The vulnerabilities in the following files include/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php are related to the software used for implementing the MediaWiki hypertext environment. These vulnerabilities allow attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the scripts included/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php, which are used for implementing the MediaWiki hypertext...

The vulnerability of the download mechanism of the SmarterTools SmarterMail email server allows a perpetrator to execute arbitrary code.

The vulnerability of the attachment loading mechanism in the SmarterTools SmarterMail email server relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the ip6ip6_err() function in the net/ipv6/ip6_tunnel.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6ip6err function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to buffer out-of-buffer writing. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the DTLS component in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the DTLS component in the OpenSSL library is related to asymmetric resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the RDBMS component of the database management system Oracle Database Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.

The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

The vulnerability of the MediaWiki hypertext environment’s implementation of the apiUserrights.php program involves allowing unauthorized access to protected information by attackers.

The vulnerability of the MediaWiki hypertext environment implementation, including the apiUserrights.php tool, is related to insufficient protection of operational data. Exploitation of this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability in the parser.php script of the MediaWiki software, which is used to implement the hypertext environment, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the parser script included in the MediaWikia hypertext environment’s implementation lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the MediaWiki’s API/queryAbuseFilters.php tool, which is used to implement the hypertext environment, allows a violator to gain unauthorized access to protected information.

The vulnerability of the MediaWiki hypertext environment implementation, as demonstrated in the api/queryAbuseFilters.php tool, involves insufficient protection for operational data. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected informati...

The vulnerabilities in the scripts included/language/language.php, includes/logging/blockLogFormatter.php, includes/logging/logFormatter.php, includes/logging/patrolLogFormatter.php, includes/logging/renameuserLogFormatter.php, includes/logging/tagLogFormatter.php, and includes/specials/specialVersion.php of the MediaWik software, which is used to implement the hypertext environment, allow attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the scripts included/language/language.php, includes/logging/blockLogFormatter.php, includes/logging/logFormatter.php, includes/logging/patrolLogFormatter.php, includes/logging/renameuserLogFormatter.php, includes/logging/tagLogFormatter.php, and...

The vulnerability of the fib6_rule_suppress() function in the net/ipv6/fib6_rules.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fib6rulesuppress function in the net/ipv6/fib6rules.c module of the Linux operating system’s IPv6 kernel implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentialit...

The vulnerability of the SOCK_STREAM component in the FreeBSD operating system allows a hacker to increase their privileges.

The vulnerability of the SOCKSTREAM component in FreeBSD operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the CMP module in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the CMP module in the OpenSSL library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the hash_search() function in the Rsync file transfer and synchronization utility allows a malicious actor to trigger a service failure.

The vulnerability of the hashsearch function in the Rsync file transfer and synchronization utility is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform allows a perpetrator to trigger a service failure.

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

The vulnerability of the /goform/formSysCmd function in the microprogramming software for D-Link DIR-513 allows a hacker to execute arbitrary commands.

The vulnerability of the /goform/formSysCmd function in the microprogramming software for the D-Link DIR-513 router lies in the lack of data cleaning measures at the control level when processing the sysCmd parameter. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

The vulnerability of the handler_update_system_time() function (libdeuteron_modules.so) in the NTP Service component of D-Link DIR-825 and DIR-825R router microprogramming software, allowing a attacker to execute arbitrary commands.

The vulnerability of the handlerupdatesystemtime function libdeuteronmodules.so of the NTP Service component of D-Link DIR-825 and DIR-825R routers is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the goform/formSetWizardSelectMode() function in the D-Link DIR-513 router software allows a hacker to induce a service failure.

The vulnerability of the goform/formSetWizardSelectMode function in the D-Link DIR-513 router microprogramming system is related to the writing beyond buffer boundaries when processing the curTime parameter. Exploiting this vulnerability could allow an attacker to cause a service failure by sendi...

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to trigger a service failure.

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

The vulnerability of the Authentication Engine component of the Oracle Access Manager control system allows a perpetrator to gain full control over the system.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application through the HTTP...

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.

The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which is used for simplified deployment of the Oracle Fusion Middleware software, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control...

The vulnerability of the JavaFX component of Oracle Java SE software allows a hacker to compromise the system.

The vulnerability of the JavaFX component of Oracle Java SE software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

The vulnerability in the resources/src/mediawiki.Api/index.js file of the MediaWiki software allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability in the “resources/src/mediawiki.Api/index.js” script of the MediaWiki software, which is used for implementing the hypertext environment, is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor, operating...

The vulnerability of the group_is_primary() function in the FreeBSD operating system allows a hacker to increase their privileges.

The vulnerability of the groupisprimary function in the FreeBSD operating system’s kernel involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a remote attacker to gain increased privileges...

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain full control over the application.

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

The vulnerability of the Authentication Engine component of the Oracle Access Manager control system allows a perpetrator to gain full control over the system.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system using the HTTP network protocol...

The vulnerability of the Security component of the Oracle Agile PLM application, which allows a hacker to gain full control over the application

The vulnerability of Oracle Agile PLM’s Security component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager software platform allows a perpetrator to create, delete, or alter access to critical data.

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager software platform in Oracle Fusion Middleware is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to create, delete, or alter access to critical...

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

The vulnerability of the Marketing component of the Oracle Siebel CRM system allows a hacker to gain full control over the application.

The vulnerability of the Marketing component of the Oracle Siebel CRM system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP network protocol...

The vulnerability of the QUIC protocol implementation module in the OpenSSL library, which allows a hacker to cause a service failure

The vulnerability of the QUIC protocol implementation module in the OpenSSL library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to compromise the system.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform allows a hacker to gain full control over the application.

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

The vulnerability of the sub_452CCC() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub452CCC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the mod_ssl component of the Oracle HTTP Server allows a hacker to gain unauthorized access to create, delete, or modify data.

The vulnerability of the modssl component of the Oracle HTTP Server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to create, delete, or modify data using the HTTP network protocol...

The vulnerability of D-link DIR-823G router microprogramming software, related to errors in privilege management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of D-link DIR-823G router microprogramming software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the authentication mechanism of the N-able N-central platform for monitoring and managing IT infrastructure allows a hacker to circumvent security restrictions.

The vulnerability of the authentication mechanism of the N-able N-central platform for monitoring and managing IT infrastructure is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Messaging Enabler component of the Service Delivery Platform software, a component of the Oracle Fusion Middleware software platform, allows a perpetrator to gain full control over the application.

The vulnerability of the Messaging Enabler component of the Service Delivery Platform software, part of the Oracle Fusion Middleware software platform, is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform allows a hacker to gain full control over the application.

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the SSH protocol...

The vulnerability of the Security component of the Oracle PeopleSoft Enterprise Campus Solutions platform allows a hacker to gain full control over the application.

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

The vulnerability of the `redirect_count_down_page` function in D-Link’s router software DHP-1320 allows a hacker to execute arbitrary code.

The vulnerability of the redirectcountdownpage function in D-Link’s DHP-1320 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the file_exten_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fileextenasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the `formAdvanceSetup` function in the `/goform/formAdvanceSetup` file, belonging to the POST Request Handler of the D-Link DIR-513 router’s microprogramming system, allows a intruder to cause a service failure.

The vulnerability of the formAdvanceSetup function in the /goform/formAdvanceSetup file of the POST Request Handler component of the D-Link DIR-513 router microprogramming system is related to the copying of buffer data without checking the size of the input data during the processing of the...

The vulnerability of the hedwigcgi_main() function in D-Link DIR-645 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the hedwigcgimain function in D-Link DIR-645 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the tgfile_htm() function in the CGI Endpoint of the D-Link DI-8100 router’s microprogramming system allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the tgfilehtm function in the CGI Endpoint of the D-Link DI-8100 router’s microprogramming system is related to the issue of writing operations outside of the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to execute...