97848 matches found
Linux kernel TSI721 DPC Buffer Overflow
The vulnerability of the tsi721dbdpc function in the drivers/rapidio/devices/tsi721.c component of the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the integrity and accessibility of protected information...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the devhassyncstate function in the include/linux/device.h component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Wazuh delete_rule_file delete_decoder_file file deletion
The vulnerability of the deleterulefile and deletedecoderfile functions of the Wazuh security monitoring and threat detection platform is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to delete any...
Linux kernel LZNT decompression Data Compromise
The vulnerability of the decompresslznt function in the fs/ntfs3/lznt.c component of the Linux kernel lies in the fact that the operation occurs outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
Linux kernel DoS
The vulnerability of the checkandgetarmedcq function in the drivers/infiniband/hw/hns/hnsrocemain.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux kernel parse_dcc() Function
The vulnerability of the parsedcc function in the net/netfilter/nfconntrackirc.c component of the Linux kernel is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of t...
Wazuh API Brute Force Unauthorized Access
The vulnerability of the application programming interface of the security monitoring and threat detection platform Wazuh is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods and...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
SQL Server Management Studio Code Execution
The vulnerability of the SQL Server Management Studio SSMS and the Visual Studio Tools for Applications VSTA environment used in Microsoft Visual Studio development tools is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary co...
Microsoft Dynamics NAV Auth Bypass Info Disclosure
The vulnerability of the integrated business management system Microsoft Dynamics NAV lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Microsoft Visual Studio Code Source Editor Auth Bypass
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability could allow a hacker to bypass security restrictions...
Microsoft Visual Studio Code Editor Auth Bypass
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Visual Studio Code Editor Code Execution
The vulnerability of Microsoft Visual Studio Code’s editor is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Microsoft Visual Studio Code Path Traversal
The vulnerability of Microsoft Visual Studio Code’s source editor is related to incorrect resolution of path equivalence. Exploiting this vulnerability could allow an attacker to bypass security restrictions...
Windows Installer Privilege Escalation
The vulnerability of Windows operating system installers is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Buffer Overflow
The vulnerability of Windows operating systems relates to the execution of operations beyond the buffer in memory during text generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Trusted Execution Environment Privilege Escalation
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems stems from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
Online Store Template Code Execution
The vulnerability of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can...
QUIC Protocol Code Execution
The vulnerability of the QUIC protocol implementation in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft SharePoint Server Auth Bypass Info Disclosure
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
Microsoft SharePoint Server Subscription Edition Spear Phishing
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...
HEVC Video Extensions Integer Overflow
The vulnerability of HEVC Video Extensions relates to integer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Microsoft Office SharePoint Privilege Escalation
The vulnerability of the Microsoft Office SharePoint web platform for collaborative work and document management is related to errors in verifying cryptographic signatures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft Windows PDF Document Processing Code Execution
The vulnerability of the Microsoft Windows PDF document processing component on Windows operating systems is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SharePoint Server Privilege Escalation
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft SharePoint Server Privilege Escalation
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to improper code generation. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Google Chrome Microsoft Edge QUIC DoS
The vulnerability of the QUICK UDP Internet Connections protocol implementation in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Google Chrome V8 Engine DoS
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created HTML page...
Microsoft Visual Studio Code Editor Auth Bypass
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions...
Linux drivers/infiniband/hw/bnxt_re/ib_verbs Heap Buffer Overflow Info Disclosure
The vulnerability of the bnxtreallocucontext function in the drivers/infiniband/hw/bnxtre/ibverbs.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is...
jackson-core JSON Parser Heap Buffer Overflow DoS
The vulnerability of the UTF8DataInputJsonParser.reportInvalidToken function in the jackson-core library of the FasterXML project is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
GitLab Authentication Bypass
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
Google Chrome Microsoft Edge Information Disclosure
The vulnerability of the QUICK UDP Internet Connections protocol implementation in Google Chrome and Microsoft Edge is related to errors in processing hypertext links. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTM...
Navigation section Microsoft Edge Google Chrome Protected Information Access
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Navigation section Microsoft Edge Google Chrome Protected Information Access
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome relates to the disclosure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
GitLab Authentication Bypass Info Disclosure
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
GitLab Authentication Bypass File Upload
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to upload arbitrary files remotely...
Navigation Section Microsoft Edge Google Chrome Protected Information DoS
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to access protected information or cause service interruptions through a specially created HTML page...
GitLab Access Control Issue
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the access control mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify and delete any data they wish...
GitLab Authentication Bypass Info Disclosure
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Navigation Section Microsoft Edge Google Chrome Data Compromise
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome relates to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information through a specially created...
Linux kernel wcn36xx_smd_trigger_ba_rsp Buffer Overflow
The vulnerability of the wcn36xxsmdtriggerbarsp function in the drivers/net/wireless/ath/wcn36xx/smd.c component of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Azure App Service for Linux Authentication Bypass RCE
The vulnerability of the Azure App Service for Linux platform for deploying, scaling, and administering web applications is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Dataverse Deserialization RCE
The vulnerability of the Microsoft Dataverse data management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Active Directory Federation Services Spear Phishing
The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...
Trusted Execution Environment Privilege Escalation
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the swapping of non-trusted pointers. Exploiting this vulnerability can allow attackers to enhance their privileges...