98400 matches found
PDF Memory Read DoS
The vulnerability of PDF file viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the reading of data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by opening the malicious fi...
PDF Memory Use Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
PDF Memory Use Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
PDF Memory Disclosure
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow attackers to disclose protected information by opening the malicious file...
Windows Remote Desktop Client RCE
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Office Code Execution
The vulnerability of the Microsoft Office suite is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Blitz Identity Provider XSS
The vulnerability of the Blitz Identity Provider software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
Nuance PowerScribe Code Execution
The vulnerability of the Nuance PowerScribe professional speech recognition and document automation platform is related to the lack of a disassembly mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...
Microsoft Cryptographic Services Privilege Escalation
The vulnerability of Microsoft Cryptographic Services in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to gain increased privileges...
PDF Viewing Integer Overflow Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a...
PDF Memory Use Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
Windows Remote Desktop Client RCE
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Hyper-V Component Code Execution
The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
HTTP.sys Code Execution
The vulnerability of the HTTP.sys driver in the Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Windows Deployment Services Code Execution
The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
DHCP Client Service Windows Code Execution
The vulnerability of the DHCP Client Service for Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Active Directory Domain Services Code Execution
The vulnerability of Active Directory Domain Services is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Remote Desktop Client Code Execution
The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PDF viewing and editing programs uncontrolled search path arbitrary code
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 are related to an uncontrolled search path element. Exploiting these vulnerabilities can allow attackers to execute arbitrary code by opening malicious files...
PDF Memory Use Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening the malicious file...
Apache Tomcat Information Disclosure
The vulnerability of the Apache Tomcat application server is related to the exposure of information due to timing discrepancies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Webview API XSS
The vulnerability of the Webview API of the Visual Studio Code editor is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a remote attacker to replace data and perform cross-site scripting attacks...
Microsoft Windows Defender Privilege Escalation
The vulnerability of Microsoft Windows Defender operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to gain increased privileges...
D-Link DGS-1100-08PD Privilege Escalation
The vulnerability of the web interface of D-Link DGS-1100-08PD microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
WebRTC Code Execution
The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WebML Component Unauthorized Access
The vulnerability of the WebML component in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker, acting remotely, to gain unauthorized access to protected information...
Web Serial API Sandbox Bypass
The vulnerability of the Web Serial API interface in Google Chrome and Microsoft Edge browsers on Android operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...
Tenda W15E DoS
The vulnerability of the formModifyWebAuthUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserPwd parameter. Exploiting this vulnerability could allow an attacker to cause a...
Tenda W15E DoS
The vulnerability of the formCropAndSetWewifiPic function in the microprogramming software for Tenda W15E routers is related to the issue of the operation exceeding the buffer boundaries in memory when processing the picCropName parameter. Exploiting this vulnerability could allow an attacker to...
Tenda W15E Router DoS
The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...
Tenda W15E DoS
The vulnerability of the formCropAndSetWewifiPic function in the microprogramming software for Tenda W15E routers is related to the issue of the operation exceeding the buffer boundaries in memory when processing the picCropName parameter. Exploiting this vulnerability could allow an attacker to...
Tenda W15E DoS
The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...
HTTP.sys DoS
The vulnerability of the HTTP.sys driver on Windows operating systems is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Check Point Security Gateways IKEv1 Man-in-the-Middle
The vulnerability of the Internet Key Exchange IKEv1 protocol implemented by Check Point Security Gateways and Check Point Spark Firewall is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks and...
ZenML PathMaterializer Code Execution
The vulnerability of the PathMaterializer class in the ZenML machine learning pipeline creation framework is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
OpenClaw Authorization Bypass
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect authorization process based on a list of permitted senders. Exploiting this vulnerability could allow a hacker to bypass existing security mechanisms...
ANGLE Library Unauthorized Access
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Tenda W15E DoS
The vulnerability of the formAddWebAuthWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteUserInfo parameter. Exploiting this vulnerability could allow a malicious actor...
CPython Debugging Bypass
The vulnerability of the debugging function in the CPython interpreter relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
Adobe InDesign Buffer Overflow
The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
WebUSB API Sandbox Bypass
The vulnerability of the WebUSB API interface in Google Chrome and Microsoft Edge browsers on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...
Tenda W15E Router DoS
The vulnerability of the formModifyWebAuthWhiteUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteID parameter. Exploiting this vulnerability could allow a malicious actor to...
Tenda W15E DoS
The vulnerability of the formDelStaState function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the macAddr parameter. Exploiting this vulnerability can allow a remote attacker to cause a service...
Keras Model Code Execution
The vulnerability of the Model.loadmodel function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Ollama System Data Compromise Check Missing
The vulnerability of the Ollama system for running and managing large language models is related to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
OpenClaw Synchronization Bypass Unauthorized Access
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain unauthorized access to protected information...
Tenda W15E DoS
The vulnerability of the formPortalAuth function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the gotoUrl parameter. Exploiting this vulnerability allows a malicious actor to cause service failure b...
Universal Import SSRF
The vulnerability of the “Universal Import” module is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
Adobe InDesign Zero Pointer DoS
The vulnerability of Adobe InDesign’s computer layout automation tool is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...
D-Link DCS-5615 Boa Webserver Privilege Escalation
The vulnerability of the Boa Webserver component in the microprogramming-based D-Link DCS-5615 IP camera is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...