The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the aiptekirq() function in the drivers/input/tablet/aiptek.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the fromWrlclientSet() function in the httpd daemon’s microprogramming software for Tenda FH1202 allows a hacker to execute arbitrary code.

The vulnerability of the fromWrlclientSet function in the httpd daemon’s microprogramming system for Tenda FH1202 is related to the issue where an operation is performed outside the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability of the Windows Kernel component in operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Kernel component in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to cause a service failure.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the fromexeCommand() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromexeCommand function in the Tenda F456 router’s microprogramming system is related to the execution of an operation outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

The vulnerability of the formexeCommand() function in the Tenda W3 wireless access point software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function in the Tenda W3 wireless access point software lies in the fact that the operation exceeds the buffer limits in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

The vulnerability of the mp_SetEnddisc() function in the operating system kernel of FreeBSD allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the mpSetEnddisc function in the kernel of FreeBSD is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure or execute arbitrary code...

The vulnerability of the Rsync file transfer and synchronization utility, related to bypassing authentication through spoofing, allows a perpetrator to circumvent existing security mechanisms.

The vulnerability of the Rsync file transfer and synchronization utility relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

The vulnerability of the strcpy() function in Tenda A18 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the strcpy function in Tenda A18 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the action_set_net_settings() function (gpon.lua) in the Setting Handler component of the GPON-terminal software Tenda G103 allows a intruder to execute arbitrary commands.

The vulnerability of the actionsetnetsettings function gpon.lua in the Setting Handler component of the GPON-terminal software Tenda G103 is related to the lack of measures to sanitize input data during the processing of parameters...

The vulnerability of the fromSafeClientFilter() function (/goform/SafeClientFilter) in the httpd microprogramming system for Tenda F451 components allows a attacker to cause a service failure.

The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the httpd microprogramming system for Tenda F451 routers is related to the issue of the operation going beyond the buffer in memory when processing the manufacturer/Go parameter. Exploiting this vulnerability could...

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to enhance their privileges.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the `execve` system call in FreeBSD’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the execve system call in FreeBSD operating systems is related to improper verification of removed users. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the /etc-ro/shadow file in the Tenda G1 router microprogramming system allows a hacker to execute arbitrary commands on behalf of the root user.

The vulnerability of the /etcro/shadow file in the Tenda G1 router microprogramming system is related to the use of fixed password encoding. Exploiting this vulnerability allows an attacker to execute arbitrary commands on behalf of the root user...

The vulnerability of the fromNatStaticSetting function (/goform/NatStaticSetting) in the Tenda CX12L Wi-Fi router software allows a intruder to trigger a service failure.

The vulnerability of the fromNatStaticSetting function /goform/NatStaticSetting in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the fromVirtualSer() function in Tenda F453 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromVirtualSer function in Tenda F453 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the ioctl request handler TIOCSCTTY in FreeBSD operating systems allows a attacker to increase their privileges.

The vulnerability of the ioctl request handler TIOCSCTTY in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Adobe Photoshop graphic editor, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Tenda AC7 router’s microprogramming software, related to the transmission of data in an open manner, allows a hacker to disclose the protected information.

The vulnerability of the Tenda AC7 router’s microprogramming software is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the fromGstDhcpSetSer() function (/goform/GstDhcpSetSer) in the httpd microprogramming system for Tenda F451 components allows a attacker to cause a service failure.

The vulnerability of the fromGstDhcpSetSer function /goform/GstDhcpSetSer in the httpd microprogramming system for Tenda F451 components is related to the issue of the operation going beyond the buffer in memory when processing the dips parameter. Exploiting this vulnerability could allow an...

The vulnerability of the formWrlExtraSet(/goform/WrlExtraSet) function in the Tenda FH1201 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formWrlExtraSet/goform/WrlExtraSet function in the Tenda FH1201 router microprogramming system lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the WrlclientSet(/goform/WrlclientSet) function in the Tenda FH1201 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the WrlclientSet/goform/WrlclientSet function in the Tenda FH1201 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 software allows a perpetrator to execute arbitrary commands.

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the mac parameter. Exploiting this vulnerability can allow an attacker to...

The vulnerability in the Open WebUI web interface, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Open WebUI web interface related to insufficient validation of requests on the server side when processing the AIOHTTPCLIENTALLOWREDIRECTS parameter. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the formWifiMacFilterSet() function in the Tenda W3 wireless access point software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiMacFilterSet function in the Tenda W3 wireless access point software lies in the fact that the operation’s results are stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling, which allows attackers to carry out spoofing attacks.

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the final destination /goform/AdvSetD...

The vulnerability of the Skype for Business Server’s instant messaging program, related to a countable loss of significance, allows a perpetrator to trigger a service failure.

The vulnerability of the Skype for Business Server’s instant messaging program is related to a countable loss of significance. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the fromNatlimit() function in Tenda F453 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromNatlimit function in Tenda F453 router microprogramming software is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the ioctl request handler FIOSSHMLPGCNF in FreeBSD operating systems allows a hacker to increase their privileges.

The vulnerability of the ioctl request handler FIOSSHMLPGCNF in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Skype for Business Server’s instant messaging program, related to insufficient validation of requests on the server side, allows attackers to disclose protected information.

The vulnerability of the Skype for Business Server’s instant messaging program is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the set_device_name() function in Tenda A21 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setdevicename function in Tenda A21 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the websGetVar() function in the microprogramming software for Tenda AC15 allows a hacker to execute arbitrary code.

The vulnerability of the websGetVar function in the Tenda AC15 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the LcpDecodeConfig() function in the operating system kernel of FreeBSD allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the LcpDecodeConfig function in the kernel of the FreeBSD operating system is related to improper handling of discrepancies in parameter length. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the fromSetIpMacBind() function in Tenda A21 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpMacBind function in Tenda A21 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the TLS connection mechanism through SOCKS5 proxy HTTP clients in the Undici software platform (NodeJS) allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the TLS connection mechanism through SOCKS5 proxy HTTP clients in the Undici software platform NodeJS is related to errors in the certificate authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the...

The vulnerability of the unserialize() function in the SessionMaker CMS system, October CMS, allows a hacker to execute arbitrary code.

The vulnerability of the unserialize function in the SessionMaker CMS system, October CMS, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Parameter Handler component in the fromAdvSetWan function of the /goform/AdvSetWan microprogramming system Tenda CH22, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Parameter Handler component in the fromAdvSetWan function of the /goform/AdvSetWan microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the Container Isolation FS Filter driver for Windows operating systems allows a hacker to compromise the integrity of the protected information.

The vulnerability of the Container Isolation FS Filter driver for Windows operating systems is related to the incorrect handling of symbolic references before accessing a file. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the /etc_ro/shadow file in the Tenda i24 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the /etcro/shadow file in the Tenda i24 wireless access point software lies in the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to compromise the integrity of the protected information.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to the ability to bypass access control mechanisms. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the formSetCfm function in the microprogramming software for Tenda AC15 allows a hacker to trigger a service failure.

The vulnerability of the formSetCfm function in the Tenda AC15 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...