The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

Blitz Identity Provider (Authentication server)

...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the `scan_get_next_rmap_item()` function in the mm/ksm.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the scangetnextrmapitem function in the mm/ksm.c component of the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to incorrect checking of the specified index, position, or offset in input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of VK WorkMail’s corporate email service, related to insufficient validation of requests on the server side, allows attackers to execute Blind SSRF attacks.

The vulnerability of corporate email for VK WorkMail is related to insufficient validation of requests on the server side when integration with document editing services is enabled. Exploiting this vulnerability could allow a malicious actor to execute a Blind SSRF attack remotely...

The vulnerability of the kernel/futex component of the Linux operating system, which allows a hacker to gain access to confidential data

The vulnerability of the kernel/futex component of the Linux operating system’s kernel is related to insufficient checking of the state of the shared resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the systemd-homed component of the Systemd daemon, which allows a hacker to increase their privileges.

The vulnerability of the systemd-homed component of the Systemd daemon is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the Windows DNS service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows Device Association Service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Device Association Service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ZFS_IOC_SET_PROP handler of the OpenZFS component in FreeBSD allows a attacker to compromise the integrity of the protected information.

The vulnerability of the ZFSIOCSETPROP handler in the OpenZFS component of FreeBSD operating systems is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the drivers/iio/accel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/iio/accel component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the functions __cdnsp_gadget_init() and cdnsp_gadget_exit() in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the functions cdnspgadgetinit and cdnspgadgetexit in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `drivers/nvme/target/fc.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/nvme/target/fc.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Remote Access Connection Manager (RASMan) service on Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager RASMan service is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows kernel component of the Windows operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Miniport Driver for Virtual Hard Disk operating systems in Windows allows attackers to exploit their privileges.

The vulnerability of the Miniport Driver for Windows Virtual Hard Disk operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of VK WorkMail’s corporate email service lies in the redirection of URLs to unreliable websites, allowing attackers to carry out phishing attacks.

The vulnerability in the validation of URL addresses of the corporate email service VK WorkMail involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...

Vulnerability of the Microsoft SharePoint Online content management software, related to spear-phishing attacks

The vulnerability of the Microsoft SharePoint Online content management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the `drivers/net/wireguard/device.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/net/wireguard/device.c component of the Linux kernel lies in insufficient checks on the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of Azure Service Bus, a cloud-based asynchronous messaging platform, is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code.

The vulnerability of Azure Service Bus, a cloud-based asynchronous messaging platform, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

The vulnerability of desktop window managers in Windows operating systems allows attackers to increase their privileges.

The vulnerability of desktop window managers in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the `drivers/media/rc/imon.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/media/rc/imon.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the implementation of shared memory objects on FreeBSD’s largepage kernel allows attackers to increase their privileges.

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Neo4j Cypher MCP server, related to the data source verification error, allows attackers to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the Neo4j Cypher MCP server is related to a data source verification error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

The vulnerability of the web portal for managing cloud services, accounts, subscriptions, and the security of the Microsoft 365 Admin Center is related to errors in verifying cryptographic signatures. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the web portal for managing cloud services, accounts, subscriptions, and the security of the Microsoft 365 Admin Center is related to errors in verifying cryptographic signatures. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotel...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the JetBrains YouTrack project and task management software lies in the lack of authentication for critical functions. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the JetBrains YouTrack project and task management software is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information...

The vulnerability in the driver/mtd/nand/raw/cadence-nand-controller.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/mtd/nand/raw/cadence-nand-controller.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/base/regmap/regmap-slimbus.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the SveService component in the Android operating system of Samsung mobile devices allows a hacker to execute arbitrary code.

The vulnerability of the SveService component in the Android operating system of Samsung mobile devices is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the HTTP.sys driver on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system arises from operations that occur outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Work Folder Service in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the corporate platform Microsoft Teams, related to errors in verifying cryptographic signatures, allows attackers to perform spear-phishing attacks.

The vulnerability of the corporate platform Microsoft Teams is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spear-phishing attacks remotely...

The vulnerability of the Query Engine component of the Loki logging aggregation and storage system allows a attacker to trigger a service failure.

The vulnerability of the Query Engine component of the Loki logging aggregation and storage system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Azure Active Directory identity management and protection platform, related to modifications of expected data, allows attackers to escalate their privileges.

The vulnerability of the Azure Active Directory identity management and protection platform is related to modifications of assumed data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Azure SQL Database cloud relational database, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of Azure SQL Database cloud relational database is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...