iCore Antivirus RCE

The vulnerability of the iCore antivirus software from Trend Micro’s Apex One service is related to a data source verification error. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

iCore Antivirus Privilege Escalation

The vulnerability of the iCore antivirus software from Trend Micro’s Apex One lies in synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

Trend Micro Apex One Code Execution

The vulnerability of the management console of the Trend Micro Apex One antivirus software is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

KeyChainActivity Privilege Escalation

The vulnerability of the KeyChainActivity component in Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android HostEmulationManager onNullBinding Heap Buffer Overflow

The vulnerability of the onNullBinding method in the HostEmulationManager.java class in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

Android handleBondStateChanged Disclosure

The vulnerability of the handleBondStateChanged method in the AdapterService.java class of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by security measures...

Android NotificationManagerService isSameApp DoS

The vulnerability of the isSameApp method in the NotificationManagerService.java class of Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure...

UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to the lack of a standardized mechanism for handling errors. Exploiting this vulnerability can allow attackers to cause service failures...

PHPShop Unauthenticated Access

The vulnerability of the PHPShop content management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

1C:Library of Standard Subsystems Command Execution

The vulnerability of the developer tool “1C:Standard Subsystems Library” relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the server user remotely...

VoIP gateway software Telecom MG Unauthorized Access

The vulnerability of the VoIP gateway software of Telecom MG is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PHPShop SQL Injection

The vulnerability of the PHPShop content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

PHPShop SQL Injection

The vulnerability of the PHPShop content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Android LauncherProcessImageListener.kt Heap Buffer Overflow DoS

The vulnerability of the getPreferredSize function in the LauncherProcessImageListener.kt script on Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

Keycloak URL Validator Information Disclosure

The vulnerability of the URL validator in the Keycloak identity and access management software relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Firebird Database Information Disclosure

The vulnerability of the client library of the Firebird database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to cause a data leak...

Framework Component Privilege Escalation

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ComputerEngine.java Privilege Escalation

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Android Framework performPreInstallChecks() Privilege Escalation

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...

SQLite FTS5 DoS

The vulnerability of the embedded virtual table module in the FTS5 database system of the SQLite database management system is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions...

UniFi OS Server Arbitrary Command Execution

The vulnerability of the UniFi OS Server network management center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

UniFi OS Server Access Control

The vulnerability of the UniFi OS Server network management center is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

UniFi OS Server Path Traversal

The vulnerability of the UniFi OS Server network management center is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

TRENDnet TEW-432BRP formSetPortTr Heap Buffer Overflow DoS

The vulnerability of the formSetPortTr function in the /goform/formSetPortTr file of the TRENDnet TEW-432BRP router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or...

TRENDnet TEW-432BRP Router Arbitrary Command Execution

The vulnerability of the formSetRoute function in the /goform/formSetRoute file of the TRENDnet TEW-432BRP router microprogramming system is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

TRENDnet TEW-432BRP Form WPS Command Execution

The vulnerability of the formWPS function in the /goform/formWPS file of TRENDnet TEW-432BRP microprogramming router software is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow a remote attacker to execute arbitrar...

Apex One NT Listener Privilege Escalation

The vulnerability of the Apex One NT Listener antivirus software is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...

Trend Micro Apex One Privilege Escalation

The vulnerability of the caching mechanism of the anti-virus software Trend Micro Apex One is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...

Android loadSafeLabel() Privilege Escalation

The vulnerability of the loadSafeLabel function in Android operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android l2c_fcr_clone_buf Heap Buffer Overflow Privilege Escalation

The vulnerability in the l2cfcrclonebuf section of the l2cfcr.cc code in Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

ForgetDeviceDialogFragment Java Privilege Escalation

The vulnerability of the getAppLabel method in the ForgetDeviceDialogFragment.java class of Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android Shared.java getCallingPackageName Privilege Escalation

The vulnerability of the getCallingPackageName method in the Shared.java class of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

Android HostEmulationManager onNullBinding Heap Buffer Overflow

The vulnerability of the onServiceConnected method in Android operating systems arises due to a race condition. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android KeyguardViewMediator Disclosure

The vulnerability in the KeyguardViewMediator.java class of Android operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the system’s security measures...

Android GraphicsDriverEnableAngleAsSystemDriverController updateState DoS

The vulnerability of the updateState method in the GraphicsDriverEnableAngleAsSystemDriverController.java class in Android operating systems is related to incorrect handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

PHPShop Path Traversal Code Execution

The vulnerability of the PHPShop content management system is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Yandex SpeechKit CMS Authentication Bypass

Vulnerability of the “Yandex SpeechKit” module in the Content Management System CMS of 1C-Bitrix: Website management is associated with the absence of authentication for critical functions. Exploiting this vulnerability may allow a malicious actor to compromise the confidentiality, integrity, and...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

BestPlace Authentication Bypass

The vulnerability of the geo-analytics platform BestPlace with machine learning training involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information and steal the user’s...

UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link DI-7001 MINI Router sprintf Buffer Overflow DoS

The vulnerability of the sprintf function in the /httpddebug.asp file of the D-Link DI-7001 MINI router’s microprogramming system is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows a remote attacker to...

Android applySimpleFieldMaxSize Heap Buffer Overflow DoS

The vulnerability of the applySimpleFieldMaxSize method in the DataRowHandler.java class of Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

PDF.js XSS

The vulnerability of the application for integrating PDF.js files with cloud-based software for creating and using data storage in NextCloud Server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scriptin...

Nextcloud Server Unauthorized Access

The vulnerability of the endpoint of the cloud software for creating and using a data storage service, Nextcloud Server, involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

LibSoup Heap Buffer Overflow DoS

The vulnerability of the soupbodyinputstreamreadchunked function in the LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures, execute a cache poisoning attack, or gain unauthorized...

PipTaskOrganizer Java Privilege Escalation

The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

Grafana Authentication Bypass

The vulnerability of the Grafana monitoring and observation platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Apache HTTP Server DoS

The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Grafana Privilege Escalation

The vulnerability of the Grafana monitoring and observation platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

NextCloud Desktop Synchronization Code Execution

The vulnerability of the synchronization tool for NextCloud’s desktop interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...