98363 matches found
Skype for Business Instant Messaging DoS
The vulnerability of the Skype for Business Server’s instant messaging program is related to a countable loss of significance. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Resilient File System Privilege Escalation
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...
Graphics component Windows Code Execution
The vulnerability of the Graphics component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Remote Desktop Client Code Execution
The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Adobe Photoshop Integer Overflow RCE
The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Tenda F453 Router Code Execution
The vulnerability of the FormWriteFacMac function in the Tenda F453 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Tenda AC7 fromSetSysTime Code Execution
The vulnerability of the fromSetSysTime/goform/SetSysTimeCfg function in the Tenda AC7 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...
Tenda FH1201 Router Code Execution
The vulnerability of the formWrlExtraSet/goform/WrlExtraSet function in the Tenda FH1201 router microprogramming system lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...
Tenda F453 Router Code Execution
The vulnerability of the fromPPTPUserSetting function /goform/PPTPUserSetting of the Tenda F453 router’s software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failur...
Tenda CH22 Parameter Handler Heap Buffer Overflow
The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
Tenda CX12L Wi-Fi Router DoS
The vulnerability of the fromAddressNat function /goform/addressNat in Tenda CX12L Wi-Fi routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...
Tenda F456 Router Code Execution
The vulnerability of the formWrlsafeset function in the Tenda F456 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...
Tenda F451 httpd DoS
The vulnerability of the fromGstDhcpSetSer function /goform/GstDhcpSetSer in the httpd microprogramming system for Tenda F451 components is related to the issue of the operation going beyond the buffer in memory when processing the dips parameter. Exploiting this vulnerability could allow an...
Tenda F451 fromSafeClientFilter Function DoS
The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the httpd microprogramming system for Tenda F451 routers is related to the issue of the operation going beyond the buffer in memory when processing the manufacturer/Go parameter. Exploiting this vulnerability could...
Tenda HG3 formTracert() Code Execution
The vulnerability of the formTracert function in Tenda HG3 router microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...
Tenda A18 strcpy Heap Buffer Overflow DoS
The vulnerability of the strcpy function in Tenda A18 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
Tenda AC7 Router XSS
The vulnerability in the web interface for managing Tenda AC7 router micro-programming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML or JavaScript code remotely...
SPIP SSRF
The vulnerability of the SPIP content management system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
Rsync Symbolic Link
The vulnerability of the Rsync file transfer and synchronization utility is related to the improper handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...
FreeBSD mp_Enddisc() Kernel Code Execution
The vulnerability of the mpEnddisc function in the kernel of FreeBSD lies in the overflow of a buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
ColdFusion Code Execution
The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Adobe Photoshop Integer Overflow RCE
The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Tenda G1 Router Command Execution
The vulnerability of the /etcro/shadow file in the Tenda G1 router microprogramming system is related to the use of fixed password encoding. Exploiting this vulnerability allows an attacker to execute arbitrary commands on behalf of the root user...
Tenda A18 Router DoS
The vulnerability of the setqosMiblist /goform/formSetQosBand function in the Tenda A18 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...
Tenda A18 Router Sub_423B50 Function DoS
The vulnerability of the sub423B50 function /goform/setMacFilterCfg of the MAC Filtering Configuration Endpoint component in the Tenda A18 microprogramming router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure ...
Tenda CX12L Wi-Fi Router DoS
The vulnerability of the fromNatStaticSetting function /goform/NatStaticSetting in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...
RabbitMQ amqp_login_inner Buffer Overflow DoS
The vulnerability of the amqplogininner function in the RabbitMQ message broker’s librabbitmq/amqpsocket.c file is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Tenda i6 Wi-Fi router Bypass Catalog
The vulnerability of function R7WebsSecurityHandler in the Tenda i6 Wi-Fi router software is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to bypass the directory structure...
Tenda F456 Router Code Execution
The vulnerability of the fromNatStaticSetting function in the Tenda F456 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...
Tenda F451 Router httpd Heap Buffer Overflow DoS
The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the httpd component of the Tenda F451 router microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the page parameter. Exploiting this...
httpd daemon Code Execution
The vulnerability of the fromWrlclientSet function in the httpd daemon’s microprogramming system for Tenda FH1202 is related to the issue where an operation is performed outside the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execut...
httpd daemon WrlExtraSet() Code Execution
The vulnerability of the WrlExtraSet function in the httpd daemon of the microprogramming router Tenda FH1202 is related to the execution of an operation outside the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Tenda A21 Router Code Execution
The vulnerability of the fromSetIpMacBind function in Tenda A21 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...
Open WebUI SSRF
The vulnerability of the Open WebUI web interface related to insufficient validation of requests on the server side when processing the AIOHTTPCLIENTALLOWREDIRECTS parameter. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...
Rsync Symbolic Link
The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...
FreeBSD LcpDecodeConfig Heap Buffer Overflow DoS
The vulnerability of the LcpDecodeConfig function in the kernel of the FreeBSD operating system is related to improper handling of discrepancies in parameter length. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...
RabbitMQ Java Client DoS
The vulnerability of the AMQConnection.java file in the RabbitMQ rabbitmq-java-client Java client lies in its reliance on unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
open-source protobuf GRPC decoder DoS
The vulnerability of the decoder in open-source libraries for working with protobuf and GRPC Wire is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
Open WebUI AI-based web interface metaalert_minutes
The vulnerability of the metaalertminutes component in the backend/openwebui/models/calendar.py file of the Open WebUI AI-based web interface is related to incorrect validation of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...
REST API web interface AI DoS
The vulnerability of the REST API web interface component based on artificial intelligence is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Open WebUI Backend File Data Compromise
The vulnerability in the web interface based on artificial intelligence, namely backend/openwebui/routers/auths.py, backend/openwebui/utils/oauth.py, and backend/openwebui/socket/main.py, is related to incorrect session expiration times. Exploiting this vulnerability could allow a malicious actor...
Kerberos Key Distribution Center DoS
The vulnerability of the Kerberos Key Distribution Center KDC component in Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Windows Kernel Privilege Escalation
The vulnerability of the Windows Kernel component in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Adobe Photoshop Code Execution
The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...
ColdFusion Access Control File Read
The vulnerability of the ColdFusion software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...
Undici TLS SOCKS5 Proxy
The vulnerability of the TLS connection mechanism through SOCKS5 proxy HTTP clients in the Undici software platform NodeJS is related to errors in the certificate authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the...
Tenda i24 wireless access point software Code Execution
The vulnerability of the /etcro/shadow file in the Tenda i24 wireless access point software lies in the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...
formWifiMacFilterGet() function in the Data Compromise
The vulnerability of the formWifiMacFilterGet function in the Tenda W3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the wlradio parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Tenda A18 Router DoS
The vulnerability of the formfastsettingwifiset function /goform/fastsettingwifiset in the Tenda A18 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST...
Tenda FH451 WrlclientSet Code Execution
The vulnerability of the WrlclientSet function /goform/WrlclientSet of the Tenda FH451 router microprogramming system is related to buffer overflow in the stack when processing the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...