92710 matches found
The vulnerability of Microsoft ACI Confidential Containers, related to the lack of data cleaning at the management level, allows attackers to enhance their privileges.
The vulnerability of Microsoft ACI Confidential Containers relates to the lack of measures taken at the management level to ensure data cleanup. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Google Chrome’s WebGPU component, which allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the Animation component in the Google Chrome browser allows a perpetrator to compromise the confidentiality of protected information.
The vulnerability of the Animation component in Google Chrome browser is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of protected information through a specially created HTML page...
The vulnerabilities of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to pointer manipulation, allow attackers to trigger service failures.
The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to pointer manipulation. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...
The vulnerabilities of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to reading data outside of the allowed range in memory, allow attackers to gain unauthorized access to protected information.
The vulnerability of Intel Active Management Technology AMT and Intel Standard Manageability ISM is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of NVIDIA’s graphics driver series—NVS, Quadro, NVIDIA RTX, GeForce—is related to pointer aliasing, which allows attackers to trigger service failures.
The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to trigger service failures...
The vulnerability of the Updater component of the Arcane container management cloud platform allows a hacker to execute arbitrary code.
The vulnerability of the Updater component of the Arcane container management cloud platform is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Autodesk Fusion’s 3D model development software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to disclose protected information and execute arbitrary code.
The vulnerability of Autodesk Fusion’s 3D model development software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute arbitrary code when a user opens a specially...
The vulnerability of the WinSock driver in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the WinSock driver in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the NTLM protocol implementation in Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the NTLM protocol in Windows operating systems is related to external file name or path control. Exploiting this vulnerability allows attackers to perform spoofing attacks...
The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office products and Microsoft 365 Apps for Enterprise allows a perpetrator to disclose protected information.
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protecte...
The vulnerability of Autodesk Fusion’s 3D model development software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to disclose protected information and execute arbitrary code.
The vulnerability of Autodesk Fusion’s 3D model development software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute arbitrary code when a user opens a specially...
The vulnerability of the graphical user interface of Fortinet FortiOS operating systems allows a hacker to redirect users to any desired URL address.
The vulnerability of the graphical user interface of Fortinet FortiOS operating systems is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...
The vulnerability of Fortinet FortiOS operating systems arises from insufficient verification of the source of the communication channel, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Fortinet FortiOS operating systems is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by sending specially crafted requests...
The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Intel Ethernet E810 controller’s microprogramming software, related to insufficient exception handling, allows a intruder to trigger a service failure.
The vulnerability of Intel Ethernet E810 controller’s microprogramming software is related to insufficient exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Imagination’s microprogramming software for graphics processors allows a hacker to extract data from the local memory of the GPU.
The vulnerability of Imagination’s microprogramming graphics software is related to improper handling of insufficient resolutions or privileges. Exploiting this vulnerability could allow an attacker to extract data from the GPU’s local memory...
The vulnerability of the Ivanti Endpoint Manager software management tool relates to bypassing authentication by using an alternative path or channel. This allows a perpetrator to disclose authentication credentials.
The vulnerability of the Ivanti Endpoint Manager software management tool relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to disclose authentication credentials...
The vulnerability of the GnuPG program for encrypting information and creating electronic digital signatures lies in the fact that it allows for writing beyond the buffer boundaries, enabling a hacker to cause a service failure.
The vulnerability of the GnuPG program for encrypting information and creating electronic digital signatures lies in the writing beyond the buffer boundaries. Exploiting this vulnerability could allow a hacker to cause a service failure...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Windows operating system’s kernel is related to the exposure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of SK Hynix’s DDR5 RAM modules, related to improper cleaning or release of resources, allows attackers to execute a Rowhammer-type attack.
The vulnerability of SK Hynix’s DDR5 memory modules is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to perform a Rowhammer attack alter data in memory cells by repeatedly accessing the same memory block over short periods of time...
The vulnerability of the Hyper-V component of the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Hyper-V component of the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the compatibility subsystem’s kernel allows for the execution of Linux applications on Windows operating systems through the Windows Subsystem for Linux (WSL2). This enables attackers to gain increased privileges.
The vulnerability of the compatibility subsystem’s kernel for running Linux applications, as provided by Windows Subsystem for Linux WSL2 on Windows operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a attacker to perform XSS attacks.
The vulnerability of the Cisco Identity Services Engine ISE web interface relates to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...
The vulnerability of the Gridscale X Prepay software lies in its inability to properly respond to incoming requests, allowing an attacker to carry out a brute-force attack.
The vulnerability of the Gridscale X Prepay software is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability allows a remote attacker to carry out a brute-force attack...
The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems lies in the improper use of standard permissions, allowing attackers to increase their privileges.
The vulnerability of the EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System automation systems is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing attackers to exploit their privileges.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Hyper-V component of the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense system allows a perpetrator to gain unauthorized access to confidential information.
The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense system is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...
The vulnerability of the service layer of the Cisco Intersight Virtual Appliance software allows a hacker to gain full control over the device.
The vulnerability of the service layer of the Cisco Intersight Virtual Appliance software management system for cloud systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain full control over the device...
The vulnerability of the SSH service of Cisco Ultra-Reliable Wireless Backhaul (URWB) network devices on Cisco IEC6400 Wireless Backhaul Edge Compute devices allows a attacker to cause a service failure.
The vulnerability of the SSH service of Cisco’s Ultra-Reliable Wireless Backhaul URWB network devices for Cisco IEC6400 Wireless Backhaul Edge Compute devices is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a malicious actor to execute arbitrary code and gain unauthorized access to confidential information.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software lies in the lack of protective measures for the web page structure. Exploiting this vulnerability allows an attacker to execute arbitra...
Siemens network software vulnerabilities, related to an uncontrolled search element in the search process, allow attackers to execute arbitrary code.
The vulnerability of Siemens network software is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...
The vulnerability of the Microsoft Visual Studio software development tool, related to the lack of measures taken to clean data at the management level, allows attackers to enhance their privileges.
The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to clean up data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM), allows attackers to carry out XSS attacks.
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager EPNM, relates to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to carry...
The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise software lies in the insufficient protection of the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks XSS remotely...
The vulnerability of the microprogramming software in Cisco SIP IP phones such as Cisco Video Phone 8875, Desk Phone 9800, and IP Phones series 7800 and 8800 relates to the ability to disclose information, allowing unauthorized access to confidential data.
The vulnerability of the microprogramming software in Cisco SIP IP phones, such as Cisco Video Phone 8875, Desk Phone 9800, and IP Phone 7800/8800 series, relates to the disclosure of information. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to...
The compatibility subsystem for running Linux applications allows Windows Subsystem for Linux (WSL) operating systems. This enables attackers to increase their privileges.
The vulnerability of the compatibility subsystem for running Linux applications involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Visual Studio Code’s source editor, related to the lack of data cleaning at the control level, allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...
The vulnerability of Microsoft Visual Studio Code’s editor, related to synchronization errors when using a shared resource (“Race Situation”), allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Visual Studio Code’s editor is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of the Azure Local local infrastructure software, related to errors in the certificate validation process, allows a perpetrator to execute arbitrary code.
The vulnerability of the Azure Local local infrastructure software is related to errors in the certificate validation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Mailslot File System component in Windows operating systems, which allows attackers to exploit their privileges.
The vulnerability of the Mailslot File System component in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the implementation of the LDAP service protocol on the Windows operating system allows a hacker to induce a service failure.
The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense (FTD) allows a perpetrator to trigger a service failure.
The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense FTD is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker operating remotely to cause a service failure...
The vulnerability of the png_set_quantize() function in the library for working with PNG bitmap graphics in libpng allows a hacker to execute arbitrary code.
The vulnerability of the pngsetquantize function in the library for working with PNG bitmap graphics in libpng is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted PNG file...
The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Microsoft Outlook email client, as well as Microsoft Office suites, Excel, and 365 Enterprise Apps, relates to insufficient protection of sensitive data, allowing attackers to carry out spear-phishing attacks.
The vulnerability of the Microsoft Outlook client, as well as Microsoft Office suites, Excel, and 365 Enterprise Apps, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...