92710 matches found
The vulnerability of the MongoDB database management system’s server allows a hacker to cause a service failure.
The vulnerability of the MongoDB database management system server is related to incorrect data type conversion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the SCADA system’s web server, Yokogawa FAST/TOOLS, allows a intruder to execute arbitrary code.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system’s web server is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the OPTIONS method from a remote location...
The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to the transmission of critical information in plaintext, allows a intruder to disclose protected information and execute arbitrary codes.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system lies in the transmission of critical information in plaintext. Exploiting this vulnerability allows a malicious actor to disclose the protected information and execute arbitrary codes...
The vulnerability of the Yokogawa FAST/TOOLS SCADA system lies in the lack of measures to eliminate invalid symbols in website identifiers. This allows attackers to carry out XSS attacks.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to the failure to take measures to eliminate unacceptable symbols in the identification fields of web pages. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...
The vulnerability of the PRINTXPERT 3 development system regarding control and management involves the disclosure of information, allowing attackers to obtain information about the accounts being used.
The vulnerability of the PRINTXPERT 3 development system for printing control and management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the accounts being used...
The vulnerability of the PRINTXPERT 3 development system for control and management involves the disclosure of information, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the PRINTXPERT 3 development system for printing control and management is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SCADA system’s web server, Yokogawa FAST/TOOLS, allows a hacker to bypass existing security restrictions.
The vulnerability of the SCADA system’s web server, Yokogawa FAST/TOOLS, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions remotely...
The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to the violation of personal privacy, allows a intruder to disclose protected information.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to the violation of personal privacy. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to improper security checks for standard elements, allows attackers to carry out phishing attacks.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks from a remote location...
The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks lies in its uncontrolled search mechanism, which allows a intruder to execute arbitrary commands with administrator privileges.
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code with administrator privileges using a specially craft...
The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software lies in the incorrect limitation of the path name to the directory. This allows a intruder to gain unauthorized access to the protected information.
The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of TP-Link Tapo C260’s microprogrammed software lies in the lack of measures to neutralize specific elements, allowing intruders to execute arbitrary codes.
The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using certain POST requests...
The vulnerability of the GSSAPI driver standard of MongoDB Go Driver allows attackers to influence the integrity of the protected information.
The vulnerability of the GSSAPI driver standard in the MongoDB Go Driver is related to buffer overflows in dynamic memory. Exploitation of this vulnerability could allow a malicious actor to compromise the integrity of protected information by reading one byte beyond the allocated dynamic memory...
The vulnerability of the MongoDB Query Planner component of the MongoDB database engine allows a hacker to cause a service failure.
The vulnerability of the MongoDB Query Planner component in the MongoDB database lies in its unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of Visiology BI’s data analytics system, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of Visiology BI data analytics systems is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of Visiology BI’s data analytics system, which stems from the use of a strictly encrypted cryptographic key, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Visiology BI data analytics systems lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...
The vulnerability of the PRINTXPERT 3 development system for printing control and management lies in the exposure of information, allowing attackers to obtain information about the accounts being used.
The vulnerability of the PRINTXPERT 3 development system for printing control and management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the accounts being used...
The vulnerability of the Azure HDInsights data analytics service, related to the lack of protective measures for website structures, allows attackers to carry out spear-phishing attacks.
The vulnerability of the Azure HDInsights data analytics service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the CCF (Cluster Client Failover) mechanism in Windows operating systems, which allows attackers to exploit their privileges.
The vulnerability of the CCF Cluster Client Failover mechanism in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Azure IoT Explorer software, related to its reliance on open IP addresses, allows a perpetrator to expose protected information.
The vulnerability of the Azure IoT Explorer software is related to its reliance on open IP addresses. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...
The vulnerability of Autodesk Fusion’s 3D model development software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to disclose protected information and execute arbitrary code.
The vulnerability of Autodesk Fusion’s 3D model development software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute arbitrary code when a user opens a specially...
The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems allows attackers to bypass existing security mechanisms.
The vulnerability of SSL-VPN network gateways in Fortinet FortiOS operating systems is related to information disclosure. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms by sending specially crafted HTTP requests...
The vulnerability of the File input component in Google Chrome allows a hacker to replace the user interface.
The vulnerability of the File input component in Google Chrome relates to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the user interface with a specially created HTML page...
The vulnerability of the _bfd_elf_slurp_version_tables() function in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to cause a service failure.
The vulnerability of the bfdelfslurpversiontables function in the bfd/elf.c component of the GNU Binutils development environment is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to circumvent existing security restrictions.
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from a lack of source verification mechanisms. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a lack of source verification mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Google Chrome’s PictureInPicture component, which allows a hacker to compromise the confidentiality of protected information
The vulnerability of Google Chrome’s PictureInPicture component is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information through a specially created HTML page...
The vulnerability of the Windows Storage Services data storage service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from the lack of validation for incoming requests, allowing a malicious actor to gain unauthorized access to the system and execute arbitrary code.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the lack of validation for the correctness of the requests received. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system and execute...
The vulnerability of the ws_user_gerList() function in the pwg.users.php script of the Piwigo content management system allows a hacker to perform SQL injections.
The vulnerability of the wsusergerList function in the pwg.users.php script of the Piwigo content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform SQL injections...
The vulnerability of the loadRLE() function in the TGA-image loader (PluginTARGA.cpp) from the Freeimage graphics library allows a malicious actor to cause a service failure or execute arbitrary code.
The vulnerability of the loadRLE function in the TGA-image loader PluginTARGA.cpp from the Freeimage graphics library relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code...
The vulnerability of the libbfd.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the libbfd.c component in the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the command-line interface of Fortinet FortiOS operating systems allows a hacker to execute arbitrary code.
The vulnerability of the command-line interface in Fortinet FortiOS operating systems is related to insufficient handling of format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Fenced Frames privacy function in Google Chrome allows a hacker to replace the user interface.
The vulnerability of the Fenced Frames privacy function in Google Chrome relates to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to writing beyond the buffer boundaries, allows attackers to trigger a service failure.
The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to writing beyond the buffer boundaries. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...
The vulnerability of the ESXi base microprogramming system driver for Intel 800 Series network controllers allows a hacker to gain unauthorized access to protected information.
The vulnerability of the ESXi base microprogramming system software for Intel 800 Series network controllers is related to improper resource release. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Imagination’s microprogramming software for graphics processors allows a hacker to execute arbitrary code.
The vulnerability of microprogrammed software in graphics processors is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a hacker to execute arbitrary code...
The vulnerability of the blocked_path() function in the Python package for creating Gradio applications allows a intruder to gain unauthorized access to protected information.
The vulnerability of the blockedpath function in the Python package for creating Gradio applications relates to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Advanced DNS Security (ADNS) security service for the PAN-OS operating system allows a attacker to trigger a service failure.
The vulnerability of the Advanced DNS Security ADNS security service for the PAN-OS operating system is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted package...
The vulnerability of the `usbg_make_tpg()` function in the `drivers/usb/gadget/function/f_tcm.c` file of the Linux USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the usbgmaketpg function in the drivers/usb/gadget/function/ftcm.c file of the Linux USB device driver module is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Exchange Server servers, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of Microsoft ACI Confidential Containers, related to the storage of information in an open manner, allows a perpetrator to disclose the protected information.
The vulnerability of Microsoft ACI Confidential Containers relates to the storage of information in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems allows attackers to bypass existing security mechanisms.
The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems involves bypassing authentication due to a fundamental error. Exploiting this vulnerability allows an attacker to circumvent existing security mechanisms remotely...