Undici TLS SOCKS5 Proxy

The vulnerability of the TLS connection mechanism through SOCKS5 proxy HTTP clients in the Undici software platform NodeJS is related to errors in the certificate authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the...

Tenda AC7 Router Information Disclosure

The vulnerability of the Tenda AC7 router’s microprogramming software is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

MikroTik RouterOS WebFig Privilege Escalation

The vulnerability in the WebFig web interface of the MikroTik RouterOS operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to increase their privileges and gain unauthorized access to protected information...

VLC media player Heap Buffer Overflow Info Disclosure

The vulnerability of the VideoLAN VLC media player lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel Platform Label DoS

The vulnerability of the platformlabel function in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux br_pass_frame_up Heap Buffer Overflow DoS

The vulnerability of the brpassframeup function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Information Disclosure

The vulnerability of the Linux operating system’s kernel is related to the exposure of information during data transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...

PackageKit RepoRemove() Data Compromise

The vulnerability of the RepoRemove function in the PackageKit package manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Tesseract Classify ReadNormProtos DoS

The vulnerability of the Classify::ReadNormProtos function in the Tesseract OCR system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Acronis Backup RCE

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers is related to improperly used standard permissions. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...

Check Point Security Gateway Firewall Code Execution

The vulnerability of Check Point Security Gateway and Check Point Spark Firewall is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

D-Link DSL-3782 Component Data Compromise

The vulnerability of the /cgi-bin/NewGUI/Set/Diagnostics.asp function of the Diagnostics component of D-Link DSL-3782 router microprogramming software is related to the lack of data cleaning measures at the management level when processing the Addr parameter. Exploiting this vulnerability allows ...

VMXNET3 RCE

The vulnerability of the VMXNET3 network adapter in VMware Workstation and VMware Fusion relates to a potential overflow condition. Exploiting this vulnerability can allow an attacker to gain elevated privileges and execute arbitrary code...

Linux kernel Path Restriction DoS

The vulnerability of the Linux operating system’s kernel is related to deficiencies in pathname restriction. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cellular Modem Component Android Privilege Bypass

The vulnerability of the Cellular Modem component in the Android operating system of Pixel phones is related to improper authorization. Exploiting this vulnerability allows a remote attacker to bypass existing security measures and gain increased privileges...

Flask-Reuploaded File Loading Code Execution

The vulnerability of the Flask-Reuploaded file loading library is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WSO2 Cryptographic Signature

The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services is related to errors in verifying cryptographic signatures. Exploiting this vulnerability can allow an attacker to gain unauthorized access and control over user accounts...

Tesseract OCR Deserialize Data Compromise

The vulnerability of the FullyConnected::De serialize function in the Tesseract OCR system is related to reading data beyond the allowable range in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

Check Point Security Gateway Code Execution

The vulnerability of the ASN.1 software for network security management and the network interface devices Check Point Security Gateway and Check Point Spark Firewall are related to buffer overflow in dynamic memory. Exploitation of this vulnerability could allow a malicious actor to execute...

MPC-server Model Context Protocol Disclosure

The vulnerability of the uploadattachment function in MPC-servers for Atlassian Model Context Protocol MCP products is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the iopollgetownership function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux net/bridge/br_stp.c DoS

The vulnerability in the net/bridge/brstp.c component of the Linux operating system is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

EmailTrack Component Code Execution

The vulnerability of the EmailTrack component in the cPanel web hosting control panel is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain full control over the server...

MikroTik RouterOS Cryptographic Signature

The vulnerability of the MikroTik RouterOS operating system is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to perform TLS server substitution remotely...

batman-adv Heap Buffer Overflow DoS

The vulnerability of the batandvtpackunordered function in the batman-adv module of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sctp DoS

The vulnerability of the net/sctp component in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux kernel events core Heap Buffer Overflow DoS

The vulnerability in the kernel/events/core.c component of the Linux operating system is related to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to cause a service failure...

Anyquery clear_plugin_cache() DoS

The vulnerability of the clearplugincache function in the SQL database Anyquery is related to an incorrect limitation on the path name of the catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Tesseract Optical Character Recognition CopyTimeStepGeneral Randomize Buffer Overflow DoS

The vulnerability of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Eclipse Jetty HTTP Request Processing

The vulnerability of Eclipse Jetty servlet containers is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to carry out attacks by substituting HTTP requests...

Linux kernel SCTP Association Init DoS

The vulnerability of the sctpassociationinit function in the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

VLC media player Integer Overflow

The vulnerability of the VideoLAN VLC media player lies in a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Cisco Identity Services Engine Auth Bypass

The vulnerability of the application programming interface of the Cisco Identity Services Engine ISE management platform is related to errors that occur when privileged application programming interfaces are used. Exploiting this vulnerability can allow a malicious actor to bypass existing securi...

D-Link DIR-513 Command Execution

The vulnerability of the /goform/formSysCmd function in the microprogramming software for the D-Link DIR-513 router lies in the lack of data cleaning measures at the control level when processing the sysCmd parameter. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

D-Link NTP Service Arbitrary Command Execution

The vulnerability of the handlerupdatesystemtime function libdeuteronmodules.so of the NTP Service component of D-Link DIR-825 and DIR-825R routers is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a remote attacker to...

D-Link DGS-3420 XSS

The vulnerability of the System Information Settings Page component in D-Link DGS-3420 microprogramming devices is related to the lack of protective measures taken for the structure of the web page when processing the System Name parameter. Exploiting this vulnerability allows a malicious actor t...

D-Link DSL-2740R Wireless Setup Component XSS

The vulnerability of the Wireless Setup Section component in D-Link DSL-2740R microprogramming software is related to the lack of measures taken to protect the website structure when processing the Wireless Network Name parameter. Exploiting this vulnerability allows a remote attacker to perform...

D-Link DIR-605L Router Arbitrary Command Execution

The vulnerability of the formAdvFirewall function in D-Link DIR-605L router microprogramming systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

Target Management Oracle Enterprise Manager Compromise

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the system using the HTTPS protocol...

Oracle Enterprise Manager Discovery Framework Full Control

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

Oracle Enterprise Manager Base Platform DoS

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

Agent Next Gen Oracle Enterprise Manager Full Control

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the SSH protocol...

Oracle Enterprise Manager Install DoS

The vulnerability of the Install component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTPS protocol...

Oracle Identity Manager Legacy UI Full Control

The vulnerability of the OIM Legacy UI controller component and the Oracle Identity Manager software platform within Oracle Fusion Middleware is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full...

Oracle Access Manager Authentication Engine Full Control

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using...

Security component Full Control

The vulnerability of Oracle Agile PLM’s Security component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

Oracle Unified Directory OUD Core Full Control

The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...

Oracle Unified Directory OUD Core Full Control

The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

Messaging Enabler Component Full Control

The vulnerability of the Messaging Enabler component of the Service Delivery Platform software, part of the Oracle Fusion Middleware software platform, is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...