The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Windows Filtering Platform (WFP), a filtering platform for Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Windows Filtering Platform WFP in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages involves a calculated loss of significance, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to a calculated loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of client machines in Windows operating systems when using the Remote Desktop Client allows attackers to escalate their privileges.

The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers lies in the unlimited distribution of resources, which allows a hacker to trigger a service failure.

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in service operations...

The vulnerability in the implementation of the Remote Desktop Protocol (RDP) on Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Bluetooth service for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the ImagingTgaRleEncode() function in the TgaRleEncode.c component of the Pillow image processing library allows a hacker to disclose protected information.

The vulnerability of the ImagingTgaRleEncode function in the TgaRleEncode.c component of the Pillow image processing library is related to the output of the operation outside the buffer. Exploiting this vulnerability could allow an attacker to disclose protected information through the generated...

The vulnerability of the PdfParser.PdfStream.decode() function in the PIL/PdfParser.py module of the Pillow image processing library allows a hacker to induce a service denial.

The vulnerability of the PdfParser.PdfStream.decode function in the PIL/PdfParser.py module of the Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the issue of buffer overflows. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...

The vulnerability of Schneider Electric’s Cybersecurity Admin Expert (CAE) software, a security management tool, stems from insufficient protection for registration data. This vulnerability allows attackers to enhance their privileges.

The vulnerability of Schneider Electric’s Security Management Software, EcoStruxure Cybersecurity Admin Expert CAE, is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Command Line Interface (CLI) of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local platform for managing software products allows a perpetrator to execute arbitrary code.

The vulnerability of the Command Line Interface CLI of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local software platform is related to an incorrect restriction on the path...

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to the failure to handle CRLF sequences in HTTP headers, allows attackers to gain unauthorized access and modify authentication requests.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access and modify...

The vulnerability of cloud-based software for Opcenter X’s digital production capabilities, related to errors in verifying cryptographic signatures, allows a hacker to gain full access to the application.

The vulnerability of cloud-based software for digital production in Opcenter X is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain full access to the application...

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the set of Microsoft XML Core Services on the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft XML Core Services on the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the console-based graphic editor ImageMagick lies in its reliance on memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the GPAC multimedia platform, related to improper cleaning or release of resources, allows a violator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

Vulnerability of Windows operating systems, related to deficiencies in access control, allows attackers to escalate their privileges

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the Cisco RoomOS operating system, related to the lack of measures for data encryption, allows a intruder to disclose protected information.

The vulnerability of the Cisco RoomOS operating system is related to the lack of measures for data encryption. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the Cisco RoomOS operating system, related to insufficient resource control during its existence, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco RoomOS operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the MSL encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the freerdp_certificate_data_hash_() function in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the freerdpcertificatedatahash function in the RDP client FreeRDP is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of the rdp_write_logon_info_v2() function in the RDP client FreeRDP, allowing a hacker to cause a service failure

The vulnerability of the rdpwritelogoninfov2 function in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the urb_select_interface() function in the RDP client FreeRDP allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the urbselectinterface function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...

The vulnerability of the audin_server_recv_formats() function in the RDP client FreeRDP allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the audinserverrecvformats function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the Cisco RoomOS operating system, related to improper handling of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the Cisco RoomOS operating system is related to improper handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the raw image format component in the console-based graphic editor ImageMagick allows a hacker to exploit it to disclose protected information.

The vulnerability of the raw image format component of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick allows a hacker to induce a service failure.

The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Vulnerability of Windows operating systems, related to deficiencies in access control, allowing attackers to circumvent security restrictions

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass security restrictions...

Уязвимость функции readSeparateStripsIntoBuffer() библиотеки LibTIFF, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Уязвимость функции readSeparateStripsIntoBuffer библиотеки LibTIFF связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации посредством специально созданных...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant involves redirecting URLs to unreliable websites, allowing attackers to escalate their privileges.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Web Proxy Auto-Discovery Protocol (WPAD) implementation in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Web Proxy Auto-Discovery Protocol WPAD implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of remote desktop protocol (RDP) clients for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Windows WebView component on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows WebView component in operating systems involves the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Network File System (NFS) on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Network File System NFS on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Siemens’ vulnerabilities in engineering and industrial software, related to the use of an unreliable search path, allow attackers to escalate their privileges.

The vulnerability of Siemens’ engineering and industrial software is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the PyImaging_MapBuffer() function in the src/map.c component of the Pillow image processing library allows a attacker to disclose protected information or cause service interruptions.

The vulnerability of the PyImagingMapBuffer function in the src/map.c component of the Pillow image processing library is related to the issue of the operation exceeding the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

The vulnerability of the Perl programming language module Text::CSV_XS, related to memory usage after deallocation, allows a remote attacker to execute arbitrary code.

The vulnerability of the Perl programming language module Text::CSVXS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module on the Django web application software platform allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ctsattach component of the SAP Change and Transport System Attach Tool allows a perpetrator to execute arbitrary code.

The vulnerability of the ctsattach component of the SAP Change and Transport System Attach Tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code using a specially created archive file...

The vulnerability in the web interface of the SAP NetWeaver Application Server Java Configuration Wizard allows attackers to perform cross-site scripting attacks.

The vulnerability of the SAP NetWeaver Application Server Java Configuration Wizard web interface is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the microprogrammed software of modules 1756-EN2, 1756-EN3, and 1756-ENBT of Rockwell Automation’s Logic Controllers ControlLogix allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software modules 1756-EN2, 1756-EN3, and 1756-ENBT of Rockwell Automation’s ControlLogix logic controllers is related to improper verification of integrity values. Exploiting this vulnerability can allow an attacker to trigger a service failure using...