97943 matches found
Mercusys AC12 UART Code Execution
The vulnerability of the UART interface in the microprogramming software of Mercusys AC12 routers lies in the absence of a mechanism to protect the alternative hardware interface. Exploiting this vulnerability allows an attacker to execute arbitrary code...
OCaml readblock() Code Execution
The vulnerability of the readblock function in the runtime/intern.c file of the OCaml programming language is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
builder-util-runtime Electron Unauthorized Access
The vulnerability of the builder-util-runtime module of the Electron-updater software platform for creating Electron applications is related to information disclosure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Linux fs/mnt_idmapping.c Heap Buffer Overflow DoS
The vulnerability of the statmountmntidmap function in the fs/mntidmapping.c component of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
JSON processing library Prototype Pollution
The vulnerability of the JSON processing library and stream-json is related to inadequate control over changes to prototype attributes. Exploiting this vulnerability could allow an attacker to execute a “prototype pollution” attack...
MTR ipinfo_lookup() DoS
The vulnerability of the ipinfolookup function in the MTR network diagnostic and monitoring utility is related to the operation that exceeds the buffer boundaries in memory when processing DNS responses. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Piwigo mime_content_type Code Execution
The vulnerability of the mimecontenttype function in the Piwigo content management system is related to the unlimited loading of files of a dangerous type, due to the lack of strict checks on file extensions and content. Exploiting this vulnerability could allow an attacker operating remotely to...
Kener monitoring panel Unauthorized Access
The vulnerability of the monitoring panel of the Kener page creation and accessibility service monitoring tool is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
MongoDB Compass Unauthorized Access
The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, is related to improper code generation practices. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Hyper-V Privilege Escalation
The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
HU250 module Privilege Escalation
The vulnerability of the HU250 microprogramming software for modular remote terminals in telemechanics and automation systems from PowerLogic T300 formerly Easergy T300 RTU relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow attackers to...
PTC Windchill PDMLink FlexPLM Code Execution
The vulnerability of the PTC Windchill PDMLink and PTC FlexPLM lifecycle management systems is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Visual Studio Code Source Editor Security Restriction Bypass
The vulnerability of Visual Studio Code’s source editor is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Windows Secure Kernel Mode Privilege Escalation
The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...
stream-json/jsonc parser JSONC DoS
The vulnerability in the stream-json/jsonc/parser.js and stream-json/jsonc/verifier.js libraries for processing JSON and JSONC streams is related to inefficient algorithmic complexity. Exploiting this vulnerability can allow attackers to cause service failures...
libheif Code Execution
The vulnerability of the unci decoder and file format encoder component of libheif relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Routing and Remote Access Service RCE
The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Visual Studio Code Source Editor HTTP Request Processing
The vulnerability of Visual Studio Code’s source editor is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Visual Studio Code Source Editor
The vulnerability of Visual Studio Code’s source editor is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Visual Studio Code Source Editor Unauthenticated Access Disclosure
The vulnerability of Visual Studio Code’s source editor is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected information...
Resilient File System Privilege Escalation
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Cloud Files Mini Filter Driver Privilege Escalation
The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Hyper-V Component Code Execution
The vulnerability of the Hyper-V component in Windows operating systems is related to the swapping of an unreliable pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Windows Media Player Code Execution
The vulnerability of the Windows Media Player media player on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
USB Video Driver Privilege Escalation
The vulnerability of the USB Video Driver driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Linux net/ipv4/raw.c Heap Buffer Overflow DoS
The vulnerability of the rawsendhdrinc function in the net/ipv4/raw.c component of the Linux kernel is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux kernel TCP Connection Request Buffer Overflow DoS
The vulnerability of the tcpconnrequest function in the include/net/tcp.h component of the Linux kernel is related to the predictability of random initial numbers for TCP sessions. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Visual Studio Code Source Editor XSS
The vulnerability of Visual Studio Code’s source editor is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Trusted Execution Environment Privilege Escalation
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the swapping of non-trusted pointers. Exploiting this vulnerability can allow attackers to enhance their privileges...
Device Association Service Privilege Escalation
The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Remote Desktop Services Privilege Escalation
The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows an attacker to increase their privileges remotely...
Virtual Hard Disk Miniport Driver Code Execution
The vulnerability of the Virtual Hard Disk VHD Miniport Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Windows Hello Privilege Escalation
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
Azure HDInsight Apache Ambari Privilege Escalation
The vulnerability in the Apache Ambari web interface of the Azure HDInsight data analytics service relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
ModernExecServer DLL Heap Buffer Overflow Privilege Escalation
The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system is related to the use of memory after release. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Containerd Execution Environment Input Validation
The vulnerability of Containerd’s execution environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...
Containerd Execution Environment Disclosure
The vulnerability of the Containerd execution environment is related to errors in handling links. Exploiting this vulnerability can allow an attacker to disclose protected information...
simple-git parseEnv Buffer Overflow
The vulnerability of the vulnerabilityCheck function in the parseEnv component of the simple-git library in the Node.js software platform is related to the use of an incomplete blacklist. Exploitation of this vulnerability could allow a malicious actor to bypass existing security mechanisms...
Adm-zip Privilege Escalation
The vulnerability of the extractAllTo and extractEntryTo functions in the Node.js library for working with zip files, Adm-zip, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Adobe Campaign Classic SQL Injection
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
XRDP Server FIPS RDP DoS
The vulnerability of the XRDP server’s FIPS-protected RDP packets relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
XRDP Packet Processing Handler DoS
The vulnerability of the RDP packet processing module in the XRDP server is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Adobe Campaign Classic for
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Adobe Campaign Classic Cross-site Request Manipulation
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...
Adobe Campaign Classic Authentication Bypass RCE
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...