97848 matches found
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform XSS
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
FOQUZ Platform Information Disclosure
The vulnerability of the FOQUZ platform is related to the disclosure of information in debugging messages. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality of the protected information...
FOQUZ Platform Session Duration
The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
FOQUZ Platform Data Compromise
The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
FOQUZ Platform Authentication Bypass
The vulnerability of the FOQUZ platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Platypus.js Auth Bypass Command Execution
The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Digital Inspector Unauthorized Access
The vulnerability of the “Digital Inspector” software architecture is related to the use of pre-installed account data. Exploiting this vulnerability can allow an unauthorized actor to gain unauthorized access to protected information...
OpenSky Flight Planning Unrestricted File Execution
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
OpenSky Flight Planning Unrestricted File Execution
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
R7-Officer document editor Code Execution
The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...
Enlogic SCADA System ENTTEK Authentication Bypass
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...
Enlogic SCADA System ENTTEK Code Execution
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...
Enlogic SCADA System ENTek Authentication Hash Use
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected informati...
Enlogic SCADA Virtual Controller File Path Traversal
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...
Enlogic SCADA System ENTTEK Data Interception Unauthorized Access
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting network traffic...
Enlogic SCADA Virtual Controller Path Traversal
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...
Enlogic SCADA Virtual Controller Path Traversal
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...
Enlogic SCADA System ENTTEK Code Execution
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...
pg_dump Code Execution
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
SIMATIC RTLS Locating Manager Code Execution
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...
pg_dump Code Execution
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Linux kernel Bluetooth DoS
The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Kerberos Privilege Escalation
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Directum RX Data Compromise
The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...
Directum HR Pro Disclosure
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
Linux Bluetooth Buffer Overflow DoS
The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...
Blitz Identity Provider (Authentication server)
...
ThrottleBlood.sys RCE
The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...
Directum Web Agent Code Execution
The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...
CrocoTime employee working time management system Code Execution
The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CrocoTime authorization Unauthorized Access
The vulnerability of the CrocoTime employee time management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CrocoTime Employee Attendance DoS
The vulnerability of the CrocoTime employee attendance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CrocoTime SSRF
The vulnerability in CrocoTime’s employee working hours tracking system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
aiptekirq Heap Buffer Overflow DoS
The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...
Wazuh get_lists() delete_list_file File Deletion
The vulnerability of the getlists and deletelistfile functions of the Wazuh security monitoring and threat detection platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to delete any files they...
Google Chrome Microsoft Edge Information Disclosure
The vulnerability of the QUICK UDP Internet Connections protocol implementation in Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Linux kernel picolcd_send_and_wait Heap Buffer Overflow DoS
The vulnerability of the picolcdsendandwait function in the drivers/hid/hid-picolcdcore.c file of the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ocfs2journaltoggledirty function in the fs/ocfs2/journal.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Adobe Bridge Buffer Overflow Information Disclosure
The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...
Navigation section DoS
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the radeonringrestore function in the drivers/gpu/drm/radeon/radeonring.c kernel module of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Cisco Identity Services Engine SQL Injection
The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a remote attacker to execute arbitrary SQL queries...
Linux driver input ims-pcu Heap Buffer Overflow
The vulnerability in the driver/input/misc/ims-pcu.c component of the Linux operating system is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected information...
Linux kernel Module Heap Buffer Overflow DoS
The vulnerability of the aareplaceprofiles function in the security/apparmor/policy.c kernel module of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Wazuh improper recursive links DoS
The vulnerability of the Wazuh security monitoring and threat detection platform is related to improper restrictions on recursive references to entities in the DTD. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Navigation Section Microsoft Edge Google Chrome Data Compromise
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the in6devstatsget function in the include/net/addrconf.h component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...