98239 matches found
Linux kernel TCP Connection Request Buffer Overflow DoS
The vulnerability of the tcpconnrequest function in the include/net/tcp.h component of the Linux kernel is related to the predictability of random initial numbers for TCP sessions. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
ModernExecServer DLL Heap Buffer Overflow Privilege Escalation
The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system is related to the use of memory after release. Exploiting this vulnerability can allow an attacker to increase their privileges...
libheif Code Execution
The vulnerability of the unci decoder and file format encoder component of libheif relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Piwigo mime_content_type Code Execution
The vulnerability of the mimecontenttype function in the Piwigo content management system is related to the unlimited loading of files of a dangerous type, due to the lack of strict checks on file extensions and content. Exploiting this vulnerability could allow an attacker operating remotely to...
Kener monitoring panel Unauthorized Access
The vulnerability of the monitoring panel of the Kener page creation and accessibility service monitoring tool is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
USB Video Driver Privilege Escalation
The vulnerability of the USB Video Driver driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Linux fs/mnt_idmapping.c Heap Buffer Overflow DoS
The vulnerability of the statmountmntidmap function in the fs/mntidmapping.c component of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
HU250 module Privilege Escalation
The vulnerability of the HU250 microprogramming software for modular remote terminals in telemechanics and automation systems from PowerLogic T300 formerly Easergy T300 RTU relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow attackers to...
PTC Windchill PDMLink FlexPLM Code Execution
The vulnerability of the PTC Windchill PDMLink and PTC FlexPLM lifecycle management systems is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Visual Studio Code Source Editor XSS
The vulnerability of Visual Studio Code’s source editor is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Trusted Execution Environment Privilege Escalation
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the swapping of non-trusted pointers. Exploiting this vulnerability can allow attackers to enhance their privileges...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Resilient File System Privilege Escalation
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Remote Desktop Services Privilege Escalation
The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows an attacker to increase their privileges remotely...
JSON processing library Prototype Pollution
The vulnerability of the JSON processing library and stream-json is related to inadequate control over changes to prototype attributes. Exploiting this vulnerability could allow an attacker to execute a “prototype pollution” attack...
MTR ipinfo_lookup() DoS
The vulnerability of the ipinfolookup function in the MTR network diagnostic and monitoring utility is related to the operation that exceeds the buffer boundaries in memory when processing DNS responses. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Routing and Remote Access Service RCE
The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Windows Media Player Code Execution
The vulnerability of the Windows Media Player media player on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Visual Studio Code Source Editor HTTP Request Processing
The vulnerability of Visual Studio Code’s source editor is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Windows Secure Kernel Mode Privilege Escalation
The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...
Device Association Service Privilege Escalation
The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Hyper-V Component Code Execution
The vulnerability of the Hyper-V component in Windows operating systems is related to the swapping of an unreliable pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code...
stream-json/jsonc parser JSONC DoS
The vulnerability in the stream-json/jsonc/parser.js and stream-json/jsonc/verifier.js libraries for processing JSON and JSONC streams is related to inefficient algorithmic complexity. Exploiting this vulnerability can allow attackers to cause service failures...
MongoDB Compass Unauthorized Access
The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, is related to improper code generation practices. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Hyper-V Privilege Escalation
The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Visual Studio Code Source Editor Security Restriction Bypass
The vulnerability of Visual Studio Code’s source editor is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Visual Studio Code Source Editor
The vulnerability of Visual Studio Code’s source editor is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Visual Studio Code Source Editor Unauthenticated Access Disclosure
The vulnerability of Visual Studio Code’s source editor is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected information...
Cloud Files Mini Filter Driver Privilege Escalation
The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Virtual Hard Disk Miniport Driver Code Execution
The vulnerability of the Virtual Hard Disk VHD Miniport Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Azure HDInsight Apache Ambari Privilege Escalation
The vulnerability in the Apache Ambari web interface of the Azure HDInsight data analytics service relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Windows Hello Privilege Escalation
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
Linux net/ipv4/raw.c Heap Buffer Overflow DoS
The vulnerability of the rawsendhdrinc function in the net/ipv4/raw.c component of the Linux kernel is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Node.js HTTP Agent Data Compromise
The vulnerability of the Node.js software platform’s HTTP agent is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the protected information...
TOTOLINK N150RT Router Sub_415E80 Function Heap Buffer Overflow DoS
The vulnerability of the sub415E80 function in TOTOLINK N150RT router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
Adobe Campaign Classic Cross-site Request Forgery
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PyPDF DoS
The vulnerability in the pypdf/writer.py file of the Python library for working with PDF files, PyPDF formerly PyPDF2, relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Containerd Execution Environment Input Validation
The vulnerability of Containerd’s execution environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...
MariaDB Command Injection
The vulnerability of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Pillow FontFile Compile Heap Buffer Overflow DoS
The vulnerability of the FontFile.compile function in the PIL/FontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
UriParser Heap Buffer Overflow DoS
The vulnerability of the CompareRange function in the src/UriCommon.c file of the UriParser parser is related to numerical truncation errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Pillow Heap Buffer Overflow DoS
The vulnerability of the loadbitmaps function in the PIL/PcfFontFile.py file from the Python Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Podman Operational Data Access
The vulnerability of the Podman software for managing and starting OCI containers is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Ad Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Ad Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Adobe Campaign Classic DoS
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Ad Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Adobe Campaign Classic Cross-site Request Manipulation
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...