98400 matches found
Windows NT OS Kernel Privilege Escalation
The vulnerability of the Windows NT OS Kernel component involves overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Ancillary Function Driver WinSock Privilege Escalation
The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft Office Memory Read Arbitrary Code
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Excel Disclosure
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to reading data beyond the buffer in memory. Exploitation of this vulnerability can allow an attacker to disclose sensitive information...
Azure HorizonDB Authentication Bypass Privilege Escalation
The vulnerability of the Azure HorizonDB database service relates to the bypassing of authentication processes through phising techniques. Exploiting this vulnerability can allow attackers to gain increased privileges remotely...
Windows UEFI boot interface bypass security
The vulnerability of the Windows UEFI boot interface in operating systems involves a violation of data protection mechanisms. Exploiting this vulnerability can allow attackers to bypass existing security measures...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or circumvent existing security restrictions...
Adobe Experience Manager XSS
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to inject malicious scripts into vulnerable fields within the system...
Linux TCP Write Xmit DoS
The vulnerability of the tcpwritexmit function in Linux operating systems is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability allows an attacker to cause service failures remotely...
Microsoft Office Data Type Conversion Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
ColdFusion Auth Bypass Privilege Escalation
The vulnerability of the ColdFusion interpreter is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
Adobe Experience Manager XSS
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code within the authorized user’s session...
Updates Environment Management Code Execution
The vulnerability of the Updates Environment Management component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...
Adobe Dreamweaver Code Execution
The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Adobe Dreamweaver File Read
The vulnerability of the Adobe Dreamweaver HTML editor is related to insufficient validation of input data. Exploiting this vulnerability may allow attackers to read arbitrary files...
MFlash file-sharing Platform Unauthorized Access
The vulnerability of the MFlash file-sharing platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
Universal Plug and Play Device Host Service Code Execution
The vulnerability of the Universal Plug and Play UPnP Device Host Service in Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Microsoft SharePoint Server Spoofing
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
Microsoft Office Buffer Overflow Information Disclosure
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
NTFS File System Code Execution
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Substance 3D Sampler Buffer Overflow RCE
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Substance 3D Sampler Buffer Overflow RCE
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Substance 3D Sampler Buffer Overflow RCE
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Dreamweaver Code Execution
The vulnerability of the Adobe Dreamweaver HTML editor is related to its dependence on a vulnerable external component. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Windows BitLocker Data Encryption
The vulnerability of Windows operating systems lies in the possibility of copying the unattend.xml file and the Recovery directory along with the ReAgent.xml file to the recovery partition’s root directory, due to insufficient protection of service data. Exploiting this vulnerability can allow an...
Microsoft Office Buffer Overflow Information Disclosure
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
PAN-OS Management Web Interface Code Execution Root Privileges
The vulnerability of the Management Web Interface component of the PAN-OS operating system relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code with root...
FreeBSD Kernel TLS Privilege Escalation
The vulnerability of the Kernel TLS KTLS technology in FreeBSD systems is related to inadequate control over resources throughout their entire lifecycle. Exploiting this vulnerability can allow attackers to enhance their privileges...
Adobe Dreamweaver Authentication Bypass Info Disclosure
The vulnerability of the Adobe Dreamweaver HTML editor is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to read arbitrary files...
Substance 3D Sampler Buffer Overflow RCE
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe InCopy Buffer Overflow RCE
The vulnerability of the Adobe InCopy text creation and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Ancillary Function Driver WinSock Privilege Escalation
The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
Microsoft Visual Studio Code Editor Path Traversal
The vulnerability of Microsoft Visual Studio Code’s editor is related to errors in handling relative pathnames to directories. Exploiting this vulnerability can allow an attacker to gain read and modify access to data remotely...
Adobe Dreamweaver Auth Bypass RCE
The vulnerability of the Adobe Dreamweaver HTML editor is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Adobe InCopy Buffer Overflow RCE
The vulnerability of the Adobe InCopy text creation and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe InCopy Buffer Overflow RCE
The vulnerability of the Adobe InCopy text creation and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Universal Plug and Play Device Host Service Code Execution
The vulnerability of the Universal Plug and Play UPnP Device Host Service in Windows operating systems is related to data type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Secure Boot Bypass
The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent existing security restrictions...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...