98363 matches found
Oracle Unified Directory OUD Core Full Control
The vulnerability of the OUD Core component of the Oracle Unified Directory application, which is used for simplified deployment of the Oracle Fusion Middleware software, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control...
Oracle WebCenter Portal Runtime Tools Full Control
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...
MediaWik XSS
The vulnerability in the scripts included/language/language.php, includes/logging/blockLogFormatter.php, includes/logging/logFormatter.php, includes/logging/patrolLogFormatter.php, includes/logging/renameuserLogFormatter.php, includes/logging/tagLogFormatter.php, and...
Langflow agent creation and deployment tool CORS Code Execution
The vulnerability of the CORS configuration mechanism used by the Langflow agent creation and deployment tool is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FreeBSD kernel ioctl Privilege Escalation
The vulnerability of the ioctl component in the FreeBSD operating system’s kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
FreeBSD group_is_primary Privilege Escalation
The vulnerability of the groupisprimary function in the FreeBSD operating system’s kernel involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a remote attacker to gain increased privileges...
OpenSSL CMP DoS
The vulnerability of the CMP module in the OpenSSL library is related to the pointer manipulation during the processing of the protectionAlg parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
OpenSSL Heap Buffer Overflow DoS
The vulnerability of the portdefaultpackethandler function in the OpenSSL library is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
HLINK_BUMP Rsync DoS
The vulnerability of the HLINKBUMP module in the Rsync file transfer and synchronization utility is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Messaging Enabler Component Full Control
The vulnerability of the Messaging Enabler component of the Service Delivery Platform software, part of the Oracle Fusion Middleware software platform, is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...
MediaWiki API/queryAbuseFilters.php Unauthorized Access
The vulnerability of the MediaWiki hypertext environment implementation, as demonstrated in the api/queryAbuseFilters.php tool, involves insufficient protection for operational data. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected informati...
MediaWiki XSS
The vulnerability in the “resources/src/mediawiki.Api/index.js” script of the MediaWiki software, which is used for implementing the hypertext environment, is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor, operating...
MediaWiki XSS
The vulnerability in the scripts included/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php, which are used for implementing the MediaWiki hypertext...
SmarterMail Download Code Execution
The vulnerability of the attachment loading mechanism in the SmarterTools SmarterMail email server relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
FreeBSD SOCK_STREAM Privilege Escalation
The vulnerability of the SOCKSTREAM component in FreeBSD operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
OpenSSL CMP DoS
The vulnerability of the CMP module in the OpenSSL library is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability can allow a malicious actor to cause service failures...
WebLogic Server Proxy Plug-In Unauthorized Access
The vulnerability of the WebLogic Server Proxy Plug-In for third-party web servers within the Oracle Fusion Middleware software platform is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create, delete, or modify data using t...
Oracle WebCenter Portal Runtime Tools Full Control
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...
Linux kernel br_multicast_leave_group Heap Buffer Overflow DoS
The vulnerability of the brmulticastleavegroup function in the net/bridge/brmulticast.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
D-Link Router Code Execution
The vulnerability of the redirectcountdownpage function in D-Link’s DHP-1320 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Net-SNMP SMUX Buffer Overflow DoS
The vulnerability of the smuxaccept function in the SMUX software module for SNMP protocol implementation and deployment is related to simultaneous access to a remote resource without a timeout mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failure...
D-Link DIR-878 SetDynamicDNSIPv6Settings Component
The vulnerability of the SetDynamicDNSIPv6Settings function in the Dynamic DNS IPv6 Settings component of the D-Link DIR-878 wireless router lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise...
Tenda FormIPMacBindAdd DoS
The vulnerability of the formIPMacBindAdd function in the HTTP Handler component of the wireless Wi-Fi routers from Tenda, the Tenda W20E, is related to the issue where the operation is executed outside the buffer in memory when processing the IPMacBindRule parameter. Exploiting this vulnerabilit...
Alsa-lib Heap Buffer Overflow DoS
The vulnerability of the sndctlasciielemidparse function in the library for interacting with kernel audio drivers from the Alsa-lib library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...
Nodemailer addressparser DoS
The vulnerability of the addressparser component in the Nodemailer email sending library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
HNAP1 strcpy Buffer Overflow
The vulnerability of the strcpy function in the HNAP1 component of D-Link DIR-823G microprogrammed router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Cisco AsyncOS Email Analysis Arbitrary Command Execution
The vulnerability of the email analysis mechanism of Cisco AsyncOS operating system in Cisco Secure Email protection solutions is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with roo...
Tenda W20E formDelWebAuthWhiteUser Data Compromise
The vulnerability of the formDelWebAuthWhiteUser function in the wireless Wi-Fi router software Tenda W20E is related to the operation of the webAuthWhiteUserIndex parameter that goes beyond the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...
Intel TDX Scalable SGX AMD SEV-SNP Data Compromise
The vulnerability of implementations of confidential computing technologies such as Intel TDX, Intel Scalable SGX, and AMD SEV-SNP microprogramming software for Intel and AMD processors is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers...
TTX Logger DoS
The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...
IxVeriWave Vector Traffic Analyzer DoS
The vulnerability of Ixia’s IxVeriWave and Vector Informatik network traffic analyzer Wireshark components relates to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...
Windows Storage Privilege Escalation
The vulnerability of the Windows Storage component in operating systems involves the use of an insecure search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
D-Link DIR-878 SetWan3Settings Component Data Compromise
The vulnerability of the SetWan3Settings function in the WAN Settings component of the D-Link DIR-878 wireless router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
Wireshark UMTS FP Protocol DoS
The vulnerability of the UMTS FP protocol analyzer in Wireshark, which is used to analyze computer network traffic, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Z39.50 Protocol Analyzer DoS
The vulnerability of the Z39.50 protocol analyzer of Wireshark relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...
Gitea API Privilege Escalation
The vulnerability of the API that binds repositories to Git repository management systems like Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
Microsoft Discovery Studio Disclosure Information
The vulnerability of the Microsoft Discovery Studio research environment is related to the improper elimination of special elements in data queries. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
Adobe Experience Manager Auth Bypass RCE
The vulnerability of the Adobe Experience Manager content and media management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Microsoft Windows PDF Document Processing Code Execution
The vulnerability of the Microsoft Windows PDF document processing component on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Windows Message Queuing Code Execution
The vulnerability of Windows’ Message Queuing system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Palo Alto Networks GlobalProtect App Command Execution
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...
PAN-OS Web Interface Code Execution
The vulnerability of the PAN-OS operating system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Oracle Complex Maintenance Component Data Compromise
The vulnerability of the Internal Operations component of the Oracle Complex Maintenance application regarding technical maintenance, repairs, and major system overhauls is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to...
Cisco IOS XR Data Compromise
The vulnerability of Cisco IOS XR operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
Ivanti Endpoint Manager Code Execution
The vulnerability of the Ivanti Endpoint Manager software control console relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
SAP Business One Resource Management XSS
The vulnerability of SAP Business One’s resource management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
SAP NetWeaver Application Server ABAP Auth Bypass
The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of protected information from a remote location...
Windows Cloud Files Mini Filter Driver RCE
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems affects the lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms and compromise the integrity of the protected information...
requestBodyUploader Component Unauthorized Access
The vulnerability of the requestBodyUploader component in the application programming interface of a git-based software platform for collaborative code development on GitLab is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability may allow an attack...
Wireshark pcapng DoS
The vulnerability of the pcapng file parser in the Wireshark network traffic analyzer is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...