92298 matches found
Vulnerability of Windows operating systems, related to synchronization errors when using shared resources, allows attackers to escalate their privileges.
The vulnerability of Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the execution environment in Windows operating systems’ WinRT framework allows attackers to escalate their privileges.
The vulnerability of the WinRT runtime in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows Push Notification Service allows a perpetrator to escalate their privileges on Windows operating systems.
The vulnerability of the Windows Push Notification Service is related to buffer overflows in the dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the External Tools module in the integrated Studio 5000 Logix Designer environment allows a hacker to execute arbitrary code.
The vulnerability of the External Tools module in the integrated Studio 5000 Logix Designer environment is related to the absence of quotation marks when writing elements or search paths. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially created...
The vulnerabilities of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server allow a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages allow attackers to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to an unreliable pointer assignment mechanism. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these security measures...
The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...
The vulnerability of the JIT-compiler of the Mozilla Firefox browser allows a hacker to execute arbitrary code.
The vulnerability of the JIT-compiler of the Mozilla Firefox browser is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of Windows operating system DHCP clients allows a perpetrator to execute arbitrary code.
The vulnerability of DHCP clients of Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
The vulnerability of the integrated design environment for Studio 5000 Logix Designer arises from incorrect path name restrictions to the catalog, allowing unauthorized users to gain unauthorized access to file creation and execute arbitrary code.
The vulnerability of the integrated design environment of Studio 5000 Logix Designer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to file creation and execute arbitrary code by sending a speciall...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages, as well as Microsoft Office Online Server, allow attackers to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs, as well as Microsoft Office Online Server, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...
The vulnerability in Microsoft Word, the Microsoft SharePoint Server corporate application suite, Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise, as well as the Microsoft Office Server software suite and Microsoft 365 Apps for Enterprise, is related to a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise, as well as the Microsoft Office Server and Microsoft 365 Apps for Enterprise products, is related to buffer overflow in dynamic memory...
The vulnerability of the Windows QoS Packet Scheduler allows a hacker to exploit it to disclose protected information.
The vulnerability of the Windows QoS Packet Scheduler in the operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Vulnerability of the Cryptographic Operating System Services in Windows, allowing attackers to disclose protected information
The vulnerability of the Windows Cryptographic Operating System services is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the Remote Desktop Protocol (RDP) on Windows operating systems allows attackers to compromise protected information.
The vulnerability of the Remote Desktop Protocol RDP on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Push Notification component in the Windows operating system allows a hacker to disclose protected information.
The vulnerability of the Push Notification component in the Windows operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to the use of an uninitialized resource, allowing a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
The vulnerability of Microsoft Defender for Endpoint for Mac, related to synchronization errors when using a shared resource (“Race Situation”), allows a malicious actor to escalate their privileges.
The vulnerability of Microsoft Defender for Endpoint for Mac is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the integrated design environment of Studio 5000 Logix Designer, related to deficiencies in the authentication process, allows a malicious actor to execute arbitrary code.
The vulnerability of the integrated design environment Studio 5000 Logix Designer is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to execute arbitrary code by replacing the configuration file of external tools...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the redirection of URLs to unreliable websites, allowing attackers to circumvent security restrictions.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to bypass security restrictions remotely...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of the ColdFusion software platform, related to incorrect restrictions on path names in the catalog, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the ColdFusion software platform, related to authentication errors, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the authd and remoted processes of the monitoring and threat detection platform Wazuh allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the registration demon authd and the synchronization demon remoted of the Wazuh platform for security monitoring and threat detection is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain...
The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Content Credentials SDK libraries, related to insufficient protection of registration data, allows attackers to enhance their privileges.
The vulnerability of Content Credentials SDK libraries is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Content Credentials SDK libraries lies in the insufficient validation of requests on the server side, allowing attackers to increase their privileges.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...
Vulnerability of the DOM component: Mozilla Firefox’s navigation feature, which allows attackers to compromise the privacy and integrity of protected information.
Vulnerability of the DOM component: Mozilla Firefox’s navigation mechanism is associated with deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of protected information...
The vulnerability of the #update method in the Concurrent::AtomicReference class in the Ruby Concurrent Ruby library allows a violator to trigger a service failure.
The vulnerability of the update method in the Concurrent::AtomicReference class in the Ruby Concurrent library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Brokering File System BFS in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Adobe Illustrator, related to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of Adobe Illustrator’s graphic editor is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...
The vulnerability of the ColdFusion software platform, related to authentication errors, allows attackers to escalate their privileges.
The vulnerability of the ColdFusion software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the ColdFusion software platform, related to incorrect session expiration times, allows attackers to bypass existing security mechanisms.
The vulnerability of the ColdFusion software platform is related to the incorrect duration of a session. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms remotely...
The vulnerability of the ColdFusion software platform, related to insufficient validation of queries on the server side, allows attackers to bypass existing security mechanisms.
The vulnerability of the ColdFusion software platform is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of the linker.exe executable of Rockwell Automation Arena’s discrete event simulation and automation software allows a attacker to execute arbitrary code.
The vulnerability of the linker.exe executable of Rockwell Automation Arena’s event simulation and automation software is related to the execution of operations beyond the buffer boundaries in memory, resulting from incorrect validation of input data. Exploiting this vulnerability allows an...
The vulnerability of the R7-Officer corporate server’s document editor lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary JavaScript code.
The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code...
The vulnerability of the DHCP Server Service for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the DHCP Server Service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerabilities of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server allow a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Office software package, related to the use of an uninitialized resource, allows a hacker to disclose protected information.
The vulnerability of the Microsoft Office suite is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to disclose protected information...