98400 matches found
Tenda W15E Router DoS
The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...
Tenda W15E DoS
The vulnerability of the formDelStaState function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the macAddr parameter. Exploiting this vulnerability can allow a remote attacker to cause a service...
CTFMON Privilege Escalation
The vulnerability of the Collaborative Translation Framework CTFMON in Windows operating systems is related to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
CPython Debugging Bypass
The vulnerability of the debugging function in the CPython interpreter relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
Adobe InDesign Buffer Overflow
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Adobe InDesign Buffer Overflow
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Adobe InDesign Buffer Overflow
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Adobe InDesign Zero Pointer DoS
The vulnerability of Adobe InDesign’s computer layout automation tool is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...
Universal Import Module Code Execution
The vulnerability of the “Universal Import” module is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
OpenClaw Authorization Bypass
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect authorization process based on a list of permitted senders. Exploiting this vulnerability could allow a hacker to bypass existing security mechanisms...
Ollama Loader Unauthenticated Access
The vulnerability of the loader for GGUF models in the Ollama system, which is used to run and manage large language models, involves reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Ivanti Sentry Arbitrary Command Execution Root Privileges
The vulnerability of the built-in mobile security firewall, Ivanti Sentry, is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...
Google Chrome V8 Engine Code Execution
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the nftmapcatchallactivate function in the nftables component of the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
D-Link DGS-1100-08PD Privilege Escalation
The vulnerability of the web interface of D-Link DGS-1100-08PD microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Web Serial API Sandbox Bypass
The vulnerability of the Web Serial API interface in Google Chrome and Microsoft Edge browsers on Android operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...
Tenda W15E DoS
The vulnerability of the formPortalAuth function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the gotoUrl parameter. Exploiting this vulnerability allows a malicious actor to cause service failure b...
Tenda W15E DoS
The vulnerability of the formCropAndSetWewifiPic function in the microprogramming software for Tenda W15E routers is related to the issue of the operation exceeding the buffer boundaries in memory when processing the picCropName parameter. Exploiting this vulnerability could allow an attacker to...
Tenda W15E Router DoS
The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...
Tenda W15E DoS
The vulnerability of the formAddWebAuthWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteUserInfo parameter. Exploiting this vulnerability could allow a malicious actor...
Tenda W15E fromSetDhcpRules DoS
The vulnerability of the fromSetDhcpRules function in the Tenda W15E router software is related to the operation that goes beyond the buffer in memory when processing the bindMACAddr parameter. Exploiting this vulnerability allows a remote attacker to trigger a service failure by sending a...
Tenda W15E DoS
The vulnerability of the formAddWebAuthWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteUserInfo parameter. Exploiting this vulnerability allows a malicious actor to...
Tenda W15E DoS
The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...
Check Point Security Gateways IKEv1 Man-in-the-Middle
The vulnerability of the Internet Key Exchange IKEv1 protocol implemented by Check Point Security Gateways and Check Point Spark Firewall is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks and...
Adobe InDesign Buffer Overflow
The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Adobe InDesign Buffer Overflow
The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Adobe InDesign Buffer Overflow
The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
Universal Import SSRF
The vulnerability of the “Universal Import” module is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
ANGLE Library Bypass Sandbox
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing protection mechanisms...
ANGLE Library Unauthorized Access
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
ANGLE Library Unauthorized Access
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Tenda W15E DoS
The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserInfo parameter. Exploiting this vulnerability could allow a malicious actor to cause...
Go Reverse Proxy SSRF
The vulnerability of the built-in reverse proxy server in the Go programming language is related to insufficient checking of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...
Tenda W15E DoS
The vulnerability of the formAddWebAuthUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the webAuthUserPwd parameter. Exploiting this vulnerability could allow a malicious actor to cause...
Tenda W15E Router DoS
The vulnerability of the formModifyWebAuthWhiteUser function in the Tenda W15E router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the webAuthWhiteID parameter. Exploiting this vulnerability could allow a malicious actor to...
AIDE Pointer Assignment DoS
The vulnerability of the AIDE intrusion detection system is related to errors in pointer assignment. Exploiting this vulnerability could allow an intruder to trigger a service failure...
Content Container Authentication Bypass
The vulnerability of the tools for storing and delivering content within containers like Distribution is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
user interfaces of Microsoft
The vulnerability of Microsoft Edge and Google Chrome browser user interfaces is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the interface with a specially created HTML page...
Cronet web component domain replacement
The vulnerability of the Cronet web component of Google Chrome is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace a domain name using a specially created domain name...
BlackVue Dashcam 590X HTTP Endpoint DoS
The vulnerability of the HTTP Endpoint component of the /upload.cgi file in the BlackVue Dashcam 590X microprogramming system is related to access control errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
QStar Archive Solutions Code Execution
The vulnerability of the software for working with QStar Archive Solutions is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WINSTAR WN572HP3 CONTENT_LENGTH Code Execution
The vulnerability of the CONTENTLENGTH component in the /cgi-bin/upload.cgi file of the Wi-Fi signal booster software WINSTAR WN572HP3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
MessagePack NodeJS/JavaScript msgpackr Heap Buffer Overflow DoS
The vulnerability of the ExtensionValue getData implementation in MessagePack NodeJS/JavaScript msgpackr is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
openDCIM Code Execution
The vulnerability of the openDCIM software for managing data centers’ infrastructure is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Keras Model Code Execution
The vulnerability of the Keras Model.loadmodel function in the Keras library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Bitwarden XSS
The vulnerability of the Bitwarden password manager is related to insufficient protection of the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
GEO Categories SQL Injection Code Execution
Vulnerability of the “GEO: Categories and search for lists and business processes” module of the website content management system CMS 1C-Bitrix: Website management involves failing to protect the SQL query structure. Exploiting this vulnerability may allow a malicious actor to execute arbitrary...