UNIX Disk Format File System Driver Privilege Escalation

The vulnerability of the UNIX Disk Format File System Driver UDFS on Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

NGINX Gateway Fabric CRD Data Read Modify DoS

The vulnerability of the Custom Resource Definition CRD component of the NGINX Gateway Fabric web server controller is related to the failure to eliminate special elements when processing string values. Exploiting this vulnerability may allow an attacker to gain read and modify access to data, or...

Microsoft Exchange Server Spoofing

The vulnerability of Microsoft Exchange Server servers is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Microsoft Exchange Server servers

The vulnerability of Microsoft Exchange Server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Tracing Component Google Chrome DoS

The vulnerability of the Tracing component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

Guest mode Spoofing

The vulnerability of the Guest mode in Google Chrome browser is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...

Naumen Service Management Platform Auth Bypass RCE

The vulnerability of the Naumen Service Management Platform for automating IT and business processes is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT Application Inspector Access Control Unauthorized Access

The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CPython ast_for_if_stmt Pointer Arithmetic DoS

The vulnerability of the astforifstmt function in the CPython interpreter is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

D-Link DCS-933L SetSystemAdmin Command Execution

The vulnerability of the setSystemAdmin function in the embedded web server of the D-Link DCS-933L microprogramming software for IP cameras is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

PT Application Inspector Privilege Escalation

The vulnerability of the PT Application Inspector software lies in its lack of authentication. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

Mozilla Firefox JavaScript Engine Code Execution

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WebRTC Component DoS

The vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable to a resource consumption issue that is uncontrollable. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

OpenBSD mpls_do_error() Disclosure

The vulnerability of the mplsdoerror function in the sys/netmpls/mplsinput.c file of the OpenBSD operating system is related to the issue of operations going out of the buffer boundaries during the processing of MPLS tags. Exploitation of this vulnerability can allow a remote attacker to disclose...

phpMyFAQ Privilege Escalation

The vulnerability of the editUser and updateUserRights functions in the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Audio/Video components Code Execution

The vulnerability of the Audio/Video components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Widget Component Mozilla Firefox ESR Thunderbird Unauthorized Access

The vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird have vulnerabilities related to information processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Widget Component Code Execution

The vulnerability of the Widget component: The Cocoa browser components of Mozilla Firefox, Firefox ESR, and the email client Thunderbird rely on the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Mozilla Firefox DoS

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

WebRTC Component Compromise Data Compromise

The vulnerability of the WebRTC component: The signaling browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to dependencies on behaviors that are uncertain for each type of implementation. Exploiting this vulnerability allows a malicious actor to compromise...

VirtualBox VMSVGA Data Access

The vulnerability of the virtual graphics adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data...

Graphics Component DoS

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

GMP Audio/Video Component DoS

Vulnerability of Audio/Video components: The GMP browsers Mozilla Firefox and Firefox ESR, as well as the email client Thunderbird, are vulnerable due to insufficient checking of unusual or exceptional states. Exploitation of this vulnerability can allow a malicious actor to cause service failure...

Graphics Component DoS

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Audio/Video components Firefox ESR Thunderbird DoS

The vulnerability of the Audio/Video components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Palo Alto Networks GlobalProtect App Information Disclosure

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Prisma Access Agent Improper Protection

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to improper protection of the alternative path. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...

Linux rds_message_purge Data Compromise

The vulnerability of the rdsmessagepurge function in Linux kernel relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Layout component Text Fonts Firefox ESR Thunderbird DoS

The vulnerability of the Layout component: Texts and fonts in Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6greheader function in the net/ipv6/ip6gre.c module of the Linux operating system’s IPv6 kernel implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

FortiOS Command Line Code Execution

The vulnerability of the command-line interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to deficiencies in the mechanism for assigning internal resource access levels for debugging purposes. Exploiting this vulnerability allo...

Graphics Canvas2D DoS

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Netmonitor Privilege Escalation

The vulnerability of the Netmonitor component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

ProxySQL Proxy Protocol Bypass Data Access

The vulnerability of the PROXY protocol implementation in ProxySQL’s database server lies in the use of an unreliable data source during the loading of updates. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to read and modify data...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the calipsoskbuffsetattr function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Windows Ancillary Function Driver Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating system arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Ancillary Function Driver Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Content Credentials SDK Uncontrolled Resource Consumption DoS

The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...

Windows Microsoft PC Manager Privilege Escalation

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to lack of access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

VirtualBox VMSVGA Unauthorized Access

The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to errors in information processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Mozilla Firefox Thunderbird HTTP Bypass

The vulnerability of the Networking component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird rely on bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...

D-Link DNS-320 Arbitrary Command Execution

The vulnerability in the scripts systemmgr.cgi, accountmgr.cgi, dskmgr.cgi, and appmgr.cgi of the D-Link DNS-320 network storage software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability can allow an...

D-Link DNS-320 Arbitrary Command Execution

The vulnerability in the webfilemgrc.cgi script of the D-Link DNS-320 network storage software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

UTT HiPER 810G strcpy Buffer Overflow DoS

The vulnerability of the strcpy function /goform/formTaskEditap in the microprogrammed routing software UTT HiPER 810G is related to the operation that goes beyond the buffer boundaries in memory when processing the txtMin2 parameter. Exploiting this vulnerability can allow an attacker to cause...

Content Credentials SDK Path Traversal

The vulnerability of the Content Credentials SDK libraries exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a attacker to write to arbitrary files or directories using a specially created malicious file...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Content Credentials SDK Integer Overflow DoS

The vulnerability of the Content Credentials SDK libraries arises due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

Content Credentials SDK Uncontrolled Resource Consumption DoS

The vulnerability of Content Credentials SDK library functions is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Content Credentials SDK Insufficient Validation DoS

The vulnerability of the Content Credentials SDK libraries exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...