98400 matches found
RuBackup Access Control Unauthorized Access
The vulnerability of the RuBackup backup system is related to errors in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Service Task Priorities” panel...
Braille support module Privilege Escalation
The vulnerability of the Braille support module in the text-to-speech application for blind and visually impaired users like Narrator is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
Secure Boot Bypass
The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Windows Bluetooth Service Privilege Escalation
The vulnerability of the Windows Bluetooth Service in the operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Windows Push Notifications Privilege Escalation
The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Windows Telephony Service Privilege Escalation
The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
UxTheme Library DoS
The vulnerability of the UxTheme Library uxtheme.dll in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Microsoft Office Microsoft 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
Adobe InDesign Buffer Overflow Info Disclosure
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...
Google Chrome Microsoft Edge UI Replacement
The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to replace the user’s interface with malicious network traffic...
Safe Browsing Service Code Execution
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...
Windows Graphics Component Code Execution
The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Python HTTP/2 Decoder DoS
The vulnerability of the HTTP/2 decoder implementation in Python programming language is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Ghost SQL Injection Unauthorized Access
The vulnerability of the Ghost content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PhpSpreadsheet SSRF Code Execution
The vulnerability of the functions File::prohibitWrappers and IOFactory::load in the PHP spreadsheet library PhpSpreadsheet is related to deficiencies in the deserialization mechanism when processing the parameter filename. Exploiting this vulnerability can allow an attacker to perform an SSRF...
Winlogon Privilege Escalation
The vulnerability of the Winlogon entry program in Windows operating systems is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Push Notification Service Disclosure
The vulnerability of the Windows Push Notification Service relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to disclose sensitive information that is protected by this service...
Windows Push Notification Service Disclosure
The vulnerability of the Windows Push Notification Service relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to disclose sensitive information that is protected by this service...
Tab Hover Cards Component Domain Substitution
The vulnerability of the Tab Hover Cards component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace a domain name using a created domain name...
Google Chrome Microsoft Edge Bypass Security
The vulnerability of Google Chrome and Microsoft Edge browser-based services is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through the created HTML pages...
Tab Strip Control XSS
The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform domain substitution through a created HTML page...
Windows Ancillary Function Driver WinSock Privilege Escalation
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Notepad++ isInTrustedDirectory Code Execution
The vulnerability of the isInTrustedDirectory function in the RunDlg.cpp script of the Notepad++ text editor is related to the ambiguity of the path handling. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
NVIDIA Display Driver Privilege Escalation
The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow attackers to increase their privileges, cause service failures, and execute...
X.Org Server Privilege Escalation
The vulnerability of the FreeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow a malicious...
Universal Robots PolyScope Dashboard Server Code Execution
The vulnerability of the Dashboard Server interface of the Universal Robots PolyScope software lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Web Codecs Code Execution
The vulnerability of the Web Codecs component in Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
DHCP Server Unauthorized Access
The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Function Discovery Service Privilege Escalation
The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
Kerberos Protocol DoS
The vulnerability of the Kerberos protocol for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Wayland Protocol Privilege Escalation
The vulnerability of the miSyncDestroyFence function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow a malicious actor to increase their privileges and cause...
Microsoft Office Buffer Overflow Code Execution
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint Enterprise Server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
1C-Bitrix Geo: Employee Birthdays SQL Injection
Vulnerability of the “Geo: Employee Birthdays” module in the Content Management System CMS of 1C-Bitrix: Failure to protect the SQL query structure allows an attacker to execute arbitrary code remotely...
Foldable API Bypass
The vulnerability of the API for working with foldable devices involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...
Google Chrome Microsoft Edge Sandbox Bypass
The vulnerability of Google Chrome and Microsoft Edge web browsers’ Bluetooth components stems from the absence of a mechanism for verifying input data on the server side. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...
Windows Push Notifications Privilege Escalation
The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
X.Org XWaylan Heap Buffer Overflow Privilege Escalation
The vulnerability of the XkbSetMapChecks function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow...
X.Org Server Privilege Escalation
The vulnerability of the SyncChangeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious...
Cargo Package Manager Non-canonical URL Path
The vulnerability of the Cargo package manager in the Rust programming language is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Mozilla Firefox Data Protection Violation
The vulnerability of Mozilla Firefox and Firefox Focus is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Firefox Thunderbird Code Execution
The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client is related to the use of an untrusted network policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
DWM Core Library Privilege Escalation
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows kernel Privilege Escalation
The vulnerability of Windows operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Adobe InDesign Buffer Overflow RCE
The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Windows Graphics Component Code Execution
The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Windows kernel Privilege Escalation
The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...