98239 matches found
Certificate Component DoS
The vulnerability of the Certificate component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Google Chrome Microsoft Edge Code Execution
The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Blink Component Code Execution
The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
GPU components Code Execution
The vulnerability of the GPU components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WebAppInstalls Component Code Execution
The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WebRTC DoS
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Cisco Secure Firewall Memory Allocation
The vulnerability of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software lies in the uncontrolled distribution of memory resources. Exploiting this vulnerability could allow a malicious actor to...
SXP Platform DoS
The vulnerability of the Cisco Identity Services Engine ISE policy management platform’s SXP service is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
PDF Memory Use Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...
Cisco Secure Firewall Threat Defense Speed-Limiting Mechanism DoS
The vulnerability of the syslog 419002 mechanism used by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA relates to improper memory release. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Cisco Secure Firewall Management Center Apache JServ Privilege Escalation
The vulnerability of the Apache JServ protocol implementation in Cisco Secure Firewall Management Center formerly Cisco Firepower Management Center is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges...
Cisco Identity Services Engine Code Execution
The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability...
Cisco Secure Email and Web Manager Relative Path Handling
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in the handling of relative paths. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
Cisco Secure Email and Web Manager DoS
The vulnerability of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
PDF viewing and editing programs Privilege Escalation
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
Adobe Acrobat Prototype Modification
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 lies in the uncontrolled modification of prototype attributes of objects. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
PDF Memory Use Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...
PDF Memory Use Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...
PDF Viewing Integer Overflow Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted...
NVIDIA Display Driver Guest Driver System Failure Information Disclosure
The vulnerability of NVIDIA Display Driver and Guest drivers for virtual graphics processors from NVIDIA is related to the disclosure of information. Exploiting this vulnerability can allow attackers to cause system failures and disclose protected information...
NVIDIA Display Driver DoS
The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient control over input data. Exploiting this vulnerability can allow attackers to cause system failures...
NVIDIA Display Driver DoS
The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to the state of the race when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
OpenEXR unpack_32bit() Buffer Overflow DoS
The vulnerability of the unpack32bit function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
.NET and the Visual Privilege Escalation
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of checking for the return value. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
Proxmox.inc.php XSS
The vulnerability of the proxmox.inc.php script in the LibreNMS network monitoring system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
BitBake SSH MITM
The vulnerability of the automation tool for configuring and building projects based on BitBake is related to incorrect verification of the SSH key. Exploiting this vulnerability could allow an attacker to execute a “man-in-the-middle” attack...
Intel Media SDK Heap Buffer Overflow DoS
The vulnerability of the Intel Media SDK library lies in improper restrictions on operations within memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...
PaperCut MF Web Interface Data Read Modify
The vulnerability in the web-based interface for controlling printing control software in PaperCut MF and PaperCut NG is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain read-only access and modify data...
.NET Visual Studio Code Memory Leak Information Disclosure
The vulnerability of the .NET software platform and the Visual Studio Code code editor is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to disclose sensitive information...
.NET Visual Studio Code Critical Data Deletion DoS
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Ozone Component Code Execution
The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors during variable initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ANGLE Library Code Execution
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome Microsoft Edge Code Execution
The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Google Chrome Microsoft Edge Unauthorized Access
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to a lack of source verification mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Network component Code Execution
The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
WebAudio DoS
The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
WebMCP Component Code Execution
The vulnerability of the WebMCP component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Codecs Code Execution
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Gamepad DoS
The vulnerability of the Gamepad components in Google Chrome and Microsoft Edge browsers is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ANGLE Privilege Escalation
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Cisco Identity Services Engine SQL Injection
The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Cisco Identity Services Engine SQL Injection
The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Goproxy Proxy Server Bypass Unauthorized Access
The vulnerability of the Goproxy proxy server’s HTTP request processing module lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms and gain unauthorized access to...
WebAudio Component Code Execution
The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PyPart Set Deep Slice Data Unauthorized Access
The vulnerability of the PyPart::setDeepSliceData function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...
Cisco Identity Services Engine RCE
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root leve...
Cisco Secure Email Resource Control DoS
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...
Cisco Secure Firewall Threat Defense DTLS DoS
The vulnerability of the DTLS protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious...