92710 matches found
The vulnerability of the Fortinet FortiManager software, a centralized device management system, relates to the absence of authentication mechanisms. This allows attackers to influence the integrity of the protected information.
The vulnerability of the Fortinet FortiManager device management software lies in the absence of authentication. Exploiting this vulnerability allows a malicious actor to influence the integrity of the protected information...
The vulnerability of the Formbricks survey platform, related to errors in verifying the cryptographic signature, allows attackers to influence the confidentiality and integrity of the protected information.
The vulnerability of the Formbricks survey platform is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...
The vulnerability of the /goform/formConfigDnsFilterGlobal file in the UTT 1200GW networking device software allows a attacker to cause a service failure.
The vulnerability of the /goform/formConfigDnsFilterGlobal function in the UTT 1200GW network device software is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the delshrpath function in the Web Management Interface component of the BLINK-AC2100 router software allows a attacker to cause a service failure.
The vulnerability of the delshrpath function in the Web Management Interface component of the BLINK-AC2100 router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the /formSysLog file in the Trendnet TEW-814DAP wireless access point software allows a intruder to execute arbitrary code or cause a service failure.
The vulnerability of the /formSysLog file of Trendnet TEW-814DAP wireless access points relates to the escape of the operation outside the buffer in memory during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause servic...
The vulnerability of the /live_online.shtml file, a microprogramming software solution for WAVLINK WL-WN578W2 routers, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the /liveonline.shtml file, a microprogramming software for WAVLINK routers, is related to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to execute arbitrary code, increase their privileges, modify data, and trigger a service failure.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers lies in the lack of measures to neutralize specific components. Exploiting this vulnerability allows a hacker to execute arbitrary code, increase their privileges, modify data, and cause service failures...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to execute arbitrary code, increase their privileges, modify data, and trigger a service failure.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers relates to the lack of measures taken to neutralize specific components. Exploiting this vulnerability allows a hacker to execute arbitrary code, increase their privileges, modify data, and cause service failures...
The vulnerability of the Internet Control Server’s network firewall, related to the failure to implement data cleaning at the management level, allows a perpetrator to execute arbitrary codes.
The vulnerability of the Internet Control Server’s network firewall is related to the failure to implement data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the RSA Archer risk management software platform lies in the lack of a mechanism to neutralize elements in CSV files, allowing attackers to execute arbitrary code.
The vulnerability of the RSA Archer risk management software platform lies in the absence of a mechanism to neutralize elements in CSV files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created CSV file...
The vulnerability of the microprogrammed software of the Aitemi M300 wireless signal amplifiers (MT02) is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows a hacker to execute arbitrary code.
The vulnerability of the microprogrammed software of Aitemi M300 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...
The vulnerability of the application synchronization tool with the Gocardless bank relates to deficiencies in the error reporting mechanism, allowing a violator to gain unauthorized access to protected information.
The vulnerability of the application synchronization tool with the Gocardless bank is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Internet Control Server’s network firewall, related to the bypassing of authentication due to a fundamental error, allows attackers to escalate their privileges.
The vulnerability of the Internet Control Server’s network firewall is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability allows a remote attacker to gain increased privileges...
The vulnerability of the Internet Control Server’s network firewall, related to the bypassing of authentication due to a fundamental error, allows intruders to gain unauthorized access to protected information.
The vulnerability of the Internet Control Server’s network firewall is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the addJS() function in the jsPDF library allows a hacker to execute arbitrary code.
The vulnerability of the addJS function in the jsPDF library for creating PDF files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, provided that the user opens a specially crafted PDF file...
Vulnerability of the getnetbyaddr() and getnetbyaddr_r() functions in the GNU C Library, which allow an attacker to gain unauthorized access to protected information
The vulnerability of the getnetbyaddr and getnetbyaddrr functions in the GNU C Library is related to the use of uninitialized resources. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the sub_416928() function (/goform/formConfigDnsFilterGlobal) in the UTT HiPER 840G router software allows a attacker to cause a service failure.
The vulnerability of the sub416928 function /goform/formConfigDnsFilterGlobal of the UTT HiPER 840G router’s software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the /goform/getOneApConfTemp Entry function in the microprogramming software for network devices UTT HiPER 840G, which allows a intruder to trigger a service failure.
The vulnerability of the /goform/getOneApConfTemp Entry function in the microprogramming software for network devices UTT HiPER 840G is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to execute arbitrary code, increase their privileges, modify data, and trigger a service failure.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers relates to the lack of measures taken to neutralize specific components. Exploiting this vulnerability allows a hacker to execute arbitrary code, increase their privileges, modify data, and cause service failures...
The vulnerability in the web module of the microprogramming software used in TP-Link Archer BE230 Wi-Fi routers allows a hacker to alter data and trigger a service failure.
The vulnerability of the web module of the microprogrammed software in TP-Link Archer BE230 routers is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a hacker to execute arbitrary code, increase their privileges, modify data, and cause...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to bypass security restrictions and gain full control over the device.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers lies in the lack of measures to neutralize specific components. Exploiting this vulnerability allows a hacker to bypass security restrictions and gain full control over the device...
The vulnerability of the Socket API component of Nextcloud Desktop software allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Socket API component of the Nextcloud Desktop software is related to improper access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of the SkyBridge BASIC MB-A130 router’s microprogramming system, related to the failure to implement measures to neutralize special elements, allows a hacker to execute arbitrary commands with root privileges.
The vulnerability of the SkyBridge BASIC MB-A130 router’s microprogramming system lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...
The vulnerability of the production operations management platform production_ssm, related to access control errors, allows a perpetrator to gain access to confidential information.
The vulnerability of the production operations management platform productionssm is related to access control errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
The vulnerability of the Internet Control Server’s network firewall, related to the failure to implement data cleaning at the management level, allows attackers to execute arbitrary codes.
The vulnerability of the Internet Control Server’s network firewall is related to the failure to implement data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the sub_484E40() function (/goform/formP2PLimitConfig) in the UTT HiPER 840G router software allows a attacker to cause a service failure.
The vulnerability of the sub484E40 function /goform/formP2PLimitConfig of the UTT HiPER 840G router’s software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the /formPasswordAuth file in Trendnet’s wireless access points, the TEW-814DAP, allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the /formPasswordAuth file in Trendnet’s wireless access points’ software, the TEW-814DAP, relates to the escape of operations beyond the buffer in memory during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability in the implementation of the L2TP/IPSec VPN server software for Wi-Fi routers from TP-Link, the Archer AXE75, allows a perpetrator to disclose confidential information.
The vulnerability of the L2TP/IPSec VPN server implementation in the Wi-Fi router software from TP-Link Archer AXE75 relates to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to disclose protected information remotely...
The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to bypass security restrictions and gain full control over the device.
The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers lies in the lack of measures to neutralize specific components. Exploiting this vulnerability allows a hacker to bypass security restrictions and gain full control over the device...
The vulnerability of the microprogrammed software in programmable logic controllers of the CompactLogix 5370 allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed software in the CompactLogix 5370 programmable logic controllers is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions in the system...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability in the application programming interface `api.values.get` of Grandstream GXP microprogramming devices allows a perpetrator to execute arbitrary code with root privileges.
The vulnerability in the application software interface api.values.get of Grandstream GXP microprogrammed telephones is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges by...
The vulnerability in the debugging interface of AMD’s microprogramming graphics processor allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the debugging interface for AMD graphics processor microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of the SEV microprogramming software components of AMD graphics processors allows attackers to compromise the integrity of protected information.
The vulnerability of the SEV microprogramming software for AMD graphics processors is related to improper prevention of bit modification of the lock bits. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
The vulnerability of the AMD Secure Processor microprogramming software for graphics processors allows a hacker to gain unauthorized access to protected information.
The vulnerability of AMD Secure Processor microprogramming software for graphics processors relates to unreliable pointer aliasing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the memory control block for IOMMU operations in AMD’s microprogramming software for processors allows attackers to circumvent security restrictions and compromise the integrity of the protected information.
The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems is related to incorrect input of configuration data. Exploiting this vulnerability can allow attackers to circumvent security restrictions and compromise the integrity of protected information...
The vulnerability of SMM communication buffers in AMD’s microprogrammed graphics processors allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of SMM communication buffers in AMD graphics processor microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the web service of the hybrid communication platform Mitel OpenScape 4000 and the network management platform Mitel OpenScape 4000 Manager lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary codes.
The vulnerability of the web-based communication platform Mitel OpenScape 4000 and the centralized network management platform Mitel OpenScape 4000 Manager is related to the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a malicious actor to execute...
The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance lies in the lack of security measures for the SQL query structure. This allows attackers to execute arbitrary commands.
The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute...
The vulnerability of the Polarion ALM application lifecycle management software lies in the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.
The vulnerability of the Polarion ALM application lifecycle management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...
The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to execute arbitrary code by exploiting buffer overflow vulnerabilities.
The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to execute code outside the buffer boundaries. Exploiting this vulnerability could allow attackers to execute arbitrary...
The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.
The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the software platform for numerical modeling and analysis of products from Simcenter Nastran, as well as the pre-processor Simcenter Femap, lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using a speciall...
The vulnerability of the MCP server regarding the execution of container code by node-code-sandbox-mcp, due to the lack of data cleaning at the control level, allows a malicious actor to execute arbitrary system commands.
The vulnerability of the MCP server regarding the execution of container code via node-code-sandbox-mcp is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary system commands...
The vulnerability of the Explore Traces component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary JavaScript code.
The vulnerability of the Explore Traces component of the Grafana monitoring and observation platform relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code...
The vulnerability of the `smf_gn_handle_create_pdp_context_request` function in the `/src/smf/gn-handler.c` file, which is used for creating and managing NR/LTE Open5GS mobile networks. This vulnerability allows a attacker to cause a service failure.
The vulnerability of the smfgnhandlecreatepdpcontextrequest function in the /src/smf/gn-handler.c file, which is used for creating and managing NR/LTE Open5GS mobile networks, is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause...