92710 matches found
The vulnerability of the logfile parameter in the lib/Local.js library of the npm package browserstack-local for the Node.js software platform allows a hacker to execute any command they desire.
The vulnerability of the logfile parameter in the lib/Local.js library of the npm package browserstack-local for the Node.js software platform is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...
The vulnerability of the Live Server extension of the Visual Studio Code source editor allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Live Server extension of the Visual Studio Code editor relates to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information through a specially created HTML page...
The vulnerability of the “endpoint” web interface module in the IP-telephony system management software FreePBX allows a hacker to execute arbitrary code.
The vulnerability of the “endpoint” web interface module in the IP telephony system management software FreePBX is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the tar-fs package from the tar-stream library, which allows an attacker to compromise the integrity of protected information.
The vulnerability of the tar-fs package from the tar-stream library relates to an incorrect pathname limitation for the restricted-access directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...
The vulnerability of the npm library error-ex, related to the presence of undeclared functions, allows a hacker to execute arbitrary code.
The vulnerability of the npm library error-ex is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the common() function in the arch/x86/kernel/asm-offsets.c module, which supports the x86 kernel of the Linux operating system, allows a attacker to cause a service failure.
The vulnerability of the common function in the arch/x86/kernel/asm-offsets.c module, which is part of the Linux operating system’s x86 kernel support, involves a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ext4_resize_begin() function in the fs/ext4/resize.c module of the Ext4 file system support module in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ext4resizebegin function in the fs/ext4/resize.c module of the Linux file system support module is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the _nfs4_open_and_get_state() function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the nfs4openandgetstate function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rpcrdma_is_bcall() function in the net/sunrpc/xprtrdma/rpc_rdma.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.
The vulnerability of the rpcrdmaisbcall function in the net/sunrpc/xprtrdma/rpcrdma.c module of the Linux operating system’s RPC protocol is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the lpfc_abort_handler() function in the drivers/scsi/lpfc/lpfc_scsi.c module – The SCSI device support driver for the Linux operating system, which allows a hacker to trigger a service failure.
Vulnerability of the lpfcaborthandler function in the drivers/scsi/lpfc/lpfcscsi.c module – The Linux SCSI device driver has synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the sub_419920() function (file /boafrm/formLtefotaUpgradeQuectel) of the D-Link DWR-M961 router’s microprogramming software allows a hacker to execute any command with root privileges.
The vulnerability of the sub419920 function file /boafrm/formLtefotaUpgradeQuectel of the D-Link DWR-M961 router’s microprogramming software exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands wit...
The vulnerability of the n8n automation platform, related to synchronization errors when using a shared resource, allows a hacker to read any files on the host where n8n is running, leading to a complete compromise of the system.
The vulnerability of the n8n automation platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to read any files on the host where n8n is running, which can lead to a complete compromise of the system...
The vulnerability of the n8n automation platform lies in its lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to read arbitrary files or execute arbitrary commands.
The vulnerability of the n8n automation platform exists because measures are not taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or read arbitrary files remotely...
The vulnerability of the fpdt_process_subtable() function in the drivers/acpi/acpi_fpdt.c file of the ACPI driver (an extended configuration and power management interface of the Linux kernel) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fpdtprocesssubtable function in the drivers/acpi/acpifpdt.c file of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to the use of an incorrect address. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the Gstreamer multimedia framework, related to buffer overflows in the stack, allows a hacker to execute arbitrary code.
The vulnerability of the Gstreamer multimedia framework is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code as a result of H266 parsing...
The vulnerability of the function ieee80211_rx_h_action() in the file net/mac80211/rx.c, part of the mac80211 stack in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the function ieee80211rxhaction in the net/mac80211/rx.c module of the mac80211 stack implementation in the Linux kernel is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the lpfc_wr_object() function in the drivers/scsi/lpfc/lpfc_sli.c file of the Linux SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the lpfcwrobject function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the software application for managing and controlling wireless network connections on devices with Realtek Wireless LAN Utility is related to the absence of quotation marks in the syntax of certain elements or search paths. This allows an attacker to exploit this vulnerability to elevate their privileges and execute arbitrary code.
The vulnerability of the software application for managing and controlling wireless network connections on devices with Realtek Wireless LAN Utility is related to the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability can allow an attacker to enhanc...
The vulnerability of the l2cap_le_command_rej() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the l2caplecommandrej function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the dx_probe() function in the fs/ext4/namei.c module of the Linux file system support module allows a hacker to cause a service failure.
The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Linux file system support module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to cause service failures...
The vulnerability of the ext4_convert_inline_data() function in the fs/ext4/inline.c module of the Ext4 file system support for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4convertinlinedata function in the fs/ext4/inline.c module of the Ext4 file system support for the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...
The vulnerability of the __close_file_table_ids() function in the fs/smb/server/vfs_cache.c module of the SMB server kernel in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the closefiletableids function in the fs/smb/server/vfscache.c module, which is part of the SMB server support in Linux operating systems, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications allows a malicious individual to escalate their privileges and execute arbitrary code.
The vulnerability of the Docker Desktop platform’s configuration for developing and delivering container applications is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary cod...
The vulnerability of the Buffer.allocUnsafe() and Buffer.allocUnsafeSlow() functions on the n8n platform, which allow attackers to disclose protected information.
The vulnerability of the Buffer.allocUnsafe and Buffer.allocUnsafeSlow functions in the n8n automation platform relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
The vulnerability of Parallels Desktop hypervisor is related to deficiencies in the authentication mechanism, which allows attackers to elevate their privileges.
The vulnerability of Parallels Desktop Hosts is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the geospatial software QGIS, related to deficiencies in the authentication process, allows a perpetrator to execute arbitrary code.
The vulnerability of the geographic information software QGIS is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the library, related to asymmetrical resource consumption, allows a hacker to cause a service failure.
The vulnerability of the library system is related to asymmetric resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the strcpy() function (/goform/setSysAdm) in the UTT HiPER 840G router software allows a attacker to cause a service failure.
The vulnerability of the strcpy function /goform/setSysAdm in the UTT HiPER 840G router software is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the VPN module of the TP-Link Archer AXE75 wireless router, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of the VPN microprogramming software for TP-Link Archer AXE75 Wi-Fi routers is related to insufficient verification of input data. Exploiting these vulnerabilities could allow a remote attacker to cause service interruptions...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to execute arbitrary code, increase their privileges, modify data, and trigger a service failure.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers relates to the lack of measures taken to neutralize specific components. Exploiting this vulnerability allows a malicious individual to execute arbitrary code, increase their privileges, modify data, and cause service...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to bypass security restrictions and gain full control over the device.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers lies in the lack of measures to neutralize specific components. Exploiting this vulnerability allows a hacker to bypass security restrictions and gain full control over the device...
The vulnerability of the LinkAce archiver and distribution tool, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary code.
The vulnerability of the LinkAce tool for archiving and distributing web links is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the /sysinit.html file in the microprogramming software for WAVLINK routers, WL-WN578W2, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the /sysinit.html file in the microprogramming software for WAVLINK WL-WN578W2 is related to the lack of a mechanism for recovering passwords when processing the newpass/confpass parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...
The vulnerability of the Now Platform IT infrastructure management system, related to deficiencies in access control, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Now Platform IT infrastructure management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the microprogramming software of the Rockwell Automation ControlLogix Redundancy Module allows a intruder to trigger a service failure.
The vulnerability of Rockwell Automation ControlLogix Redundancy Module’s microprogramming software is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software allows attackers to carry out “man-in-the-middle” attacks.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software relates to the exchange of keys without authentication of the target device. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks remotely...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to execute arbitrary code, increase their privileges, modify data, and trigger a service failure.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers relates to the lack of measures taken to neutralize specific components. Exploiting this vulnerability allows a hacker to execute arbitrary code, increase their privileges, modify data, and cause service failures...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to bypass security restrictions and gain full control over the device.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers lies in the lack of measures to neutralize specific components. Exploiting this vulnerability allows a hacker to bypass security restrictions and gain full control over the device...
The vulnerability of the Formbricks survey platform, related to errors in verifying the cryptographic signature, allows attackers to influence the confidentiality and integrity of the protected information.
The vulnerability of the Formbricks survey platform is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...
The vulnerability of the /formNewSchedule file in Trendnet TEW-814DAP wireless access points allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the /formNewSchedule file in Trendnet TEW-814DAP wireless access point software is related to the escape of the operation outside the buffer in memory during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer arises from insufficient validation of requests on the server side. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...