Oracle E-Business Suite File Transmission Full Control

The vulnerability of the File Transmission component in the Oracle Payments module of the Oracle E-Business Suite lies in the insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application through the HTTP network protocol...

Linux kernel networking function Heap Buffer Overflow DoS

The vulnerability of the monhandleauthdone function in the net/ceph/monclient.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

GitLab Web Page Structure Code Execution

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

GitLab Code Generation Data Compromise

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to improper code generation management. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

Splunk Enterprise Access Control Data Compromise

The vulnerability of the Splunk Enterprise platform for operational analysis is related to access control errors, which allow attackers to compromise the integrity of the protected information...

Splunk Enterprise Data Compromise

The vulnerability of the Splunk Enterprise platform for operational analysis is related to improper handling of data with Unicode encoding. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Splunk Web Platform Code Execution

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise relates to insecure temporary files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Grav CMS Privilege Escalation

The vulnerability of the Grav API plugin of the Grav CMS content management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Pix-Link LV-WR21Q DoS

The vulnerability of the final point /goform/getHomePageInfo of the Pix-Link LV-WR21Q router’s microprogramming system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Mattermost Information Disclosure

The vulnerability of the Mattermost instant messaging application is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Dell PowerFlex Manager PowerFlex Appliance Rack Cryptographic Algorithm Security Bypass

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack are related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting these vulnerabilities can allow attacke...

Dell PowerFlex Manager Data Storage

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to disclose protected...

Dell PowerFlex Manager Privilege Escalation

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack is related to improper privilege assignment. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux kernel NTFS Index Read Buffer Overflow DoS

The vulnerability of the indxread function in the fs/ntfs3/index.c module of the NTFS file system in the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

imxfb_probe Heap Buffer Overflow DoS

The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c driver for kernel-based graphics device drivers in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service...

Remote Function Call module Information Disclosure

The vulnerability of the Remote Function Call module in the SAP Operational Data Provisioning Data Replication API ODP-RFC infrastructure is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

CommvaultSecurityIQ Plugin Bypass

The vulnerability of the CommvaultSecurityIQ plugin in the security platforms Cortex XSOAR and Cortex XSIAM is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

uvc driver Heap Buffer Overflow DoS

The vulnerability of the uvc gpioparse function in the drivers/media/usb/uvc/uvcdriver.c file of the Linux operating system’s multimedia device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

lt9611_connector_init DRI DoS

The vulnerability of the lt9611connectorinit function in the drivers/gpu/drm/bridge/lontium-lt961.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

NGINX Plus/Open Source Unauthorized Access

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...

cas-auth Plugin CSRF

The vulnerability of the cas-auth plugin for the Apache APISIX cloud API lies in the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

openid-connect Plugin Spear Phishing

The vulnerability of the openid-connect plugin for the Apache APISIX cloud API gateway is related to insufficient verification of data authenticity when processing identification headers. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...

ABAP Application Server Privilege Escalation

The vulnerability of ABAP application servers and SAP NetWeaver AS ABAP/ABAP Platform software integration platforms is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Apache Shiro DefaultLdapRealm Bypass

The vulnerability of the DefaultLdapRealm class in the Apache Shiro framework is related to the failure to eliminate special elements in LDAP requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform data substitution...

SAP Master Data Governance Review Match Groups Privilege Escalation

The vulnerability of the “Review Match Groups Application” component in the SAP Master Data Governance data management platform is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

SAP Wily Introscope Enterprise Manager XSS

The vulnerability of the server for collecting, storing, and displaying performance data in SAP SAP Wily Introscope Enterprise Manager is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

SAP Business Objects Business Intelligence Platform Data Source Confirmation

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability could allow a malicious actor to replace the sender of an email message...

SAP S/4HANA Finance SQL Injection Info Disclosure

The vulnerability of the SAP S/4HANA Finance financial management software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to confidential information...

SAP Fiori Business Application Unauthorized Access

The vulnerability of the SAP Fiori business application design platform’s startup panel is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the user account...

SINEC INS Network Management SINEC INS Network Management

The vulnerability of the endpoint /api/sftp/uploadFiles in the SINEC INS network management software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with system user privileges...

SINEC INS Privilege Escalation

The vulnerability of the SINEC INS network infrastructure management software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Direct Rendering Infrastructure Kernel Module Heap Buffer Overflow DoS

The vulnerability of the drmcopyfield function in the drivers/gpu/drm/drmioctl.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

vp_vdpa_remove() Heap Buffer Overflow DoS

The vulnerability of the vpvdparemove function in the drivers/vdpa/virtiopci/vpvdpa.c file of the vDPA device driver in the Linux operating system is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...

Linux ARM Platform Heap Buffer Overflow DoS

The vulnerability of the realtimecounterinit function in the arch/arm/mach-omap2/timer.c module of the Linux operating system’s ARM platform support module is related to improper memory release „memory leak“. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel smb3_validate_negotiate Buffer Overflow DoS

The vulnerability of the smb3validatenegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to incorrect resource initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

mmc/host/alcor.c Heap Buffer Overflow DoS

The vulnerability of the alcorpcisdmmcdrvprobe function in the mmc/host/alcor.c driver module for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

rtlwifi rtl8192cu TX Fill Desc Overflow DoS

The vulnerability of the rtl92cutxfilldesc function in the drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c module of the Realtek wireless communication adapter driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to...

Linux RPC Protocol Heap Buffer Overflow DoS

The vulnerability of the svcrdmacopyInlinerange function in the net/sunrpc/xprtrdma/svcrdmarw.c module of the Linux operating system’s RPC protocol is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker ...

Linux kernel alloc_choose_arg_map Heap Buffer Overflow DoS

The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Linux Kernel BPF Buffer Overflow DoS

The vulnerability of the bpfprogattach function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to trigger a servic...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qcomaddsysmonsubdev function in the drivers/remoteproc/qcomsysmon.c module of the Linux kernel subsystem for remote processors is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Direct Rendering Infrastructure AMD Powerplay Heap Buffer Overflow DoS

The vulnerability of the ppsetfinegrainclkvol function in the driver/gpu/drm/amd/pm/powerplay/amdpowerplay.c file of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability...

Linux isp1301_get_client() DoS

The vulnerability of the isp1301getclient function in the drivers/usb/phy/phy-isp1301.c file of the Linux device driver framework is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Gitea act_runner Privilege Escalation

The vulnerability of the act Runner component in the Git repository management system Gitea is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Apache APISIX URL Redirection

The vulnerability of the Apache APISIX cloud API gateway involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address remotely...

Endpoint Manager Mobile Arbitrary Command Execution

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a...

Cisco ASA FTD Service Outage

The vulnerability of the Remote Access SSL VPN microprogramming network interface layer software developed by Cisco Adaptive Security Appliance ASA and Cisco Secure Firewall Threat Defense FTD is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious...

Adobe SDK DNG Buffer Overflow Info Disclosure

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose confidential information by opening the malicious file...

Azure Active Directory Privilege Escalation

The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Graphics Canvas2D DoS

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect handling of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...