98239 matches found
Apache Tomcat Authentication Bypass
The vulnerability of the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Apache Tomcat Authentication Bypass
The vulnerability of the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of protected information...
Apache Tomcat Synchronization Data Compromise
The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Data Sharing Service Windows Privilege Escalation
The vulnerability of the Data Sharing Service client for the Windows operating system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SQL Server Privilege Escalation
The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Windows Imaging Component Code Execution
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Windows Imaging Component Code Execution
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Windows Management Services Privilege Escalation
The vulnerability of the Windows Management Services management tool in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Windows Ancillary Function Driver WinSock Privilege Escalation
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Cisco Application Policy Infrastructure Controller Resource Management Data Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of t...
Cisco Application Policy Infrastructure Controller Access Control Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
Cisco Application Policy Infrastructure Controller Access Control Unauthorized Access
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Cisco NX-OS NGOAM Protocol Code Execution
The vulnerability of the NGOAM protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series devices lies in the fact that operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a malicious act...
Cisco License On-Prem Cryptographic Signature Error
The vulnerability of the Cisco License On-Prem license server previously known as Cisco Smart Software Manager On-Prem is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...
Golang X Text Package Heap Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
golang.org/x/crypto/ssh DoS
The vulnerability of the golang.org/x/crypto/ssh cryptographic library in Go is related to improper verification of the cryptographic signature of data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Go Yaml File Processing Heap Buffer Overflow DoS
The vulnerability of the Go Yaml file processing library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Apache Thrift Memory Management DoS
The vulnerability of the Apache Thrift framework is related to discrepancies in memory management routines. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Aiohttp HTTP Client Unauthorized Access
The vulnerability of the Aiohttp HTTP client is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Apache Thrift Buffer Overflow DoS
The vulnerability of the Apache Thrift framework is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Apache Thrift Uncontrolled Recursion
The vulnerability of the Apache Thrift framework is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Apache Thrift Host Certificate Unauthorized Access
The vulnerability of the Apache Thrift framework is related to the lack of checks for host-specific certificate data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Apache Thrift Pathname Restriction Unauthorized Access
The vulnerability of the Apache Thrift framework is related to shortcomings in pathname limitation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Go Cryptography Library DoS
The vulnerability of the Go Cryptography library is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Aiohttp HTTP Client CRLF DoS
The vulnerability of the Aiohttp HTTP client is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Aiohttp HTTP Client DoS
The vulnerability of the Aiohttp HTTP client is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Aiohttp HTTP client Host Certificate DOSS
The vulnerability of the Aiohttp HTTP client is related to the lack of checking host certificate data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Aiohttp HTTP Client DoS
The vulnerability of the Aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
OpenSSL Buffer Overflow Info Disclosure
The vulnerability of TLS and SSL OpenSSL tools is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
OpenSSL Heap Buffer Overflow DoS
The vulnerability of the TLS and SSL OpenSSL protocol-related tools is related to reading data from within allowable buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Linux driver net ethernet intel idpf idpf.h DoS
The vulnerability in the drivers/net/ethernet/intel/idpf/idpf.h component of the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
HTTP/3 Server Data Compromise
The vulnerability of HTTP/3 server-side software such as HAProxy is related to errors in processing input data length parameters. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...
HAProxy hpack_dht_insert Heap Buffer Overflow DoS
The vulnerability of the hpackdhtinsert function in the source file src/hpack-tbl.c of the HAProxy server software is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Apache Tomcat Authentication Bypass
The vulnerability of the Apache Tomcat application server relates to bypassing the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Apache Tomcat Resource Consumption DoS
The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Cisco Application Policy Infrastructure Controller Message Data Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to insufficient assurance of the correctness of messages or data structures. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
Cisco NX-OS NGOAM Protocol Code Execution
The vulnerability of the NGOAM protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series devices lies in the fact that operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a malicious act...
Cisco License On-Prem License Server Data Compromise
The vulnerability of the Cisco License On-Prem server licensing system previously known as Cisco Smart Software Manager On-Prem SSM On-Prem is related to improper code generation management. Exploitation of this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
Cisco License On-Prem Local Server Auth Bypass
The vulnerability of the Cisco License On-Prem license server previously known as Cisco Smart Software Manager On-Prem is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...
Cisco License On-Prem License On-Prem Unauthorized Access
The vulnerability of the Cisco License On-Prem server licensing system previously known as Cisco Smart Software Manager On-Prem SSM On-Prem is related to insufficient protection of user credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
Golang X Text Package Heap Buffer Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
OpenSSL Heap Buffer Overflow DoS
The vulnerability of the TLS and SSL OpenSSL protocol-related tools is related to reading data from within allowable buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Apache Thrift Integer Overflow DoS
The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Apache Thrift Integer Overflow Unauthorized Access
The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Go Cryptography Data Compromise
The vulnerability of the Go Cryptography library is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access and influence the integrity of the protected information...
Aiohttp HTTP Client Source Verification Confidential Data Access
The vulnerability of the Aiohttp HTTP client is related to a lack of mechanisms for verifying the source of the connection. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
OpenSSL Memory Use After Free Unauthorized Access
The vulnerability of TLS and SSL OpenSSL tools is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...