The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to trigger an Error Message Response (MNRF).

The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...

The vulnerability of Rockwell Automation’s communication adapter software 1715-AENTR allows a intruder to gain unauthorized access to protected information.

The vulnerability of Rockwell Automation’s communication adapter software 1715-AENTR relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the DLL file loading mechanism of the SAProuter proxy server allows a hacker to execute arbitrary code.

The vulnerability of the DLL file loading mechanism of the SAProuter proxy server is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to integer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Media component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Media component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to data type mixing errors, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the WinRT component in Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the WinRT component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Network File System (NFS) on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Network File System NFS on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems regarding client remote desktops is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the DirectX graphics kernel driver (dxgkrnl.sys) on Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the DirectX graphics kernel driver dxgkrnl.sys on Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of Windows operating system kernels relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the ainput_send_input_event() function in the RDP client FreeRDP allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ainputsendinputevent function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the decoder in the MSL console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.

The vulnerability of the MSL decoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Microsoft Defender for Endpoint for Mac, related to deficiencies in access control for personal information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Defender for Endpoint for Mac is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise allow attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office programs, and Microsoft 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability in the WebRTC component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor allows a hacker to trigger a service failure.

The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the AppX Deployment Extensions for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the AppX Deployment Extensions for Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the console-based graphic editor ImageMagick arises from improper handling of symbolic links before accessing a file. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Windows operating system installation process allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows operating system installation process is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system allows a intruder to gain unauthorized access to the VNC server of virtual machines.

The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the VNC serv...

The vulnerability affects the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software management platform FortiSwitch Manager, and the FortiProxy proxy server for Internet attack protection. This allows a perpetrator to execute arbitrary code.

The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...

The vulnerability of the Windows Search search and indexing service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Search search and indexing service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Windows operating systems with HID technology allows attackers to disclose sensitive information.

The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Netlogon service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Netlogon service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the UNIX Disk Format File System Driver (UDFS) on Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the UNIX Disk Format File System Driver UDFS on Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerabilities of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise allow attackers to disclose protected information.

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in improper privilege assignment, which allows attackers to elevate their own privileges.

The vulnerability of the FRRouting software implementation for Unix-like systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the GPAC multimedia platform, related to the lack of memory release after the effective service life, allows a intruder to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to the lack of memory release after the effective lifespan of the device. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the asn1_decode_snmp() function in the printing server’s CUPS implementation allows a attacker to disclose protected information or cause service failures.

The vulnerability of the asn1DecodeSnmp function in the CUPS printing server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Cisco RoomOS operating system, related to deficiencies in access control, allows attackers to bypass existing security restrictions and increase their privileges.

The vulnerability of the Cisco RoomOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain increased privileges...

The vulnerability of the Sensor Data Service system service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Sensor Data Service system service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of Microsoft Surface sensor display microprogramming software, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Microsoft Surface sensor displays is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the fact that it allows for arbitrary code to be executed by writing beyond the buffer boundaries in memory.

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WLAN Firmware microprogramming system components in Qualcomm’s embedded chips relates to operations performed outside of the buffer boundaries, which allows attackers to read and manipulate data.

The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...

The vulnerability of the Windows Media component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Media component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the automatic software update mechanism of the ViPNet Client 4 system, related to deficiencies in handling relative paths, allows a malicious intruder from a neighboring trusted network to compromise the integrity of the operating environment. This vulnerability enables the intruder to gain privileges in the attacked node’s system and execute arbitrary code using a specially crafted update package sent from a compromised network node with the role of a network management center.

The vulnerability of the automatic software update mechanism of the ViPNet Client 4 lies in the deficiencies in the handling of relative paths. Exploiting this vulnerability can allow a perpetrator operating from a neighboring trusted network to compromise the integrity of the operating...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft Message Queuing MSMQ queue service on Windows operating systems is related to integer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges...