UTT HiPER 810G Router strcpy Buffer Overflow DoS

The vulnerability of the strcpy function /goform/formConfigDnsFilterGlobal in the UTT HiPER 810G router software lies in the possibility of the operation being executed outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Tenda F453 Router fromSetCfm() Code Execution

The vulnerability of the fromSetCfm function /goform/setcfm of the Tenda F453 router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the funcname and funcpara1 parameters. Exploiting this vulnerability allows a remote attacker to execute...

Tenda F453 Router Sub_3C6C0 Function Code Execution

The vulnerability of the sub3C6C0 function /goform/QuickIndex of the Tenda F453 router’s microprogramming system is related to the operation that goes beyond the buffer in memory when processing parameters mitlinktype and PPPOepassword. Exploiting this vulnerability allows a remote attacker to...

D-Link DIR-513 Router FormEasySetTimezone Heap Buffer Overflow DoS

The vulnerability of the formEasySetTimezone function /goform/formEasySetTimezone in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside of the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could...

Netlogon Remote Protocol Authentication Bypass

The vulnerability of the Netlogon Remote Protocol NRPC implementation in Windows operating systems arises from the use of a fixed zero initialization vector during data encryption in AES-CFB8 mode. Exploiting this vulnerability allows an attacker to bypass authentication procedures and gain...

libcurl HTTP/2 Dependency Management DoS

The vulnerability of the dependency management mechanism for HTTP/2, as well as the libcurl library used in the cURL client software for interacting with servers, relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to caus...

Oracle WebCenter Content Unauthorized Access

Vulnerability of the Core component of the Oracle WebCenter Content application: The Imaging platform of Oracle WebCenter Content is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Run Control Management component

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to access and modify or delet...

Oracle WebCenter Content Unauthorized Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, update, or delete protected information...

Cluster NDB Operator Privilege Escalation

Vulnerability of the Cluster component: The NDB Operator technology for distributed data storage in MySQL NDB Cluster is vulnerable due to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and cause service failures using the HTTP...

ansible.posix authorized_key Privilege Escalation

The vulnerability of the keyfile function in the ansible.posix.authorizedkey module is related to the incorrect definition of symbolic links when managing SSH keys. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Linux USB audio driver Heap Buffer Overflow DoS

The vulnerability of the sndusbcreatestreams function in the Linux operating system’s USB audio driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sched/cls_u32.c DoS

The vulnerability in the net/sched/clsu32.c module of Linux kernel systems is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel sendmsg DoS

The vulnerability of the sendmsg function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

AnyDesk Buffer Overflow

The vulnerability of AnyDesk remote access and management software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted package...

MySQL PostgreSQL ProxySQL Memory Corruption

The vulnerability of the MySQL and PostgreSQL proxy-server protocol implementations relates to the execution of operations outside the memory buffer. Exploiting this vulnerability can allow a malicious actor to induce memory corruption...

ImageColumn ImageEntry Component XSS

The vulnerability of the ImageColumn and ImageEntry components in the full stack of components for accelerated development of the Filament PHP framework Laravel is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor to perform...

Oracle WebCenter Content Unauthorized Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, create, delete, and modify protected information...

Oracle WebCenter Content Unauthorized Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, create, delete, and modify protected...

Run Control Management component Unauthorized Access

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the drmdpgetadjustrequestpostcursor function in the drivers/gpu/drm/drmdphelper.c module of Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Linux Queue RQ DoS

The vulnerability of the queuerq function in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the mt6370probe function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel MLME DoS

The vulnerability in the net/wireless/mlme.c module of Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause service failures...

Linux icc_bw_set() DoS

The vulnerability of the iccbwset function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux net/ipv6 icmp Heap Buffer Overflow DoS

The vulnerability of the ip6errgenicmpv6unreach function in the net/ipv6/icmp.c module of the Linux operating system is related to access to resources through incompatible types. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or caus...

libcurl Certificate Validation

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to remotely replace data or gain unauthorized access to protected information...

QUIC libcurl UDP Packet Reception DoS

The vulnerability of the UDP packet reception function in the QUIC library of the cURL software for interacting with servers is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux virt_wifi Module Buffer Overflow DoS

The vulnerability in the drivers/net/wireless/virtual/virtwifi.c module of the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/crypto/ccp/sev-dev.c DoS

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/crypto/ccp/sev-dev.c DoS

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

libcurl WebSocket DoS

The vulnerability of the WebSocket component in the libcurl library of the cURL software’s server interaction mechanism is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Dell Elastic Cloud Storage Privilege Escalation

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux f2fs_rename Heap Buffer Overflow DoS

The vulnerability of the f2fsrename function in the Linux operating system is related to a potential memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux drivers/crypto/ccp/sev-dev.c DoS

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux net/rxrpc/key.c Heap Buffer Overflow DoS

The vulnerability in the net/rxrpc/key.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle E-Business Suite Knowledge Integration Sub-component Unauthenticated Access

The vulnerability of the Knowledge Integration sub-component of the Oracle HCM Common Architecture component in the Oracle E-Business Suite relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

Oracle WebLogic Server Data Compromise

The vulnerability of the Oracle WebLogic Server application server’s Core component is related to access control errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Oracle Financial Services Analytical Applications Infrastructure Unauthorized Access

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP request...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the Web Services component of the Oracle WebLogic Server application server is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP...

PeopleSoft Enterprise SCM Purchasing Unauthorized Access

The vulnerability of the Purchasing component in Oracle PeopleSoft Enterprise SCM Purchasing is related to deficiencies in access control. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

Oracle Identity Manager Connector DoS

The vulnerability of the Core component of the Oracle Identity Manager Connector, a software solution for managing user accounts and access rights, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...

OpenBao Secret Encryption Management System Code Execution

The vulnerability of the OpenBao encryption and secret management system lies in the lack of measures taken to protect the SQL query structure during PostgreSQL database processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

IBM Jazz Foundation Authorization Bypass

The vulnerability of the integrated environment for managing the development lifecycle of IBM Jazz Foundation is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

Dell Elastic Cloud Storage ObjectScale Disclosure Sensitive Information

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these systems...

IBM Jazz Foundation XXE

The vulnerability of the integrated environment for managing the development lifecycle of IBM Jazz Foundation relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

Dell Elastic Cloud Storage CSV Code Execution

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the absence of mechanisms to neutralize certain elements in CSV files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Oracle Database Server Java VM Unauthorized Access

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device via network packets...

PeopleSoft Research Tracking Unauthorized Access

The vulnerability of the Research Tracking component in the PeopleSoft Enterprise CS Student Records module of the Oracle PeopleSoft business application suite is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the...

OpenBao encryption Privilege Escalation

The vulnerability of the OpenBao encryption and secret management system is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...