The vulnerability of the Azure DevOps Server software lies in the insufficient testing of server-side requests, which allows attackers to perform spearfishing attacks.

The vulnerability of the Azure DevOps Server software lies in insufficient testing of server-side requests. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...

The vulnerability of the Microsoft Office suite is related to deficiencies in the deserialization mechanism, which allows attackers to execute spoofing attacks.

The vulnerability of the Microsoft Office package is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the HTTP.sys driver on Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the GDI+ component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the GDI+ component in the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows attackers to carry out XSS attacks.

The vulnerability of the Cisco Identity Services Engine ISE web interface and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the failure to implement measures to neutralize HTML tags. Exploiting this vulnerability allows a malicious...

The vulnerability of the microprogramming software in Cisco SIP IP phones such as Cisco Video Phone 8875, Desk Phone 9800, and IP Phones series 7800, 8800, allows a intruder to gain access to record arbitrary files, due to errors in access control.

The vulnerability of the microprogramming software in Cisco SIP IP phones, such as Cisco Video Phone 8875, Desk Phone 9800, and IP Phones series 7800 and 8800, is related to access control errors. Exploiting this vulnerability can allow an attacker operating remotely to gain access to arbitrary...

The vulnerability of the .NET software platform, related to the improper handling of missing special elements, allows attackers to perform spoofing attacks.

The vulnerability of the .NET software platform is related to the improper handling of the absence of a specific element. Exploiting this vulnerability allows an attacker who operates remotely to carry out spoofing attacks...

The vulnerability of the Power BI Report Server server, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Power BI Report Server is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these security measures...

The vulnerability of the Microsoft Visual Studio software lies in its inadequate control over code generation, which allows attackers to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software lies in the insufficient control over code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Azure AI Language Authoring lies in the lack of deserialization mechanism, which allows attackers to execute arbitrary code.

The vulnerability of Azure AI Language Authoring is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the web interface of the Cisco Unified Computing System (UCS) Manager allows a perpetrator to execute arbitrary code and expose confidential information.

The vulnerability of the web interface of the Cisco Unified Computing System UCS Manager relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code and disclose confidential information...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary code and gain unauthorized access to confidential information.

The vulnerability of the web interface of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized...

The vulnerability of the chassisd system daemon in Juniper Networks’ Junos routers of the MX, SRX, and EX series allows a attacker to cause service interruptions.

The vulnerability of the chassisd system daemon in Juniper Networks’ Junos routers of the MX, SRX, and EX series is related to the swapping of zero pointers. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of CodeMeter license control software, related to deficiencies in access control, allows a violator to trigger a service failure.

The vulnerability of CodeMeter License Management software is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to cause service interruptions...

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Installer component of Windows applications allows attackers to increase their privileges.

The vulnerability of the Windows Installer component of Windows applications is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Microsoft Defender for Endpoint on Linux operating systems, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of Microsoft Defender for Endpoint on Linux operating systems is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CS-Cart Multi-Vendor electronic shopping platform’s software lies in its ability to bypass authentication using a user-controlled key, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely compromise the integrity and accessibility of protected information...

The vulnerability of the ext4_fs_init inode_bitmap function in the lwext4 library allows a attacker to execute arbitrary code and cause a service denial.

The vulnerability of the ext4fsinit inodebitmap function in the lwext4 library involves a heap-buffer-overflow issue during the initialization of the inode bitmap. Exploiting this vulnerability allows an attacker to execute arbitrary code and cause service failures...

The vulnerability of the “Continent” security complex version 4, which involves the use of weak protection mechanisms, allows attackers to bypass authentication mechanisms and gain administrative access to the complex.

The vulnerability of the “Continent” security complex version 4 is related to the use of weak protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass authentication mechanisms and gain administrative access to the complex...

The vulnerability of the CS-Cart Multi-Vendor electronic shopping platform’s software lies in its ability to bypass authentication using a user-controlled key, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely compromise the integrity and accessibility of protected information...

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the software for electronic shopping platforms CS-Cart Multi-Vendor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Info.plist parser in Swedish

...

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool allows a hacker to manipulate the screen locking process.

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to deficiencies in resource blocking mechanisms. Exploiting this vulnerability could allow attackers to influence the screen locking process...

The vulnerability of the CS-Cart Multi-Vendor electronic shopping platform’s software lies in its ability to bypass authentication using a user-controlled key, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely compromise the integrity and accessibility of protected information...

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms lies in its ability to download files of a malicious nature without limitation, allowing a hacker to execute arbitrary code.

The vulnerability of the software for electronic shopping platforms CS-Cart Multi-Vendor relates to the unlimited download of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms lies in the insufficient control over resources with dynamic management. This allows a hacker to execute arbitrary code.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CS-Cart Multi-Vendor electronic shopping platform’s software lies in its ability to bypass authentication using a user-controlled key, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely compromise the integrity and accessibility of protected information...

The vulnerability of GitHub Copilot for Jetbrains, related to the lack of data cleaning at the management level, allows a hacker to execute arbitrary code.

The vulnerability of GitHub Copilot for Jetbrains relates to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the CS-Cart Multi-Vendor electronic shopping platform’s software lies in its ability to bypass authentication using a user-controlled key, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to remotely compromise the integrity and accessibility of protected information...

The vulnerability of the ext4_bmap_bit_set function in the lwext4 library allows a attacker to execute arbitrary code and cause a service failure.

The vulnerability of the ext4bmapbitset function in the lwext4 library arises from writing beyond the buffer of the block bitmap when processing a specially crafted ext image. Exploitation of this vulnerability could allow an attacker to execute arbitrary code and cause service failures...

The vulnerability of the Notepad text editor on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s text editor, Notepad, is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the raid1_remove_disk() function in the drivers/md/raid1.c module of the Linux kernel’s device driver for multiple devices (RAID and LVM), which allows a hacker to cause a service failure.

The vulnerability of the raid1removedisk function in the drivers/md/raid1.c module of the Linux device driver suite, which handles multiple devices such as RAID and LVM, is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the adv7842_cp_log_status() function in the drivers/media/i2c/adv7842.c file of the Linux kernel’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel-based multimedia device driver involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Hestia Control Panel server’s control panel, related to the lack of measures taken to protect the structure of the web page, allows attackers to increase their privileges.

The vulnerability of the Hestia Control Panel server’s control panel is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the io.netty.handler.codec.http.HttpRequestEncoder component in the Netty networking framework allows a attacker to replace the URL address.

The vulnerability of the io.netty.handler.codec.http.HttpRequestEncoder component in the Netty networking framework is related to the failure to handle CRLF sequences when processing the HttpRequestEncoder parameter. Exploiting this vulnerability allows a remote attacker to replace the URL addres...

The vulnerability of the XML syntactic analysis library Apache Xerces, related to the execution of a loop with an unavailable exit condition, allows attackers to cause service failures.

The vulnerability of the XML syntactic analysis library Apache Xerces is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Xerces2 Java XML parser, related to resource management errors, allows attackers to cause service failures.

The vulnerability of the Xerces2 Java XML parser is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending a specially crafted XML message...

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system allows a intruder to gain unauthorized access to the system.

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system relates to the use of a password hash instead of a password for authentication. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the system...

The vulnerability of the KLogic SCADA system’s virtual controller “KASCAD” allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Remote Access Connection Manager (RASMan) service on the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Remote Access Connection Manager RASMan service in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `foregroundChild()` function in the Node.js software platform’s file and directory searching library, which allows a hacker to execute arbitrary code.

The vulnerability of the foregroundChild function in the Node.js software platform’s file and directory searching library is related to the improper handling of the shell parameter in .bat and .cmd files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the data type processing function in PostgreSQL database management systems allows attackers to access memory bytes of the server and obtain confidential information.

The vulnerability of the oidvector data type processing function in the PostgreSQL database management system is related to reading beyond the buffer memory boundaries. Exploiting this vulnerability can allow an attacker to access server memory bytes and gain access to confidential information...

The vulnerability of the kimage_mapSegment() function in the kernel/kexecCore.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kimagemapSegment function in the kernel/kexecCore.c module of the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the felix_change_tag_protocol() function in the drivers/net/dsa/ocelot/felix.c module of the DSA kernel driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the felixchangetagprotocol function in the drivers/net/dsa/ocelot/felix.c file of the DSA kernel driver in the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system allows a intruder to gain unauthorized access to the system.

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to incorrect session duration settings. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the system...

The vulnerability of the KLogic SCADA system’s virtual controller “KASKAD” allows a intruder to increase their privileges and delete arbitrary files.

The vulnerability of the KLogic SCADA system “KASKAD” virtual controller is related to incorrect external control of the file name or file path. Exploiting this vulnerability can allow a malicious actor to increase their privileges and delete arbitrary files...