The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Blitz Identity Provider (Authentication server)

...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability of the Remote Access Connection Manager (RASMan) service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager RASMan service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, allows a perpetrator to gain full control over the application.

The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker...

The vulnerability in the `src/runtime/server/og-image/context.ts` file of the Open Graph Image generation module from the Nuxt OG Image framework for creating web applications and sites allows attackers to perform spoofing attacks.

The vulnerability in the src/runtime/server/og-image/context.ts file of the Open Graph Image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites, relates to the loading of external, unreliable data alongside reliable data. Exploiting this...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

The vulnerability of Linux operating system’s ipvlan kernel components, which allows a hacker to trigger a service failure

The vulnerability of Linux operating system’s ipvlan kernel components is related to insufficient blocking measures. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rpmsg/rpmsg_core.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rpmsg/rpmsgcore.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the system.

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to gain full control over the system remotely...

The vulnerability of the Windows DHCP Client service for operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows DHCP Client service for operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the `drivers/target/iscsi/iscsi_target_util.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/target/iscsi/iscsitargetutil.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Self Update Framework component of the Oracle Enterprise Manager Base Platform allows a perpetrator to gain full control over the application.

The vulnerability of the Self Update Framework component of the Oracle Enterprise Manager Base Platform software is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTPS...

The vulnerability of the OpenScript package in the Oracle Application Testing Suite allows a hacker to gain full control over the application.

The vulnerability of the OpenScript package in the Oracle Application Testing Suite software automation suite is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus allows a attacker to gain full control over the application.

The vulnerability of the RIB Kernal component in the XML-based asynchronous messaging integration platform of Oracle Retail Integration Bus is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the HT...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems lies in the possibility of memory usage after it is released. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of AMD Zen processor microarchitecture, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

The vulnerability of AMD Zen processor microarchitecture is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to disclose protected information...

The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, stems from an incorrect path name limitation in the catalog. This allows attackers to escalate their privileges.

The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, is related to an incorrect path name limitation. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

The vulnerability of the Linux operating system’s kernel, related to insufficient checking of the status of shared resources, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of the status of resources that are shared among users. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the driver/platform/x86/toshiba_haps.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/platform/x86/toshibahaps.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to errors in thread locking, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/net/can/usb/usb_8dev.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/can/usb/usb8dev.c component of the Linux kernel lies in the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `net/l2tp/l2tp_core.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/l2tp/l2tpcore.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mm/migrate.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mm/migrate.c component in the Linux operating system is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the irqchip/irq-gic-v3-its.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the irqchip/irq-gic-v3-its.c component in the Linux operating system’s kernel is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xen/xen-scsiback.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the xen/xen-scsiback.c component in the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ipv4/fou_nl.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ipv4/founl.c component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `jinja2.Template()` function in the `api/core/helper/code_executor/jinja2/jinja2_transformer.py` file, a Jinja2 platform for application development by Dify, allows a malicious actor to execute arbitrary code.

The vulnerability of the jinja2.Template function in the api/core/helper/codeexecutor/jinja2/jinja2transformer.py file, a Jinja2 template processor for Dify application development, is related to the lack of measures taken to eliminate special elements in the template creation mechanism. Exploiti...

The vulnerability in the smack/smackfs.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smack/smackfs.c component in the Linux operating system is related to incomplete recognition of internal conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the jfs/namei.c component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the jfs/namei.c component in the Linux operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Microsoft Power Apps development environment, related to incorrect authentication, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft Power Apps development environment is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability in the `arch/arm64/kernel/hibernate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/arm64/kernel/hibernate.c component of the Linux operating system relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/isdn/mISDN/timerdev.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/isdn/mISDN/timerdev.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the driver/leds/led-class.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/leds/led-class.c component of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nfsd/netns.h component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfsd/netns.h component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `ethernet/emulex/benet/be_cmds.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ethernet/emulex/benet/becmds.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the component vmw_vsock/virtio_transport_common.c in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...