing attacks.

The vulnerability of the .NET software platform is related to the improper handling of the absence of a specific element. Exploiting this vulnerability allows an attacker who operates remotely to carry out spoofing attacks...

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Azure DevOps Server software lies in the insufficient testing of server-side requests, which allows attackers to perform spearfishing attacks.

The vulnerability of the Azure DevOps Server software lies in insufficient testing of server-side requests. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...

The vulnerability of the Microsoft Visual Studio software lies in its inadequate control over code generation, which allows attackers to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software lies in the insufficient control over code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Microsoft Visual Studio Code’s editor, related to synchronization errors when using a shared resource (“Race Situation”), allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s editor is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

The vulnerability of Microsoft Defender for Endpoint on Linux operating systems, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of Microsoft Defender for Endpoint on Linux operating systems is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft Visual Studio software development tool, related to the lack of measures taken to clean data at the management level, allows attackers to enhance their privileges.

The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to clean up data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Microsoft Office suite is related to deficiencies in the deserialization mechanism, which allows attackers to execute spoofing attacks.

The vulnerability of the Microsoft Office package is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...