GLPI Inventory SQL Injection Code Execution

The vulnerability of the software deployment plugin and the GLPI Inventory network is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Adobe Reader PDF Viewer Buffer Overflow

The vulnerability of Adobe Reader, a PDF viewer software, and Adobe Acrobat, a PDF editing program, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft SharePoint Server Deserialization RCE

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PeerObjects Component IEPEERS DLL Code Execution

The vulnerability of the PeerObjects component of the iepeers.dll library in Microsoft Internet Explorer is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfodfac4cfgdsiv1 function, implemented by the MP4Box component of the GPAC multimedia platform, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfmediagetcolorinfo function in the MP4Box packaging tool of the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Blitz Identity Provider XSS

The vulnerability of the Blitz Identity Provider software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Rack map_accel_path Unauthorized Access

The vulnerability of the mapaccelpath method in the Ruby programming language-based Rack web server module interface is related to the use of a regular expression, which does not sufficiently restrict the set of allowed values. Exploiting this vulnerability can allow an attacker to gain...

GLPI SQL Injection Code Execution

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Firebird Database Path Traversal Code Execution

The vulnerability of the Firebird database management system is related to incorrect restrictions on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Power Pages Code Execution

The vulnerability of Microsoft Power Pages software for creating web pages is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

lib/helpers/shouldBypassProxy.js file in the Security Bypass

The vulnerability of the lib/helpers/shouldBypassProxy.js file in the axios library is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfisomapplesettagex function in the MP4Box packaging tool of the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

quartz.dll Code Execution

The vulnerability of the quartz.dll file in the Windows DirectShow operating system is related to the improper handling of zero bytes or the Nul character during data exchange. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created QuickTime med...

Rack Unauthenticated Access

The vulnerability of the Ruby-based Rack web server’s modular interface is related to partial comparison. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Grafana API Proxy Server Unauthorized Access

The vulnerability of the API proxy server of the data source platform for Grafana relates to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read GET requests directed at the final endpoints in the Alertmanager and...

Microsoft Authenticator Information Disclosure

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Visual Studio Code Editor Code Execution

The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Azure virtual network gateway Code Execution

The vulnerability of the secure connection service between the Azure virtual network and other networks within the Microsoft Azure software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Microsoft 365 Copilot Disclosure

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

Microsoft Azure Entra ID Compatibility Package Privilege Escalation

The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the m2tsdmxsendpacket function in the MP4Box packaging tool of the GPAC multimedia platform is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Django GenericInlineModelAdmin Unauthorized Access

The vulnerability of the GenericInlineModelAdmin class in the Django web development framework is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Rack Modular Interface DoS

The vulnerability of the Ruby-based Rack web server’s modular interface is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Rack DoS

The vulnerability of the Ruby-based Rack web server module interface parser involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Django URLField DoS

The vulnerability of the URLField.topython function in the Django web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Python Requests extract_zipped_paths File Upload

The vulnerability of the requests.utils.extractzippedpaths function in the Python Requests library is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to re-record arbitrary files...

WP Job Portal Blind SQL Injection

...

Azure cloud services deserialization Disclosure

The vulnerability of Azure cloud services for managing geospatial data with the Microsoft Planetary Computer Pro is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Azure Resource Manager Privilege Escalation

The vulnerability of the Azure Resource Manager service, a software platform of Microsoft Azure, relates to the bypassing of authentication using an alternative name. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

Microsoft Azure Active Directory B2C Privilege Escalation

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges...

Event Handler Component Microsoft Internet Explorer Code Execution

The vulnerability of the Microsoft Internet Explorer browser’s Event Handler component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfac4presb4backchannelspresent function, belonging to the MP4Box component of the GPAC multimedia platform, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Django Auth Bypass

The vulnerability of the Django web development framework is related to shortcomings in its authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Django Synchronization DoS

The vulnerability of the Django web application framework is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

lib/adapters/http.js axios Type Confusion

The vulnerability of the lib/adapters/http.js component in the axios library is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability allows a remote attacker to execute a type of MITM attack...

UTT 1250GW DoS

The vulnerability of the route/goform/formFireWall files in the UTT 1250GW network devices is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

UTT 1200GW DoS

The vulnerability of the /goform/formTaskEdit module in the UTT 1200GW networking device involves the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Rack Modular Interface Bypass

The vulnerability of the Ruby-based Rack web server’s modular interface is related to improper behavior. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...

Rack Modular Interface Buffer Overflow

The vulnerability of the Ruby-based Rack web server’s modular interface is related to improper handling of parameter length discrepancies. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

libcontainer/user/user.go Privilege Escalation

The vulnerability of the libcontainer/user/user.go implementation, a tool for running isolated containers in Runc, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

base/gp_utf8.c Decode Unauthorized Access

The vulnerability of the decodeutf8 function in the base/gputf8.c software component for processing and generating Ghostscript documents is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...

TRENDnet TEW-432BRP formSetDomainFilter Heap Buffer Overflow DoS

The vulnerability of the formSetDomainFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

TRENDnet TEW-432BRP formSetUrlFilter Code Execution

The vulnerability of the formSetUrlFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

TRENDnet TEW-432BRP formSysCmd() Code Execution

The vulnerability of the formSysCmd function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

Tenda W12 set_local_time_0() Code Execution

The vulnerability of the setlocaltime0 function in Tenda W12 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

cpp-httplib ChunkedDecoder Buffer Overflow DoS

The vulnerability of the ChunkedDecoder::readpayload function in the cpp-httplib library is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

AppOpsService Java Disclosure

The vulnerability of the AppOpsService.java class in the Android operating system framework components is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these components...

Android Framework setTo ResourceTypes.cpp Disclosure

The vulnerability of the setTo method in the ResourceTypes.cpp script of the Android operating system’s Framework component is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is...

Framework Component Privilege Escalation

The vulnerability of the Framework component in Android operating systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...