92298 matches found
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...
The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.
The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Blitz Identity Provider (Authentication server)
...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.
The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.
The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.
The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...
The vulnerability of Cisco IOS XE operating systems, related to insufficient validation of input data, allows attackers to compromise the accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...
The vulnerability of Cisco IOS XE operating systems, related to insufficient control over resources during their existence, allows attackers to compromise the accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
The vulnerability of the Extensible Messaging Client Protocol (XMCP) in Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Extensible Messaging Client Protocol XMCP in Cisco IOS and Cisco IOS XE operating systems lies in the lack of input validation for cyclic operations. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of Cisco IOS XE operating systems, related to incorrect calculations, allows attackers to compromise the accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...
The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC) allows a perpetrator to execute arbitrary commands and increase their privileges.
The vulnerability of the Cisco Integrated Management Controller IMC’s web management interface is related to improper validation of request parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level...
The vulnerability of the sss_nss_protocol_parse_addr() function in the NSS responder of the access control service for remote directories and the SSHD authentication mechanism allows a attacker to cause a service failure.
The vulnerability of the sssnssprotocolparseaddr function in the NSS responder component of the access control service for remote directories and the SSHD authentication mechanism is related to the issue of the operation being executed outside of the buffer. Exploiting this vulnerability could...
The vulnerability of Cisco IOS XE operating systems, related to operations beyond the buffer in memory, allows attackers to compromise the accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...
The vulnerability of Cisco IOS XE operating systems, related to the failure to take measures to neutralize special elements in output data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Simple Network Management Protocol (SNMP) subsystem in Cisco IOS XE allows a attacker to trigger a service failure.
The vulnerability of the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE lies in the fact that resources are not released after their useful period has expired. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Vulnerability of the websocket_read_wstream() function in the libfreerdp/core/gateway/websocket.c file of the RDP client FreeRDP, which allows a hacker to disclose sensitive information or cause service failure.
The vulnerability of the websocketreadwstream function in the libfreerdp/core/gateway/websocket.c file of the RDP client FreeRDP is related to improper handling of invalid length parameters. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service...
The vulnerability of the tls_match_hostname() function in the libfreerdp/crypto/tls.c file of the RDP client FreeRDP allows a attacker to replace the RDP server.
The vulnerability of the tlsmatchhostname function in the libfreerdp/crypto/tls.c file of the RDP client FreeRDP is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to replace the RDP server remotely...
The vulnerability of Cisco IOS XE operating systems, related to the implementation of incorrect control flow, allows attackers to compromise the accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...
The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC) allows a perpetrator to execute arbitrary commands and increase their privileges.
The vulnerability of the Web interface for managing Cisco Integrated Management Controllers involves insufficient validation of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and elevate their privileges to the root level...
The vulnerability of the context Isolation mechanism of the software platform for creating Electron applications allows a attacker to gain full access to the system.
The vulnerability of the context isolation mechanism of the Electron application development platform is related to the breach of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to gain full access to the system...
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in insufficient validation of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of Cisco IOS XE operating systems, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in the improper definition of symbolic links before accessing a file. This allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to the improper definition of symbolic links before accessing the file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) relates to deficiencies in access control, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the uacce_register() function in the drivers/misc/uacce/uacce.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the uacceregister function in the drivers/misc/uacce/uacce.c module of the Linux kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pci_slot_trylock() function in the drivers/pci/pci.c file of the Linux operating system’s PCI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pcislottrylock function in the drivers/pci/pci.c file of the Linux operating system’s PCI device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrit...
The vulnerability of the Service Worker component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.
The vulnerability of the Service Worker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the Input component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of the Input component in the Google Chrome web browser is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers, which allows a hacker to trigger a service failure
The vulnerability of the GPU components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ov5647_probe() function in the drivers/media/i2c/ov5647.c file of the Linux kernel’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ov5647probe function in the drivers/media/i2c/ov5647.c file of the Linux kernel’s multimedia device driver is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers, which allows a hacker to trigger a service failure
The vulnerability of the GPU components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerabilities of the S3 API Gateway and Iceberg REST Catalog Gateway of the distributed file system SeaweedFS allow a perpetrator to gain unauthorized access for reading and writing data.
The vulnerability of the S3 API Gateway and Iceberg REST Catalog Gateway components of the distributed file system SeaweedFS is related to incorrect path name restrictions for catalogs. Exploiting this vulnerability could allow an attacker to gain unauthorized read and write access to data...
Vulnerabilities in the sound/soc/stm/stm32_sai.c and sound/soc/stm/stm32_sai_sub.c modules of the Linux operating system’s SoC audio support, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities in the sound/soc/stm/stm32sai.c and sound/soc/stm/stm32saisub.c modules, which support audio functions in Linux-based SoC cores, are related to errors during link counter updates. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity...
The vulnerability of the Input component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in the Google Chrome web browser, which allows a hacker to access confidential data
The vulnerability of the ANGLE web browser component in Google Chrome is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability in the web interface of the CI/CD application framework JetBrains TeamCity allows a hacker to bypass existing security mechanisms and execute arbitrary commands on the operating system.
The vulnerability of the web interface of the CI/CD application integration and delivery system JetBrains TeamCity is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security measures and execute arbitrary operati...
The vulnerability of the GFX component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the GFX web browser components in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the aiohttp HTTP client’s HTTP request parser allows attackers to bypass existing security mechanisms.
The vulnerability of the aiohttp HTTP client’s request parser is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...