98363 matches found
Windows Imaging Component Code Execution
The vulnerability of the Windows Imaging Component WIC in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
DHCP Server Windows Code Execution
The vulnerability of DHCP servers for Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
OpenSSL derive() function Data Compromise
The vulnerability of the derive function in the modules openssl/src/derive.rs and openssl/src/pkeyctx.rs of the OpenSSL library is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
OpenSSL unwrap_key() Heap Buffer Overflow DoS
The vulnerability of the unwrapkey function in the openssl/src/aes.rs module of the OpenSSL library is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...
lpc32xx PWM Driver Heap Buffer Overflow DoS
The vulnerability of the lpc32xxpwmprobe function in the drivers/pwm/pwm-lpc32xx.c file of the PWM device driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
Fortinet Privileged Access Agent Authentication Bypass
The vulnerability of the Fortinet Privileged Access Agent for Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
FortiMonitorOnSight Information Disclosure
The vulnerability of FortiMonitorOnSight’s network performance monitoring and analysis solution lies in the fact that it exposes information through source code. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
Django DomainNameValidator Code Execution
The vulnerability of the django.corevalidators.DomainNameValidator module in the Django web application framework is related to improper handling of line separators. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
OpenSSL ocsp_responders() function Data Compromise
The vulnerability of the ocspresponers function in the openssl/src/x509/mod.rs library of the OpenSSL library is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...
Incus uploadDir S3 Arbitrary Command Execution
The vulnerability of the uploadDir function in the internal/server/storage/s3/local/multipart.go file of the container management system and the virtual machine manager Incus is related to improper external manipulation of the file name or path. Exploiting this vulnerability allows a remote...
Amphion VPU video encoder driver Buffer Overflow DoS
The vulnerability of the functions vencgparm and vencsparm in the driver/media/platform/amphion/venc.c file of the Amphion VPU video encoder driver for Linux operating systems is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
TOTOLink A3600R Router Arbitrary Command Execution
The vulnerability of the setNoticeCfg function in the TOTOLink A3600R router’s microprogramming software relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
vm2 NPM setDefaultCACertificates Code Execution
The vulnerability of the tls.setDefaultCACertificates function in the vm2 package manager’s NPM library is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
vm2 Code Execution
The vulnerability of the functions Uint8Array.prototype, TypedArray.prototype, and ArrayBuffer.prototype in the NPM package manager’s library is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Netlogon Service Code Execution
The vulnerability of the Netlogon service in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SSTP Code Execution
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
NFS ONCRPC XDR Driver Code Execution
The vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux kernel XFRM/IPsec DoS
The vulnerability of the functions copytouseraead, copytouserealg, and copytouserstateextra in the net/xfrm/xfrmuser.c sub-module of the XFRM/IPsec subsystem in Linux operating systems is related to insufficient control over resources with dynamic management. Exploitation of this vulnerability...
Karapace Kafka REST Authentication Bypass
The vulnerability of the Karapace interface for Kafka REST relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain read-write access to data...
django.contrib.gis.gdal GDALRaster Disclosure DoS
The vulnerability of the django.contrib.gis.gdal.GDALRaster module in the Django web application framework is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service...
TOTOLINK A3300R SetVpnPassCfg Command Execution
The vulnerability of the setVpnPassCfg function in TOTOLINK A3300R router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
DHCP Server Windows Code Execution
The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...
vm2 Promise.prototype.finally() Code Execution
The vulnerability of the Promise.prototype.finally function in the vm2 package manager of NPM is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
NPM vm2 Code Execution
The vulnerability of the NPM package manager’s vm2 library is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
vm2 EventEmitter Prototype Code Execution
The vulnerability of the EventEmitter.prototype.emit method in the vm2 library of the NPM package manager is related to insufficient resource control with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Internet Connection Sharing Windows Code Execution
The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft Office Memory Execution Arbitrary Code
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Skype for Business Instant Messaging Spoofing
The vulnerability of the Skype for Business Server’s instant messaging program is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...
libfreerdp H264 Buffer Overflow RCE
The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
MariaDB SST Command Execution
The vulnerability of the State Snapshot Transfer SST mechanism of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
OpenSSL digest_final() function
The vulnerability of the digestfinal function in the openssl/src/mdctx.rs module of the OpenSSL library is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
Libssh2 Packet Add DoS
The vulnerability of the libssh2packetadd function in the src/packet.c component of the SSH2 protocol implementation library Libssh2 involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CWMP/TR-069 Protocol Code Execution Root Privileges
The vulnerability of the CWMP/TR-069 protocol implementation of TP-Link Archer VX1800v V1 software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...
OpenSSL src/ssl/callbacks.rs RCE
The vulnerability of the functions rawclientpsk, rawserverpsk, rawcookiegenerate, and rawstatelesscookiegenerate in the OpenSSL library’s src/ssl/callbacks.rs module is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...
TOTOLINK A3300R Router Command Execution
The vulnerability of the setSmartQosCfg function in TOTOLINK A3300R router microprogramming systems is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
TOTOLINK A3300R SetLanCfg Command Execution
The vulnerability of the setLanCfg function in TOTOLINK A3300R router microprogramming systems lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Graphics component Windows Code Execution
The vulnerability of the Graphics component in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created RTF format file...
NPM vm2 Code Execution
The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Linux xfrm IPv6 Rearrange RTHDR Privilege Escalation
The vulnerability of the ipv6rearrangerthdr function in the xfrm component of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to increase their privileges...
Linux kernel TUN Privilege Escalation
The vulnerability of the tungetuser function in the Linux kernel’s TUN network driver is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Linux SCTP Privilege Escalation
The vulnerability of the sctpassocaddpeer function in the Linux operating system’s SCTP protocol kernel is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain increased privileges...
NPM vm2 Code Execution
The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Check Point Security Management Code Execution
The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
NPM vm2 Code Execution
The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Nodemailer addressparser DoS
The vulnerability of the addressparser component in the Nodemailer email sending library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Linux PPPoE Privilege Escalation
The vulnerability of the devhardheader function in the PPPoE network driver of the Linux operating system is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability can allow an attacker to gain increased privileges...
NPM vm2 Code Execution
The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Container Isolation FS Filter Driver Privilege Escalation
The vulnerability of the Container Isolation FS Filter driver for Windows operating systems is related to the incorrect handling of symbolic references before accessing a file. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
coredns Unauthenticated DoS
The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service...
Open WebUI misc.py misc
The vulnerability in the backend/openwebui/utils/misc.py file of the Open WebUI artificial intelligence-based web interface is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of...