pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Windows Imaging Component Code Execution

The vulnerability of the Windows Imaging Component WIC framework in the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

UTT 1250GW strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function /goform/formNatStaticMap in the microprogrammed network device UTT 1250GW is related to copying buffers without checking the size of the input data when processing the NatBind parameter. Exploiting this vulnerability could allow an attacker to execute...

Windows NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft PowerPoint presentation preparation Code Execution

The vulnerability of the Microsoft PowerPoint presentation preparation program is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Authenticator Authentication Bypass

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Azure CLI Code Execution

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Release Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to repeated memory release. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office 365 Apps for Enterprise Buffer Overflow

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Graphics Code Execution

The vulnerability of the Microsoft Graphics component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Web Media Extensions Buffer Overflow

The vulnerability of Web Media Extensions, a type of multimedia extension, is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Netty decodeLength Method DoS

The vulnerability of the decodeLength method in the framework for developing network applications, servers, and Netty protocol clients is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Netty HAProxyMessage readNextTLV Buffer Overflow DoS

The vulnerability of the HAProxyMessage.readNextTLV function in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruption...

Netty Resource Limit DoS

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Incus Arbitrary Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

JDBC driver pgjdbc Unprotected Channel

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the use of an unprotected alternative channel. Exploiting this vulnerability can enable a malicious actor to disclose sensitive information...

GitPython Path Traversal Privilege Escalation

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper external management of file names or paths. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

NetScaler ADC Gateway Code Execution

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

UTT 1250GW strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in the /goform/setSysAdm function of the UTT 1250GW networking device’s microprogramming system is related to the copying of buffers without checking the size of the input data when processing the GroupName parameter. Exploiting this vulnerability could...

Totolink A8000RU Router Command Execution

The vulnerability of the setWiFiEasyGuestCfg function in Totolink A8000RU router microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands usin...

Windows Biometric Service Privilege Escalation

The vulnerability of the Windows Biometric Service WbioSrvc in the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

HEIF Image Extension Buffer Overflow

The vulnerability of the HEIF Image Extension relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to reading data beyond the allowed range in memory. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

Netty IpSubnetFilterRule Comparator Bypass

The vulnerability of the IpSubnetFilterRule.compareTo function in the framework for developing network applications, servers, and Netty protocol clients is related to improper checking of the specified data type for input data. Exploiting this vulnerability can allow an attacker to bypass securit...

Netty DoS

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to cause service failures...

RedisArrayAggregator DoS

The vulnerability of the RedisArrayAggregator component in the networking application development framework, as well as in servers and client protocols using Netty, stems from the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability allows ...

Incus Arbitrary Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Incus Authentication Bypass Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Incus Arbitrary Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PHPseclib SSRF

The vulnerability of the PHPseclib cryptographic protocol interpreter library is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform a SSRF attack remotely...

TACACS+ Root Code Execution

The vulnerability of the TACACS+ protocol implementation in the tacplus authentication daemon is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...

UTT HiPER 810G strcpy() Code Execution

The vulnerability of the strcpy function in the microprogrammed routing software UTT HiPER 810G is related to the use of memory after deallocation when processing the loadBalanceNameOld parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

UTT HiPER 1200GW strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the microprogrammed routing software UTT HiPER 1200GW is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

TOTOLINK WA300 recvUpgradeNewFw() Arbitrary Command Execution

The vulnerability of the recvUpgradeNewFw function /cgi-bin/cstecgi.cgi in the TOTOLINK WA300 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Totolink A8000R Router setLanguageCfg XSS

The vulnerability of the setLanguageCfg /cgi-bin/cstecgi.cgi function in the Totolink A8000R router’s microprogramming software is related to the lack of authentication for the critical langType parameter during processing. Exploiting this vulnerability allows an attacker to bypass security...