92298 matches found
The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Content Credentials SDK libraries, related to insufficient protection of registration data, allows attackers to enhance their privileges.
The vulnerability of Content Credentials SDK libraries is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Office software package, related to the use of an uninitialized resource, allows a hacker to disclose protected information.
The vulnerability of the Microsoft Office suite is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise software allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their ability to allow unlimited loading of dangerous files, enabling attackers to increase their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the ability to download files of a malicious nature without limitation. Exploiting these vulnerabilities can allow attackers t...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of the ColdFusion software platform, related to improper code generation management, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to the lack of authentication for critical functions, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to increase their privileges...
Vulnerability of the JavaScript component: Mozilla Firefox’s WebAssembly browser allows attackers to disclose protected information.
JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to an incorrect pointer dereferencing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the camel-pqc component in the Apache Camel Java framework allows a attacker to execute arbitrary code.
The vulnerability of the camel-pqc component in the Apache Camel Java framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the Redirected Drive Buffering System (RDBS) in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Redirected Drive Buffering System RDBS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the SMB server for Windows operating systems allows attackers to expose protected information.
The vulnerability of the SMB server for Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to disclose sensitive information that is protected by security measures...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise software allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages allow attackers to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Unified Consent System component in Windows operating systems, which allows a violator to increase their privileges
The vulnerability of the Unified Consent System component in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to compromise protected information
The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Certificate Revocation List (CRL) function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 allows a intruder to circumvent security restrictions.
The vulnerability of the Certificate Revocation List CRL function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 is related to improper verification of certificate revocation. Exploiting this vulnerability...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
The vulnerability of the IOCTL dispatcher in the ASUS System Control Interface (ASCI) driver and the set of tools for managing and protecting corporate devices provided by ASUS Business Manager, which allows a malicious actor to disclose protected information or cause service failures.
The vulnerability of the IOCTL handler of the ASCI driver allows an attacker to exploit it to disclose protected information or cause service failures. This vulnerability is related to errors that occur during the update of the link counters. Exploiting this vulnerability could enable a remote...
The vulnerability of the Content Credentials SDK libraries, related to the use of an unreliable search path, allows a perpetrator to execute arbitrary code.
The vulnerability of Content Credentials SDK library libraries is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of the Microsoft .NET software platform, related to improper encoding or escaping of output data, allows a perpetrator to execute an SSRF attack.
The vulnerability of the Microsoft .NET software platform is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in access control errors, which allow attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to access control errors. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the USB Audio Class driver for Windows operating systems allows attackers to disclose protected information.
The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of input data. This allows attackers to exploit this weakness to increase their privileges.
The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to enhance their privileges remotely...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and redirect users to malicious websites.
The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform and its production process optimization capabilities is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...
The vulnerability of the microprogrammed input/output module software of the FLEX 5000, related to the repeated release of memory, allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed input/output module software of the FLEX 5000 is related to the repeated release of memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted CIP packets...
The vulnerability of the SessionSecurityTokenHandler class in Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.
The vulnerability of the SessionSecurityTokenHandler class in Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute...
The vulnerability of the wazuh-analysisd module of the Wazuh security monitoring and threat detection platform allows a malicious actor to cause a service failure.
The vulnerability of the wazuh-analysisd module of the security monitoring and threat detection platform Wazuh is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the camel-solr component of the Apache Camel Java framework, which allows a hacker to gain unauthorized access to confidential information or perform a SSRF attack
The vulnerability of the camel-solr component of the Apache Camel Java framework is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or perform a SSRF attack...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Projected File System (ProjFS) file system in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the Projected File System ProjFS in Windows operating systems is related to the incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of Windows operating system’s Cryptographic Services allows attackers to circumvent security restrictions.
The vulnerability of Windows operating system’s Cryptographic Services is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
The vulnerability of the DirectX Graphics Kernel component of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows Cloud Files Mini Filter driver allows a hacker to disclose protected information.
The vulnerability of the Windows Cloud Files Mini Filter driver in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Active Directory Federation Services (ADFS) allows a perpetrator to trigger a service failure.
The vulnerability of Active Directory Federation Services AD FS is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from improper encoding or escaping of output data. This allows attackers to execute arbitrary code.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to improper coding or escape sequences in output data. Exploiting these vulnerabilities can allow a remote attacker to execute...
The vulnerability of the dwg_next_entity() function in the src/dwg.c file of the LibreDWG format file processing library allows a attacker to cause a service failure.
The vulnerability of the dwgnextentity function in the src/dwg.c file of the LibreDWG format processing library is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the command-line interface (CLI) of FortiOS operating systems and FortiProxy proxy servers, which allows attackers to compromise the confidentiality of protected information.
The vulnerability of the command-line interface CLI of FortiOS operating systems and FortiProxy proxy servers for protecting against internet attacks is related to operations that go beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the...
Vulnerability of FortiOS operating systems and FortiProxy proxy servers in protecting against Internet attacks, due to failure to handle CRLF sequences in HTTP headers, allowing attackers to execute arbitrary code.
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to trigger an Error Message Response (MNRF).
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...