Totolink A8000R Router setLanguageCfg XSS

The vulnerability of the setLanguageCfg /cgi-bin/cstecgi.cgi function in the Totolink A8000R router’s microprogramming software is related to the lack of authentication for the critical langType parameter during processing. Exploiting this vulnerability allows an attacker to bypass security...

TP-Link Archer VX1800v CRLF Injection Privilege Escalation

The vulnerability of TP-Link Archer VX1800v V1 microprogramming software is related to the lack of measures taken to eliminate CRLF sequences. Exploiting this vulnerability allows a remote attacker to alter account roles and gain administrator privileges...

Windows Biometric Service Privilege Escalation

The vulnerability of the Windows Biometric Service WbioSrvc in the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Publisher Code Execution

The vulnerability of Microsoft Publisher software, Microsoft Office packages, and Microsoft 365 Apps for Enterprise is related to deserialization mechanism flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

DnsResolveContext Component Bypass Security Restrictions

The vulnerability of the DnsResolveContext component in the framework for developing network applications, servers, and Netty protocol clients is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

HAProxy PROXY v2 Netty DoS

The vulnerability of the HAProxy PROXY v2 framework for developing network applications, servers, and Netty-based clients relates to improper syntax validation during input processing. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

Container management system validation mechanism Command Execution

The vulnerability of the validation mechanism for the compression algorithm of the container management system and the Incus virtual machine manager relates to insufficient checking of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

container management system CreateCustomVolumeFromBackup DoS

The vulnerability of the CreateCustomVolumeFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager software Incus is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

OpenBao secret encryption management system Privilege Escalation

The vulnerability of the OpenBao encryption and secret management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

TOTOLINK X6000R Router Command Execution

The vulnerability of the setLanCfg function /usr/sbin/shttpd of the TOTOLINK X6000R router’s microprogramming system is related to the failure to eliminate special elements used in the operating system’s command for processing the Hostname parameter. Exploiting this vulnerability allows a remote...

TOTOLINK A3002MU Router DoS

The vulnerability of the sub410188 function in TOTOLINK A3002MU router microprogramming systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Totolink A8000RU Router Command Execution

The vulnerability of the setWiFiBasicCfg function in Totolink A8000RU router microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands using a...

Windows Message Queue Code Execution

The vulnerability of Message Queuing in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NFS ONCRPC XDR DoS

The vulnerability of services for the NFS ONCRPC XDR operating system lies in reading data beyond the allowed range of memory. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Windows Biometric Service Privilege Escalation

The vulnerability of the Windows Biometric Service WbioSrvc in the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF viewing and editing programs Memory Reclamation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Reclamation Code Execution

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Incus Arbitrary Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

container management system CreateInstanceFromBackup DoS

The vulnerability of the CreateInstanceFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager Incus is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptio...

Netty DefaultHttp2Connection DefaultEndpoint DoS

The vulnerability of the DefaultHttp2Connection.DefaultEndpoint component in the framework for developing network applications, servers, and client protocols using Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service...

Netty Resource Limit DoS

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Authenticator Authentication Bypass

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

Netty SslClientHelloHandler Buffer Overflow DoS

The vulnerability of the SslClientHelloHandler.decode function in the framework for developing network applications, servers, and clients using the Netty protocol is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Netty IpSubnetFilterRule Comparator Bypass

The vulnerability of the IpSubnetFilterRule.compareTo function in the framework for developing network applications, servers, and Netty protocol clients is related to improper checking of the specified data type for input data. Exploiting this vulnerability can allow an attacker to bypass securit...

Netty HAProxyMessage readNextTLV Buffer Overflow DoS

The vulnerability of the HAProxyMessage.readNextTLV function in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruption...

Netty decodeLength Method DoS

The vulnerability of the decodeLength method in the framework for developing network applications, servers, and Netty protocol clients is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

io.netty.resolver.dns DNS Interception

The vulnerability of the io.netty.resolver.dns component in the Netty framework for developing network applications, servers, and protocol clients is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to intercept traffic...

PDF viewing and editing programs Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 are related to data type mixing errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...

Netty Resource Limit DoS

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Netty Heap Buffer Overflow DoS

The vulnerability of the framework for developing network applications, servers, and client protocols related to Netty lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Xen Memory Use After Free

The vulnerability of Xen hypervisors is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

lib Image ExifTool GM.pm Code Execution

The vulnerability of the Processmrld function in the lib/Image/ExifTool/GM.pm handler for JPEG/QuickTime/MOV/MP4 metadata processing in the ExifTool library related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow an attacker to execute...

Erlang/OTP Incorrect Comparison Bypass Security Restrictions

The vulnerability of the Erlang/OTP software platform is related to an incorrect comparison of the number of connections. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...

Erlang/OTP Authentication DoS

The vulnerability of the Erlang/OTP software platform is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures...

pdns/dnsdistdist/html/local.js Arbitrary HTML Injection

The vulnerability of the update function in the pdns/dnsdistdist/html/local.js file of the load balancer and proxy for DNS traffic is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTML code...

PostgreSQL PgBouncer Infinite Loop DoS

The vulnerability of the PostgreSQL PgBouncer connection pool software lies in the execution of a loop with an unreachable exit condition „Infinite loop“ due to a numerical overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

FFmpeg S/PDIF Multiplexer Disclosure DoS

The vulnerability of the S/PDIF multiplexer in the FFmpeg multi-media library relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...