Mozilla Firefox Form Autofill Unauthorized Access

The vulnerability of Form Autofill functions in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

NSS Library DoS

The vulnerability in the NSS library used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Netty HttpObjectDecoder Data Compromise

The vulnerability of the HttpObjectDecoder component in the framework for developing network applications, servers, and Netty protocol clients is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected...

Drupal denormalize Code Execution

The vulnerability of the denormalize method in the FieldItemNormalizer class of the Drupal CMS system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PHP SoapServer Memory Leak Information Disclosure

The vulnerability of the SoapServer class in the PHP programming language is related to the use of memory after it is freed during the processing of the SOAPPERSISTENCESESSION parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information or...

Linux kernel act_pedit Heap Buffer Overflow DoS

The vulnerability of the tcfpeditact function in the actpedit module of Linux kernel systems is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

SAP NetWeaver SAML Unauthorized Access

The vulnerability of SAML authentication in SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Jenkins XStream RCE

The vulnerability of the XStream library used by Jenkins automation servers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to replace HTTP requests, gain unauthorized access to the Script Console, execute arbitrary code, or...

Dahua micro-programming software Reachability Assertion DoS

The vulnerability of Dahua device’s microprogramming software is related to an uncontrollable and exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted data packets...

SAP NetWeaver ABAP Data Compromise

The vulnerability of SAP software integration platforms such as SAP NetWeaver AS ABAP and SAP NetWeaver ABAP is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager Security Bypass

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

Adobe Experience Manager Security Bypass

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms or gain unauthorized access to recording operations...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

SINEC INS Network Hashing Brute Force

The vulnerability of the SINEC INS network infrastructure management software is related to the use of one-way hashing with predictable random data. Exploiting this vulnerability could allow an attacker to perform a brute-force attack and gain unauthorized access to protected information...

SINEC INS Network Path Traversal Unauthorized Access

The vulnerability of the SINEC INS network infrastructure management software is related to deficiencies in checking the path name when processing the final endpoint /api/sftp/uploadFiles. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

SAP NetWeaver Java Application Server Unauthorized Access

The vulnerability of web containers in SAP NetWeaver Java Application Servers is related to incorrect path name restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or cause service failures by sending specially...

Joomla JCE Code Execution

The vulnerability of the Joomla Content Editor JCE component of the Joomla content management system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Fortinet FortiSandbox GUI Command Execution

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems lies in the lack of measures taken to neutralize specific elements within the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through specially...

AWS CLI cli_history DoS

The vulnerability of the clihistory parameter in the AWS CLI command line tool, which is used to interact with Amazon Web Services, is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

Erlpack codec library gRPC Code Execution

The vulnerability of the Erlpack codec in the gRPC procedure call library for the Elixir programming language involves shortcomings in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

WorksPad Access Control Bypass

The vulnerability of the EMM solution WorksPad is related to errors in access control. Exploiting this vulnerability can allow a remote attacker to circumvent role-based restrictions...

Microsoft SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks...

Microsoft Excel Disclosure

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to reading data beyond the buffer in memory. Exploitation of this vulnerability can allow an attacker to disclose sensitive information...

Microsoft Office Data Type Conversion Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Azure Attestation Service Device Health Attestation Service Spoofing

The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

Windows DHCP Client Information Disclosure

The vulnerability of DHCP clients of Windows operating systems is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

BitLocker Security Bypass

The vulnerability of the BitLocker disk encryption technology for Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security measures...

Windows UI Automation Manager Privilege Escalation

The vulnerability of the Windows UI Automation Manager component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

MoTw Windows Disclosure

The vulnerability of the MoTw mechanism in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

Windows Kernel Mode Privilege Escalation

The vulnerability of the Kernel-mode operating system driver for Windows is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to increase their privileges...

ColdFusion Code Execution

The vulnerability of the ColdFusion interpreter is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ColdFusion Code Execution

The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ColdFusion Path Traversal

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...