98239 matches found
PyPart Set Deep Slice Data Unauthorized Access
The vulnerability of the PyPart::setDeepSliceData function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...
Cisco Identity Services Engine RCE
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root leve...
OpenEXR unpack_sample_table DeepTiledInputFile readPixelSampleCounts System Failure
The vulnerabilities of the functions unpacksampletable and DeepTiledInputFile::readPixelSampleCounts in software for storing images in OpenEXR format with a wide dynamic range are related to the situation where the operation’s output goes beyond the buffer boundaries during data decoding...
OpenEXR Image Read Pixels Heap Buffer Overflow DoS
The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...
OpenEXR Image Read Pixels Heap Buffer Overflow DoS
The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...
Cisco Secure Email Resource Control DoS
The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...
Cisco Secure Firewall Threat Defense DTLS DoS
The vulnerability of the DTLS protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious...
OpenEXR Buffer Overflow DoS
The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Cast component Code Execution
The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
.NET Visual Studio Code HTTP Request Disclosure
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Google Chrome Microsoft Edge Code Execution
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Cisco Secure Firewall Threat Defense Speed-Limiting Mechanism DoS
The vulnerability of the syslog 419002 mechanism used by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA relates to improper memory release. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Intel Media SDK Heap Buffer Overflow Privilege Escalation
The vulnerability of the Intel Media SDK library lies in reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
OpenEXR GetChannelsInMultiPartFile viewFromChannelName DoS
The vulnerability of the GetChannelsInMultiPartFile and viewFromChannelName functions in software for storing OpenEXR images with wide dynamic range brightness values is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...
VeloCloud Orchestrator Code Execution
The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator VCO on the VMware SD-WAN by VeloCloud On-Prem platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...
vm2 ArrayBuffer SharedArrayBuffer TypedArray
The vulnerability of the ArrayBuffer, SharedArrayBuffer, and TypedArray functions in the vm2 package manager’s NPM library is related to the unlimited distribution of resources when processing the bufferAllocLimit parameter. Exploiting this vulnerability could allow an attacker to compromise the...
Electron Platform Disclosure Information
The vulnerability of the net.fetch and net.request functions in the software platform for creating Electron applications allows unauthorized access to protected information on the server side. Exploiting this vulnerability can enable an attacker to disclose sensitive data...
pyasn1 Uncontrolled Resource Consumption DoS
The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Soup Sieve CSS Selector XSS
The vulnerability in the src/soupsieve/cssparser.py script of the Soup Sieve CSS selector library is related to an uncontrolled resource consumption when processing the IDENTIFIER parameter. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected...
Microsoft Windows Defender DoS
The vulnerability of Microsoft Windows Defender operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service interruptions...
Zyxel CGI Code Execution
The vulnerability of the CGI microprogramming interface of Zyxel routers series GS1900 lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted HTTP requests...
setPermissionCheckHandler Unauthorized Access
The vulnerability of the setPermissionCheckHandler method in the Electron application development software is related to the lack of proper verification of the reliability of the data source. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...
Electron Shell Open Path
The vulnerability of the shell.openPath function in the Electron application development platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...
Oracle Java SE Unauthorized Access
The vulnerability of Oracle Java SE’s scripting components is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Oracle Java SE Unauthorized Access
The vulnerability of Oracle Java SE’s scripting components is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Oracle Java SE Unauthorized Access
The vulnerability of the components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...
OpenCast etc/security/mh_default_org.xml Unauthorized Access
The vulnerability in the script of etc/security/mhdefaultorg.xml of the application for automatic capture, processing, management, and distribution of Opencast videos is related to improper session management when processing the JSESSIONID parameter. Exploiting this vulnerability may allow an...
Traccar GPS Disclosure
The vulnerability of the Traccar GPS system’s application programming interface is related to the lack of measures taken to protect the SQL query structure when processing an HTTP DELETE /api/permissions request. Exploiting this vulnerability can allow a remote attacker to disclose sensitive...
go-yaml Unmarshal DoS
The vulnerability of the Unmarshal function in the go-yaml library for the Go programming language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
NLTK IPIPANCorpusReader CrubadanCorpusReader LinThesaurusCorpusReader Unauthorized Access
The vulnerability of the IPIPANCorpusReader, CrubadanCorpusReader, and LinThesaurusCorpusReader classes in the NLTK library for symbolic and statistical processing of natural language data is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this...
vm2 isPathAllowedForModule Unauthorized Access
The vulnerability of the isPathAllowedForModule function in the vm2 library of the NPM package manager is related to an incorrect restriction on path names for directories. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
vm2 os dns Module Data Compromise
The vulnerability of the os and dns modules in the vm2 package manager NPM is related to errors in information processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
vm2 Sandbox Prepare Stack Trace
The vulnerability of the defaultSandboxPrepareStackTrace function in the lib/setup-sandbox.js file of the vm2 library, a part of the npm package manager, is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...
SOGo Contact Search Unauthorized Access
The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to a user’s account through specially craft...
SQLite SQLAR Extension DoS
The vulnerability of the sqlarcompress and sqlaruncompress functions in the SQLite database management system’s SQLAR extension involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
lib/setup-sandbox.js lib/bridge.js vm2 Package Manager Data Compromise
The vulnerability in the scripts of lib/setup-sandbox.js and lib/bridge.js in the vm2 package manager NPM is related to the lack of validation for the correctness of incoming requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information...
cupsd Privilege Escalation
The vulnerability of the cupsd server in CUPS printing relates to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
vm2 Library VM Component Data Compromise
The vulnerability of the new VM component in the vm2 library of the NPM package manager is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
vm2 Library VM NodeVM Compromise
The vulnerability of the VM and NodeVM classes in the vm2 library of the NPM package manager is related to a flaw in the data protection mechanism during the processing of the allowAsync: false parameter. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibili...
VPN NetworkManager-l2tp Plugin Code Execution
The vulnerability of the writeconfigoption function in the VPN NetworkManager-l2tp plugin is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
NLTK Library Code Execution
The vulnerabilities of the nltk.parse.dependencygraph.dot2img and nltk.translate.api.AlignedSent.reprsvg functions in the NLTK library for symbolic and statistical processing of natural language are related to the use of an insecure search path. Exploiting these vulnerabilities could allow...
NPM vm2 Arbitrary Command Execution
The vulnerability of the NPM package manager’s vm2 library is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
NPM vm2 Access Control
The vulnerability of the NPM packet manager’s vm2 library is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
node sqlite VM2 Code Execution
The vulnerability of the node:sqlite component in the vm2 library of the NPM package manager is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
Django UpdateCacheMiddleware cache_page Disclosure
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware and django.views.decorators.cache.cachepage modules in the Django web development framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to disclose sensitive...
Django DomainNameValidator Code Execution
The vulnerability of the django.corevalidators.DomainNameValidator module in the Django web application framework is related to improper handling of line separators. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Failover Cluster Code Execution
The vulnerability of the Failover Cluster component for Windows operating systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
SSTP Code Execution
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
NPM vm2 Information Disclosure
The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
mtk_vpu Heap Buffer Overflow DoS
The vulnerability of the vpuloadfirmware function in the drivers/media/platform/mediatek/vpu/mtkvpu.c file of the MediaTek VPU video processor driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system...