99397 matches found
YouGile Project Management Service Unauthorized Access
The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
YouGile Project Management XSS
The vulnerability of the YouGile project management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...
YouGile Project Management Service Unauthorized Access
The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
YouGile Project Management Code Execution
The vulnerability of the YouGile project management service is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Centralized Printer MFP Supervision Unauthorized Access
The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
TouchMED FSTEK (No. 1, dated 2026.08.24 09:58:03)
...
Test IT software testing management system Unauthorized Access
The vulnerability in Test IT’s software testing management system is related to improper handling of incoming requests. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...
h2 library Resource Consumption DoS
The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
DIAFAN.CMS SQL Injection
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Dr.Web ConfigD Executable Buffer Overflow DoS
The vulnerability of the Dr.Web ConfigD executable module is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose the protected information...
MaxPatrol EDR DoS
The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
TOPAZ Metron PTS Time Synchronization Command Injection
The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...
GEO.RITM REST API Auth Bypass Info Disclosure
The vulnerability of the software interface REST API of the GEO.RITM software lies in the lack of authentication when accessing the function for retrieving object attributes. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...
REDAAM IT-infrastructure Management System Auth Bypass
The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
CommuniGate Pro Access Control Unauthorized Modification
The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...
Tekon SCADA Code Execution
The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...
Tekon SCADA Privilege Escalation
The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
1C-Bitrix Before and After Photos Code Execution
Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...
KOMTEK Cassa Kurier Module Authentication Bypass
Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...
Doctor Around Telemedicine Premium Authentication Bypass Info Disclosure
The vulnerability of the “Doctor Around. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
Doctor Near Telemedicine Premium Authentication Bypass
The vulnerability of the “Doctor Near. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
OLIMPOX Authentication Bypass
The vulnerability of the “OLIMPOX” training and control system’s software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
TrueConf Server Authentication Privilege Escalation
The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS Cryptographic Defect Unauthorized Access
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...
Webasyst Shop-Script CMS Insufficient Testing
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS Path Traversal
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS Code Execution
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
Realtek RTL8762C SWD Information Disclosure
The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...
Windows kernel Code Execution
The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or enhance their privileges...
Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS
The vulnerability of the SBCDecodeFrames function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failure...
Bestechic BES2300 Bluetooth Audio SoC Heap Buffer Overflow DoS
The vulnerability of the avrcpindicateprocessdataind function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafte...
Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS
The vulnerability of the btmaclhandle function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted L2CAP packet...
CodeScoring Template Code Execution
The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Bestechnic BES2300 Bluetooth Audio SoC Buffer Overflow DoS
The vulnerability of the l2caphandledata function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially...
Realtek RTL8762C Information Disclosure
The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...
Ascon.Pilot.WinService Auth Bypass Code Execution
The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Ascon.Pilot.WinService Authentication Bypass
The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...
Telecom MG Code Execution
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Telecom MG Code Execution
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Telecom MG Code Execution
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Information Disclosure
The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...