The vulnerability in the backend/open_webui/utils/misc.py file of the Open WebUI artificial intelligence-based web interface allows a attacker to compromise the accessibility of protected information.

The vulnerability in the backend/openwebui/utils/misc.py file of the Open WebUI artificial intelligence-based web interface is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of...

The vulnerability of the Rsync file transfer and synchronization utility lies in its reliance on UNIX symbolic links for tracking files. This allows a malicious actor to read arbitrary files.

The vulnerability of the Rsync file transfer and synchronization utility is related to the tracking of symbolic links in UNIX. Exploiting this vulnerability could allow an attacker to read arbitrary files...

The vulnerability of the fromNatStaticSetting() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatStaticSetting function in the Tenda F456 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the formWrlExtraSet() function in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formWrlExtraSet function in the Tenda FH451 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Rsync file transfer and synchronization utility lies in the lack of measures to neutralize specific elements, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of Tenda FH303 and A300 router microprogramming software is related to deficiencies in cookie file processing, which allows attackers to perform spoofing attacks.

The vulnerability of Tenda FH303, A300 router microprogramming software is related to deficiencies in cookie file processing. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the /goform/AdvSetDns endpoint...

The vulnerability of the set_qosMib_list()/goform/formSetQosBand function in the Tenda A18 router software allows a attacker to trigger a service failure.

The vulnerability of the setqosMiblist /goform/formSetQosBand function in the Tenda A18 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the print spooler driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Print Spooler in operating systems related to print queues is associated with buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the formTracert() function in Tenda HG3 software allows a hacker to execute arbitrary code.

The vulnerability of the formTracert function in Tenda HG3 router microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...

The vulnerability of the fromwebExcptypemanFilter function (/goform/webExcptypemanFilter) in the Tenda CX12L Wi-Fi router software allows a intruder to trigger a service failure.

The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST reque...

The vulnerability of the formWebTypeLibrary function in the /goform/webtypelibrary file of the Parameter Handler component of the Tenda CH22 router microprogramming system, related to the issue of writing operations outside of the buffer in memory, allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the formWebTypeLibrary function in the /goform/webtypelibrary file of the Parameter Handler component of the Tenda CH22 router microprogramming system is related to the issue of the operation going beyond the buffer boundaries during the processing of the wpapskcrypto...

The vulnerability of the WrlExtraSet() function in the httpd daemon of the microprogramming router software Tenda FH1202 allows a hacker to execute arbitrary code.

The vulnerability of the WrlExtraSet function in the httpd daemon of the microprogramming router Tenda FH1202 is related to the execution of an operation outside the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers allows a hacker to escalate their privileges and execute arbitrary code. This vulnerability is present in programs like cPanel & WHM, Plesk.

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers is related to improperly used standard permissions. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...

The vulnerability of the RepoRemove() function in the PackageKit package manager allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the RepoRemove function in the PackageKit package manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the io_poll_get_ownership() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iopollgetownership function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerabilities of the ASN.1 software for network security management and the network interface devices Check Point Security Gateway and Check Point Spark Firewall allow attackers to execute arbitrary code.

The vulnerability of the ASN.1 software for network security management and the network interface devices Check Point Security Gateway and Check Point Spark Firewall are related to buffer overflow in dynamic memory. Exploitation of this vulnerability could allow a malicious actor to execute...

The vulnerability of the VideoLAN VLC media player lies in its ability to read data beyond the permitted range of memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the VideoLAN VLC media player lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the kernel/events/core.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the kernel/events/core.c component of the Linux operating system is related to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the EmailTrack component in the cPanel web hosting control panel allows a hacker to execute arbitrary code and gain full control over the server.

The vulnerability of the EmailTrack component in the cPanel web hosting control panel is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain full control over the server...

The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services stems from errors in verifying cryptographic signatures. This allows attackers to gain unauthorized access and steal user accounts.

The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services is related to errors in verifying cryptographic signatures. Exploiting this vulnerability can allow an attacker to gain unauthorized access and control over user accounts...

The vulnerability of the net/sctp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the net/sctp component in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the system file `/cgi-bin/New_GUI/Set/Diagnostics.asp` of the Diagnostics component of the D-Link DSL-3782 microprogramming device allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the /cgi-bin/NewGUI/Set/Diagnostics.asp function of the Diagnostics component of D-Link DSL-3782 router microprogramming software is related to the lack of data cleaning measures at the management level when processing the Addr parameter. Exploiting this vulnerability allows ...

The vulnerability of the sctp_association_init() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sctpassociationinit function in the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Linux operating system’s kernel, related to the disclosure of information during data transmission, allows a perpetrator to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to the exposure of information during data transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Flask-Reuploaded file loading library, related to deficiencies in the mechanism for processing registry-dependent data, allows attackers to execute arbitrary code.

The vulnerability of the Flask-Reuploaded file loading library is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Check Point Security Gateway and Check Point Spark Firewall, related to errors in the certificate validation process, allows attackers to execute arbitrary code.

The vulnerability of Check Point Security Gateway and Check Point Spark Firewall is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the WebFig web interface of the MikroTik RouterOS operating system allows a hacker to increase their privileges and gain unauthorized access to protected information.

The vulnerability in the WebFig web interface of the MikroTik RouterOS operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to increase their privileges and gain unauthorized access to protected information...

The vulnerability of the Linux operating system’s kernel, related to deficiencies in pathname restriction, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to deficiencies in pathname limitation. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the MikroTik RouterOS operating system, related to errors in verifying the cryptographic signature, allows a hacker to replace the TLS server.

The vulnerability of the MikroTik RouterOS operating system is related to errors in verifying the cryptographic signature. Exploiting this vulnerability allows a malicious actor to perform TLS server substitution remotely...

The vulnerability of the br_pass_frame_up() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the brpassframeup function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the VMXNET3 network adapter allows attackers to escalate their privileges and execute arbitrary code on VMware Workstation and VMware Fusion hypervisors.

The vulnerability of the VMXNET3 network adapter in VMware Workstation and VMware Fusion relates to a potential overflow condition. Exploiting this vulnerability can allow an attacker to gain elevated privileges and execute arbitrary code...

The vulnerability of the VideoLAN VLC media player software, related to integer overflow, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the VideoLAN VLC media player lies in a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the FullyConnected::De serialize function in the Tesseract OCR system allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the FullyConnected::De serialize function in the Tesseract OCR system is related to reading data beyond the allowable range in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

The vulnerability of Eclipse Jetty servlet containers, related to deficiencies in HTTP request processing, allows attackers to carry out attacks by replacing HTTP requests with malicious content.

The vulnerability of Eclipse Jetty servlet containers is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to carry out attacks by substituting HTTP requests...

The vulnerability of the Classify::ReadNormProtos function in the Tesseract optical character recognition system allows a perpetrator to cause a service failure.

The vulnerability of the Classify::ReadNormProtos function in the Tesseract OCR system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the net/bridge/br_stp.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/bridge/brstp.c component of the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the Cellular Modem component in the Android operating system of Pixel phones allows attackers to bypass existing security measures and gain increased privileges.

The vulnerability of the Cellular Modem component in the Android operating system of Pixel phones is related to improper authorization. Exploiting this vulnerability allows a remote attacker to bypass existing security measures and gain increased privileges...

The vulnerability of the batandv_tp_ack_unordered() function in the batman-adv module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the batandvtpackunordered function in the batman-adv module of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the clear_plugin_cache() function in the SQL database of Anyquery, allowing a hacker to cause a service failure

The vulnerability of the clearplugincache function in the SQL database Anyquery is related to an incorrect limitation on the path name of the catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the upload_attachment function in the MPC-server for Atlassian’s Model Context Protocol (MCP) products allows a perpetrator to disclose protected information.

The vulnerability of the uploadattachment function in MPC-servers for Atlassian Model Context Protocol MCP products is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerabilities of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the platform_label() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the platformlabel function in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the application software interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the application programming interface of the Cisco Identity Services Engine ISE management platform is related to errors that occur when privileged application programming interfaces are used. Exploiting this vulnerability can allow a malicious actor to bypass existing securi...

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform allows a perpetrator to trigger a service failure.

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

The vulnerability of the Authentication Engine component of the Oracle Access Manager access control system allows a perpetrator to gain full control over the application.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

The vulnerability of the MediaWiki’s API/queryAbuseFilters.php tool, which is used to implement the hypertext environment, allows a violator to gain unauthorized access to protected information.

The vulnerability of the MediaWiki hypertext environment implementation, as demonstrated in the api/queryAbuseFilters.php tool, involves insufficient protection for operational data. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected informati...