98400 matches found
Extensions Component Disclosure Protected Information
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a data source confirmation error. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
Media components Google Chrome Microsoft Edge Code Execution
The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
oui-httpd rpc Heap Buffer Overflow DoS
The vulnerability of the dlopen function in the library /usr/lib/oui-httpd/rpc of the microprogramming software for routers GL.iNet GL-MT3000 is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...
GL.iNet GL-MT3000 Router snprintf Command Injection
The vulnerability of the snprintf function in the /cgi-bin/glc file of the GL.iNet GL-MT3000 router’s microprogramming system is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...
Check Point IKEv1 VPN
The vulnerability of the Internet Key Exchange IKEv1 protocol implementation in Check Point Remote Access VPN, Check Point Mobile Access/SSL VPN, and Check Point Spark network gateways is related to authentication procedures’ deficiencies. Exploiting this vulnerability allows a malicious actor to...
D-Link DWR-M920 Router Sub_41CF20 Function Command Injection
The vulnerability of the sub41CF20 function in the /boafrm/formUSSDSetup file of the D-Link DWR-M920 router’s microprogramming system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject...
GL.iNet GL-MT3000 OpenVPN Client Import Workflow Command Injection
The vulnerability of the OpenVPN Client Import Workflow component of the GL.iNet GL-MT3000 router microsystem lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...
D-Link DWR-M920 Router Sub_412DA0 Function Command Injection
The vulnerability of the sub412DA0 function in the /boafrm/formIMEISetup file of the D-Link DWR-M920 router’s microprogramming system is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow a malicious actor to inject arbitrary...
Keycloak Client Authentication UDS Identity Config
The vulnerability of the client authentication mechanism in the UDS Identity Config configuration package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...
Sqlparse DoS
The vulnerability of the formatting function of the SQL parser for Python, Sqlparse, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...
StanfordSegmenter Module Code Execution
The vulnerability of the StanfordSegmenter class in the NLTK library for symbolic and statistical processing of natural language is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
llama_index ObsidianReader Unauthenticated Access
The vulnerability of the loaddata function in the llamaindex/readers/obsidian/base.py file of the ObsidianReader plugin is related to path traversal. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
openDCIM SQL Injection Code Execution
The vulnerability of the openDCIM software for managing data infrastructure is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Contrib’s Syntax Markdown Extension XSS
The vulnerability in Contrib’s Syntax Markdown extension for the XWiki Platform lies in the lack of protection for the structure of web pages when processing the width parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
PraisonAI Framework Auth Bypass
The vulnerability of the PraisonAI framework is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
OPNsense Code Execution
The vulnerability of the OPNsense operating system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Exchange Online Auth Bypass Info Disclosure
The vulnerability of Microsoft Exchange Online for corporate email services is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
Google Chrome Microsoft Edge Data Source Confirmation
The vulnerability of Google Chrome and Microsoft Edge is related to a data source confirmation error during the processing of DOM objects. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...
Payments Component UI Replacement
The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface...
Inspect.sys IPv6 Parser DoS
The vulnerability of the IPv6 packet parser in the Inspect.sys driver of the Comodo Internet Security comprehensive information protection tool is related to a significant loss of importance. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Portainer RetrieveTokenData Privilege Escalation
The vulnerability of the RetrieveTokenData function in the Portainer container management platform is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
Java Lucee Administrative Interface Code Execution
The vulnerability of the administrative interface of the Java Lucee virtual machine’s scripting language is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
eslint-config-prettier Code Execution
The vulnerability of the npm library eslint-config-prettier is related to the presence of undeclared features. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
openDCIM Authentication Bypass Info Disclosure
The vulnerability of the openDCIM software for managing data infrastructure is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
FileBrowser Quantum Path Traversal
The vulnerability of the FileBrowser Quantum file manager is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a remote attacker to delete any files from the system...
Media components Google Chrome Microsoft Edge Code Execution
The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
BlackVue Dashcam 590X Configuration Handler Disclosure
The vulnerability of the Configuration Handler component in the /upload.cgi file of the BlackVue Dashcam 590X microprogramming system is related to access control errors. Exploiting this vulnerability could allow an intruder to disclose protected information...
BlackVue Dashcam 590X HTTP Endpoint DoS
The vulnerability of the HTTP Endpoint component of the /upload.cgi file in the BlackVue Dashcam 590X microprogramming system is related to access control errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Qualcomm DSP service Disclosure
The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...
Go bug Arbitrary File Read Write
The vulnerability of the Go “bug” in the Go programming language is related to the incorrect definition of symbolic references before accessing files. Exploiting this vulnerability can allow an attacker to gain access to and read/write arbitrary files...
Go ParseAddress ParseAddressList ParseDate DoS
The vulnerability of the ParseAddress, ParseAddressList, and ParseDate functions in the Go programming language is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Go consumePhrase() DoS
The vulnerability of the consumePhrase function in the Go programming language is related to insufficient validation of input data during the analysis of email addresses. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Go Windows DoS
The vulnerability of the net.Dial and net.LookupPort functions in the Go programming language for Windows operating systems is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Go LookupCNAME DoS
The vulnerability of the LookupCNAME function in the Go programming language is related to a memory reclamation error when processing CNAME records. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Go tool pack Command Read Write Arbitrary Files
The vulnerability of the Go tool pack command language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary files...
Go XSS
The vulnerability of the Go programming language is related to the lack of measures taken to neutralize special elements when processing the content attribute of the tag. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
Go Improper Encoding
The vulnerability of the Go programming language is related to incorrect encoding or escaping of output data when processing the tag’s type attribute. Exploiting this vulnerability can allow an attacker to gain read and modify access to data remotely...
Windows WLAN Host system
The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to cause memory corruption...
Firefox ESR Thunderbird DOM Component Compromise
The vulnerability of the DOM component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protecte...
OpenClaw OAuth CSRF
The vulnerability of the OAuth authorization protocol implementation of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
ML lifecycle management platform Authentication Bypass RCE
The vulnerability of the ML model lifecycle management platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
SOGo Password Changing Arbitrary Code Unauthorized Access
The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code or gain unauthorized access to...