98239 matches found
Tornado get_absolute_path validate_absolute_path File Read
The vulnerability of the getabsolutepath and validateabsolutepath methods in the Tornado asynchronous networking library is related to incorrect definition of links before accessing files. Exploiting this vulnerability allows an attacker to read arbitrary files remotely...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Ad Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Ad Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Adobe Campaign Classic for
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the of cross-site requests. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Adobe Campaign Classic Authentication Bypass RCE
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Cargo Extension XSS
The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...
TOTOLINK N150RT Router Sub_4156B0 Function Heap Buffer Overflow DoS
The vulnerability of the sub4156B0 function in TOTOLINK N150RT router microprogramming systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
Adm-zip Privilege Escalation
The vulnerability of the extractAllTo and extractEntryTo functions in the Node.js library for working with zip files, Adm-zip, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Adobe Substance 3D Modeler Buffer Overflow
The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Bridge Heap Buffer Overflow RCE
The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Bridge Heap Buffer Overflow RCE
The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Bridge Heap Buffer Overflow RCE
The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Setup Wizard Privilege Escalation
The vulnerability of the Setup Wizard component in Android operating systems relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability allows a remote attacker to enhance their privileges...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
MP4Box sgpd_del_entry Heap Buffer Overflow DoS
The vulnerability of the sgpddelentry function in the src/isomedia/boxcodebase.c file of the MP4Box component of the GPAC multimedia platform is related to the occurrence of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a...
UCL Libucl Heap Buffer Overflow DoS
The vulnerability of the uclparsemultilinestring function in the src/uclparser.c file of the UCL Libucl library is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the src/utils/baseencoding.c file in the ISOBMFF component parser of the GPAC multimedia platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Podman Arbitrary Command Execution
The vulnerability of the pkg/machine/hyperv/stubber.go file of the OCI-container management and startup software Podman is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
MariaDB wsrep_sst_mariabackup.sh Command Execution
The vulnerability of the wsrepsstmariabackup.sh file of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
MariaDB extra/mariabackup/xbstream.cc Buffer Overflow
The vulnerability of the extra/mariabackup/xbstream.cc file of the MariaDB database management system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Server XRDP RCE
The vulnerability of the XRDP server’s virtual port forwarding mechanism is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
OpenSSL Buffer Overflow
The vulnerability of the buffers in CipherCtxRef::cipherupdate, CipherCtxRef::cipherupdatevec, and symm::Crypter::update functions in the OpenSSL library for the Rust programming language is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow an attacker t...
Uriparser EqualsUri Function Data Compromise
The vulnerability of the EqualsUri function family in the Uriparser parser is related to permission handling errors. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
XRDP Server FIPS RDP DoS
The vulnerability of the XRDP server’s FIPS-protected RDP packets relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
IMAP Client API Ruby DoS
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to incorrect filtering of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows biometric service Privilege Escalation
The vulnerability of the Biometric Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Containerd Code Execution
The vulnerability of the Containerd process for importing the CRI of the runtime environment is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Containerd Execution Environment Disclosure
The vulnerability of the Containerd execution environment is related to errors in handling links. Exploiting this vulnerability can allow an attacker to disclose protected information...
XRDP Packet Processing Handler DoS
The vulnerability of the RDP packet processing module in the XRDP server is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Pillow bdf_char Heap Buffer Overflow DoS
The vulnerability of the bdfchar function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Pillow GdImageFile Heap Buffer Overflow DoS
The vulnerability of the GdImageFile.open function in the PIL/GdImageFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
XRDP Client Control PDU Disclosure DoS
The vulnerability of the Client Control PDU handler on the XRDP server relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...
FreeRDP RDP Client Buffer Overflow
The vulnerability of the channels/drdynvc/client/drdynvcmain.c file in the RDP client FreeRDP is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
Kauth security subsystem DNScrypt-proxy-gui Arbitrary Command Execution
The vulnerability of the Kauth security subsystem of the DNScrypt-proxy-gui graphical interface is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...
XRDP RDP DoS
The vulnerability of the RDP Confirm Active PDU server in XRDP lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
setuptools Unicode Data Compromise
The vulnerability of the setuptools project’s packaging simplification library is related to incorrect handling of Unicode characters. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...
Starlette SSRF
The vulnerability of the StaticFiles.lookuppath function in the Starlette ASGI framework for web development is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...
Hitachi Energy RTU500 series CMU Authentication Bypass
The vulnerability of the programmable logic controllers Hitachi Energy RTU500 series CMU is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...
Adobe Bridge Heap Buffer Overflow RCE
The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...