92434 matches found
The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...
The vulnerability of the MIFF decoder in the console-based ImageMagick graphics editor allows a hacker to trigger a service failure.
The vulnerability of the MIFF decoder in the console-based ImageMagick graphics editor leads to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Shell component for VS Code, a command-line and code editor client of Oracle MySQL Shell, allows an attacker to gain full control over the system.
The vulnerability of the Shell component in VS Code’s command-line and code editor client for Oracle MySQL Shell is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the system...
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the EcoStruxure IT Data Center Expert software in managing data center infrastructure lies in the improper limitation of XML references to external objects, which allows attackers to disclose sensitive information.
The vulnerability of the EcoStruxure IT Data Center Expert software for managing data center infrastructure is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
The vulnerability in the web interface for managing microprogrammed software routers UTT HiPER 1250GW allows a hacker to trigger a service failure.
The vulnerability of the web-based management interface for UTT HiPER 1250GW microprogramming software is related to buffer overflow in the stack when processing the Profile parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...
DirectumRX (Leonid Kochegarov) (No. 1 from June 23, 2026 at 08:36:23)
...
The vulnerability of the Cisco Webex App for collaborative work lies in the redirection of the URL to an unreliable website, allowing a hacker to redirect users to any given URL address.
The vulnerability of the Cisco Webex App for collaborative work relates to the redirection of the URL to an unreliable website as a result of incorrect processing of HTTP request parameters. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages, related to numerical truncation errors, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to buffer overflows in dynamic memory, which allows attackers to exploit the protected information.
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these security measures...
Уязвимость компонента ServiceWorker браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента ServiceWorker браузера Google Chrome связана с использованием памяти после её освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с помощью специально созданной HTML-страницы...
Уязвимость браузера Google Chrome, связанная с ошибкой подтверждения источника данных, позволяющая нарушителю обойти существующие ограничения безопасности
Уязвимость браузера Google Chrome связана с ошибкой подтверждения источника данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие ограничения безопасности с помощью специально созданной HTML-страницы...
Уязвимость компонента Passwords браузера Google Chrome, позволяющая нарушителю получить доступ к защищаемой информации
Уязвимость компонента Passwords браузера Google Chrome связана с нарушением механизма защиты данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации с помощью специально созданной HTML-страницы...
Уязвимость компонента SVG браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента SVG браузера Google Chrome связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с помощью специально созданной HTML-страницы...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability in the web interface for managing micro-program software-based network devices UTT 1200GW allows a perpetrator to cause a service failure.
The vulnerability of the web-based interface for managing microprogrammed network devices UTT 1200GW is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Core component of the Oracle Enterprise Command Center Framework allows a perpetrator to gain access to read, modify, or delete data, or to cause a service failure.
The vulnerability of the Core component of the Oracle Enterprise Command Center Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data, or cause a service failure using the HTTP network protocol...
The vulnerability of Microsoft Exchange Server servers, related to insufficient validation of requests on the server side, allows attackers to perform spoofing attacks.
The vulnerability of Microsoft Exchange Server servers is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Solar appScreener platform, related to an incorrect restriction on the path name to the catalog, allows a violator to execute arbitrary code.
The vulnerability of the Solar appScreener platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Bluetooth component of Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the Bluetooth component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...
Уязвимость компонента Read Anything браузера Google Chrome, позволяющая нарушителю выйти за пределы песочницы
Уязвимость компонента Read Anything браузера Google Chrome связана с использованием памяти после её освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выйти за пределы песочницы с помощью специально созданной HTML-страницы...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.
The vulnerability of the Google Chrome browser’s Media component relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...
The vulnerability of Google Chrome browsers on iOS operating systems relates to a lack of mechanisms for verifying the source of access. This allows attackers to gain unauthorized access to protected information.
The vulnerability of Google Chrome browser on iOS operating systems is related to a lack of mechanisms for verifying the source of the request. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...
The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW allows a perpetrator to cause a service failure.
The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW is related to the data being written beyond the buffer boundaries in memory when processing the sysAdmUser/sysAdmPass parameter. Exploitation of this vulnerability could allow a malicious actor to cause...
The vulnerability of the software for working with Splunk AI Tookit (AITK) algorithms (formerly known as Splunk Machine Learning Toolkit (MLTK)) relates to insecure resource initialization, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the software for working with Splunk AI Tookit AITK algorithms formerly known as Splunk Machine Learning Toolkit MLTK is related to insecure resource initialization due to the lack of restrictions on outgoing requests, as approved by external domains. Exploiting this...
The vulnerability of the Bluetooth component of Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the Bluetooth component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...
Уязвимость компонента Passwords браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности
Уязвимость компонента Passwords браузера Google Chrome связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие ограничения безопасности с помощью специально созданной HTML-страницы...
The vulnerability of the MIFF encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the MIFF encoder in the console-based ImageMagick graphics editor is related to incorrect calculations of the buffer size allocated. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain full control over the application.
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application...
The vulnerability of the graphics processor in Google Chrome browsers on Android operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the graphics processor in Google Chrome browsers on Android operating systems is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...
The vulnerability of Microsoft Exchange Server servers is related to insufficient protection of the website structure, which allows attackers to carry out spear-phishing attacks.
The vulnerability of Microsoft Exchange Server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the decoder in the MSL console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the decoder in the MSL console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the UNIX Disk Format File System Driver (UDFS) on Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the UNIX Disk Format File System Driver UDFS on Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the console-based graphic editor ImageMagick, related to uncontrolled recursion, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the user remote access agent for corporate resources and Prisma Access Agent applications lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.
The vulnerability of the Prisma Access Agent, a user remote access agent, relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability in the web interface for managing microprogrammed software routers UTT HiPER 1250GW allows a hacker to trigger a service failure.
The vulnerability of the web-based management interface for UTT HiPER 1250GW microprogramming software is related to buffer overflow in the stack when processing the Profile parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...
Уязвимость компонента New Tab Page браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации
Уязвимость компонента New Tab Page браузера Google Chrome связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность защищаемой информации с помощью специально созданной HTML-страницы...
Уязвимость пользовательского интерфейса (UI) браузера Google Chrome, позволяющая нарушителю выйти за пределы песочницы
Уязвимость пользовательского интерфейса UI браузера Google Chrome связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выйти за пределы песочницы с помощью специально созданной HTML-страницы...
The vulnerability of the PROXY protocol implementation in proxy servers for ProxySQL databases allows a hacker to bypass security restrictions and gain access to read and modify data.
The vulnerability of the PROXY protocol implementation in ProxySQL’s database server lies in the use of an unreliable data source during the loading of updates. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to read and modify data...
The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from improper protection of the alternative path. This allows attackers to circumvent existing security restrictions.
The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to improper protection of the alternative path. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...
Vulnerability of the Graphics component: Canvas2D in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows attackers to trigger a service failure.
The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and Thunderbird email client’s Cocoa browser engine, allowing attackers to execute arbitrary code.
The vulnerability of the Widget component: The Cocoa browser components of Mozilla Firefox, Firefox ESR, and the email client Thunderbird rely on the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Netmonitor component affects browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to escalate their privileges.
The vulnerability of the Netmonitor component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the calipso_skbuff_setattr() function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation allows a malicious actor to trigger a service failure remotely.
The vulnerability of the calipsoskbuffsetattr function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the fromSetIpBind() function in Tenda F453 router software allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the fromSetIpBind function /goform/SetIpBind in the Tenda F453 router software is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the fromSafeMacFilter() function (/goform/SafeMacFilter) in the Tenda F453 router software allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the fromSafeMacFilter function /goform/SafeMacFilter of the Tenda F453 router microprogramming system is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the frmL7ImForm()/goform/L7Im function in the Tenda F453 router’s microprogramming software allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the frmL7ImForm/goform/L7Im function in the Tenda F453 router software is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the strcpy() function (/goform/formTaskEdit_ap) in the microprogrammed software for UTT HiPER 810G allows a hacker to cause a service failure.
The vulnerability of the strcpy function /goform/formTaskEditap in the microprogrammed routing software UTT HiPER 810G is related to the operation that goes beyond the buffer boundaries in memory when processing the txtMin2 parameter. Exploiting this vulnerability can allow an attacker to cause...
The vulnerability in the Audio/Video components of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.
The vulnerability of the Audio/Video components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerabilities in the scripts system_mgr.cgi, account_mgr.cgi, dsk_mgr.cgi, and app_mgr.cgi of the D-Link DNS-320 network storage software allow attackers to execute arbitrary commands.
The vulnerability in the scripts systemmgr.cgi, accountmgr.cgi, dskmgr.cgi, and appmgr.cgi of the D-Link DNS-320 network storage software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability can allow an...