The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to buffer overflow attacks in dynamic memory. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially...

The vulnerability of the dwg_bmp function in the src/dwg.c file of the LibreDWG library, which is used to process DWG format files, allows a attacker to cause a service failure.

The vulnerability of the dwgbmp function in the src/dwg.c file of the LibreDWG library, which handles DWG format files, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mirroring mechanism of the Git-based software platform for collaborative code development, GitLab EE, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the repository mirroring mechanism of the Git-based software platform for collaborative code development in GitLab CE/EE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...

The vulnerability of the USB Print Driver driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the USB Print Driver driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its failure to address the issue of eliminating special elements used in the operating system’s command line. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information by sending a specially created malicious file...

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platform, related to the unlimited distribution of resources, allows attackers to cause service failures.

The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Microsoft Excel’s spreadsheet editor, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing a malicious actor to execute arbitrary commands remotely.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the CouchbaseProducer class in the camel-couchbase component of the Apache Camel framework allows a attacker to gain read, modify, or delete access to data.

The vulnerability of the CouchbaseProducer class in the camel-couchbase component of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework allows a attacker to gain access to read, modify, or delete data.

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations stems from an improper definition of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to an incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its authentication procedures’ flaws, which allow attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its authentication procedures’ flaws, which allow attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of Microsoft Exchange Online for corporate email services stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.

The vulnerability of Microsoft Exchange Online for corporate email services is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the fact that it allows for arbitrary code to be executed by writing beyond the buffer boundaries in memory.

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the netty-codec-http module in the framework for developing network applications, servers, and clients using the Netty protocol allows attackers to inject arbitrary HTTP requests.

The vulnerability of the netty-codec-http module in the framework for developing network applications, servers, and clients using the Netty protocol is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP requests...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to data type mixing errors, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of the Windows operating system’s Management Services service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s Management Services service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the clipboard management function in the terminal session of Windows Clipboard Server operating systems allows attackers to enhance their privileges.

The vulnerability of the clipboard management function in the terminal session of Windows Clipboard Server operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the inventory_sync() function in the Wazuh Manager’s cluster synchronization component allows a perpetrator to execute arbitrary code. This vulnerability exists in the monitoring and threat detection tools provided by Wazuh.

The vulnerability of the inventorysync function in the Wazuh Manager’s cluster synchronization component, a platform for security monitoring and threat detection, is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability could allow an attacker...

The vulnerability of the GIFLIB library for working with GIF files, related to a memory reclamation error, allows a hacker to cause a service failure.

The vulnerability of the GIFLIB library for working with GIF files is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the exportOvpn function in the /web/cgi-bin/cstecgi.cgi component of the TOTOLINK X5000R router’s microprogramming system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the exportOvpn function in the /web/cgi-bin/cstecgi.cgi component of the TOTOLINK X5000R router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to ga...

The vulnerability of the USB Hub Driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the USB Hub Driver for Windows operating systems is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of embedded software developed by Qualcomm, related to improper array indexing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded Qualcomm software lies in improper array indexing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is caused by buffer overflows in the stack. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of embedded software in Qualcomm’s chips, caused by the “race-to-obtain” situation, allows a hacker to disclose protected information.

The vulnerability of embedded software in Qualcomm products stems from the competitive situation. Exploiting this vulnerability can allow a hacker to disclose protected information...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its use of an unreliable search path, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to the use of an unreliable search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Service allows a perpetrator to escalate their privileges.

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Services is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Active Directory Federation Server component for the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Active Directory Federation Server operating system on Windows is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of DHCP servers for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of DHCP servers for Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Vim text editor, related to improper handling of code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the decompress_R2004_section() function in the LibreDWG file processing library allows a perpetrator to cause service interruptions.

The vulnerability of the decompressR2004section function in the library for processing DWG format files by LibreDWG is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the mechanism used by Git to resolve programmatic platform names for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the mechanism for resolving Git-link names in the software platform based on Git for collaborative code development in GitLab CE/EE is related to the use of a name with an incorrect link. Exploiting this vulnerability could allow a malicious actor to compromise the integrity ...

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab EE allows a violator to compromise the confidentiality of the protected information.

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...

Vulnerability of Windows operating systems, related to deficiencies in access control, allows attackers to escalate their privileges

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of embedded Qualcomm microprogramming software, related to reading memory outside the buffer, allows attackers to read and manipulate data.

The vulnerability of microprogramming software in embedded Qualcomm chips relates to reading memory data outside the buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate data...

The vulnerability of embedded software developed by Qualcomm, related to operations performed outside of memory buffers, allows attackers to read and manipulate data.

The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...

The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code...