The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Blitz Identity Provider (Authentication server)

...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the ColdFusion software platform arises from an incorrect limitation on the path to the restricted access directory. This allows attackers to read arbitrary files.

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

The vulnerability of the epremove() function in Linux operating system kernels allows a hacker to execute arbitrary code.

The vulnerability of the epremove function in Linux operating system kernels relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the RAW-printing service of the microprogramming software for the multifunctional device EPSON L14150 allows a perpetrator to cause a service failure.

The vulnerability of the RAW-printing function of the Microprogramming Software for the EPSON L14150 multifunctional device lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the device...

The vulnerability of the check_session_buf_not_used() function in the tls-crypt-v2 software of OpenVPN allows a malicious individual to gain unauthorized access to protected information, cause service failures, or execute arbitrary code.

The vulnerability of the checksessionbufnotused function in the tls-crypt-v2 software of OpenVPN allows for the use of memory after it is freed. Exploiting this vulnerability could enable a remote attacker to cause a service failure or execute arbitrary code...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in a faulty path name limitation in the catalog access. This allows attackers to execute arbitrary commands or cause service failures.

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to an incorrect limit on the path name to the directory. Exploiting this vulnerability could allow a...

The vulnerability of the sppp_pap_input() function in the if_spppsubr.c script of the OpenBSD operating system allows a hacker to circumvent security restrictions.

The vulnerability of the sppppapinput function in the ifspppsubr.c script of the OpenBSD operating system is related to deficiencies in the mechanism for restricting the amount of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the Production component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—the automation system for enterprise business activities within the Oracle E-Business Suite—allows a perpetrator to gain full control over the application.

The vulnerability of the Production component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems related to Oracle E-Business Suite applications is related to deficiencies in access control. Exploiting this vulnerability cou...

The vulnerability of the ColdFusion software platform arises from an incorrect limitation on the path to the restricted access catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `net/textproto` component in the Go programming language allows a hacker to execute arbitrary code.

The vulnerability of the net/textproto component in the Go programming language is related to incorrect processing of output data for registration logs. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HostMatchList.checkIP method in the Git repository management system Gitea, which allows a hacker to perform an SSRF attack

The vulnerability of the HostMatchList.checkIP method in the Git repository management system Gitea is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

The vulnerability of the 10G iSCSI storage system interfaces of Hitachi Disk Array Systems allows a attacker to cause service interruptions.

The vulnerability of the 10G iSCSI storage system interfaces of Hitachi Disk Array Systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the ColdFusion software platform, related to insufficient validation of incoming requests, allows attackers to read arbitrary files.

The vulnerability of the ColdFusion software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

The vulnerability of the HTTP response processing flow application interface of the Python library Urllib3 allows a attacker to cause a service failure.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the createFunction() function in the executorUtils.ts file of the SandboxJS library allows a malicious actor to execute arbitrary code.

The vulnerability of the createFunction function in the executorUtils.ts file of the SandboxJS library is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the `close_sqleditor_session()` and `check_transaction_status()` functions in the pgAdmin 4 database management tool allows a hacker to execute arbitrary code.

The vulnerability of the closesqleditorsession and checktransactionstatus functions in the pgAdmin 4 database management tool is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of NetScaler ADC (formerly Citrix ADC) delivery controller and the NetScaler Gateway (formerly Citrix Gateway) access control system is related to improper external management of file names or paths, allowing attackers to gain unauthorized access to protected information.

The vulnerability of NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway access control systems is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the security plugin of the OpenSearch software package, which allows a hacker to increase their privileges

The vulnerability of the OpenSearch software security plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the ColdFusion software platform arises from an incorrect restriction on the path to the restricted directory. This allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Mattermost instant messaging application, related to a breach of data protection mechanisms, allows attackers to circumvent existing security measures.

The vulnerability of the Mattermost instant messaging application is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

The vulnerability of the Go programming language’s MIME component, which allows a hacker to trigger a service failure

The vulnerability of the Go programming language’s MIME component is related to its algorithmic complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using a specially created MIME header...

The vulnerability of the Internal Operations component of the Oracle HR Intelligence system, which is used for collecting and analyzing company personnel data. This component is part of the Oracle E-Business Suite, a business automation solution. This vulnerability allows attackers to gain full control over the application.

The vulnerability of the Internal Operations component of the Oracle HR Intelligence system, which is used for collecting and analyzing employee data, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain full control over the application using...

The vulnerability of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) relates to the occurrence of operations outside the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

The vulnerability of the NetScaler ADC application delivery controller (previously Citrix ADC) and the NetScaler Gateway virtual environment access control system (previously Citrix Gateway) relates to the occurrence of operations outside the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow ...

The vulnerability of the drm_gem_change_handle_ioctl() function in the Direct Rendering Manager (DRM) subsystem of Linux kernels allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the changehandle function in the Direct Rendering Manager DRM subsystem of Linux kernels relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the GitHub authentication provider for Kubernetes Rancher’s cluster management software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the GitHub authentication provider for Kubernetes Rancher software management systems is related to flaws in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the /goform/ConfigWirelessBase_5g file of the Web Endpoint component of the microprogramming software for routers UTT HiPER 1250GW allows a attacker to cause a service failure.

The vulnerability of the /goform/ConfigWirelessBase5g file of the Web Endpoint component of the microprogramming software for routers UTT HiPER 1250GW is related to the escape of operations from the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the SSH server of the Git repository management system Gitea, which allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the SSH server of the Git repository management system Gitea is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected informatio...

The vulnerability of the export module of the TimescaleDB application programming interface for the Glances monitoring tool allows a perpetrator to escalate their privileges or execute arbitrary code.

The vulnerability of the export module of the TimescaleDB application programming interface for the Glances monitoring tool is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges or execut...

The vulnerability of the ColdFusion software platform, related to the unlimited loading of dangerous type files, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ColdFusion software platform, related to the unlimited loading of dangerous type files, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HTTPConnection.urlopen() method in the HTTP library of the Urllib3 Python programming language, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ipv6_rpl_srh_rcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv6rplsrhrcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow a remote attacker to compromise t...

The vulnerability of the Rack::Request component in the Ruby programming language’s Rack web server module allows attackers to circumvent existing security restrictions.

The vulnerability of the Rack::Request component in the Ruby-based Rack web server module interface is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability in the web interface of the Cisco Crosswork Network Controller (CNC) allows a attacker to execute arbitrary commands.

The vulnerability of the web-based interface for controlling the Cisco Crosswork Network Controller CNC is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the execute_sql_query() function in the pgAdmin 4 database management tool’s AI assistant allows a hacker to gain access to modify data or execute arbitrary code.

The vulnerability of the executesqlquery function in the pgAdmin 4 database management tool’s AI assistant involves a lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker to gain access to modify data or execute arbitrary code...

The vulnerability of the bookmark synchronization function in Google Chrome allows a hacker to inject arbitrary scripts or HTML code (UXSS).

The vulnerability of the Google Chrome browser’s bookmark synchronization function is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary scripts or HTML code through a specially created HTML page...

The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows attackers to bypass existing security mechanisms.

The vulnerability of the Mattermost instant messaging application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the CoAP Handler Block1 in the open-source implementation of the LightWeight Machine-to-Machine (LwM2M) protocol, Eclipse Wakaama, allows a attacker to cause a service failure.

The vulnerability of the CoAP Block1 handler in the open-source implementation of the LightWeight Machine-to-Machine LwM2M protocol, Eclipse Wakaama, involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...