Wireshark DoS

The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark’s computer network traffic analyzer is related to buffer overflow in the stack. Exploiting this vulnerability can allow attackers to cause service interruptions...

FMP/NOTIFY Protocol DoS

The vulnerability of the FMP/NOTIFY protocol in Wireshark, a network traffic analyzer, is related to the lack of checks on input data during cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...

Mirasvit Full Page Cache Warmer Extension Code Execution

The vulnerability of the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce lies in the shortcomings of its deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Azure Cosmos DB Authentication Bypass

The vulnerability of the Azure Cosmos DB database management system is related to the ability to bypass authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to perform brute-force attacks remotely...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DirectMusic Code Execution

The vulnerability of the DirectMusic component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NTFS File System Code Execution

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

Fortinet FortiSandbox Unauthorized Access

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through specially...

Oracle GoldenGate Service Manager Full Control

The vulnerability of the Service Manager component in the Oracle GoldenGate data flow management tool is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP network protoc...

Rest Service Full Control

The vulnerability of the Rest Service component of the software platform for data integration and the creation of corporate repositories in Oracle Data Integrator is related to the lack of authentication for the critical function. Exploiting this vulnerability can allow a malicious actor to gain...

Siebel CRM Database Upgrade Data Compromise

The vulnerability of the Database Upgrade component in the Siebel CRM deployment tools for deploying, configuring, and updating server infrastructure relates to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

Enterprise Infrastructure Security Unauthorized Access

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, create, modify, and dele...

Cisco IOS XR Data Compromise

The vulnerability of Cisco IOS XR operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco IOS XR Data Compromise

The vulnerability of Cisco IOS XR operating systems is related to a breach in the data protection mechanism. Exploiting this vulnerability allows an attacker to potentially compromise the integrity and accessibility of protected information...

Cisco IOS XR DoS

The vulnerability of Cisco IOS XR operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

SAP NetWeaver SQL Injection Unauthorized Access

The vulnerability of the SAP NetWeaver software integration platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SAP NetWeaver Application Server ABAP Data Compromise

The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Apache Superset SQL Injection

The vulnerability of the Apache Superset data visualization software lies in the lack of measures taken to protect the SQL query structure during the processing of the parameters sqlExpression and where. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

Wireshark DoS

The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark’s computer network traffic analyzer is related to buffer overflow in the stack. Exploiting this vulnerability can allow a hacker to cause a service failure...

Gitea Migration SSRF

The vulnerability of the migration and mirroring mechanism of the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Azure AI Language Authoring Service Privilege Escalation

The vulnerability of Azure AI Language Authoring lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

PAN-OS Command Line Arbitrary Command Execution

The vulnerability of the command-line interface of the PAN-OS operating system is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands on behalf of the root user...

Endpoint DLP Module Bypass

The vulnerability of the EndPoint DLP module of the remote user access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows attackers to bypass existing security measure...

Palo Alto Networks Prisma Access Agent Compromise Information Disclosure

The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose protected information...

Palo Alto Networks Cortex XDR Broker VM Code Execution

The vulnerability of the virtual machine on Palo Alto Networks’ Cortex XDR Broker VM for cloud security platforms is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Checkov Special Elements Command Injection

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows attackers to execute arbitrary commands...

Oracle BI Publisher Security Full Control

The vulnerability of the BI Platform Security component of the Oracle BI Publisher software for creating reports is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

E1 Foundation Full Control

The vulnerability of component E1 Foundation in the financial management module of the JD Edwards EnterpriseOne General Ledger system, a business automation system, relates to insecure privilege management. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full...

Cisco IOS XR Data Compromise

The vulnerability of Cisco IOS XR operating systems is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Wireshark DoS

The vulnerability of the SSH protocol analyzer and traffic sniffer software Wireshark is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Git repository managers API Privilege Escalation

The vulnerability in the API for handling email addresses of Git repositories managed by Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Microsoft Fabric Data Management Platform Privilege Escalation

The vulnerability of the Microsoft Fabric data management platform is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

RNDIS Component Code Execution

The vulnerability of the RNDIS component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Compressed Folder Code Execution

The vulnerability of the Compressed Folder tool in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Routing and Remote Access Service Code Execution

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telnet Client Code Execution

The vulnerability of the Telnet Client command-line tool for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Media Foundation Code Execution

The vulnerability of the multimedia framework Media Foundation in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PAN-OS XML Processing Code Execution

The vulnerability of the XML data processing module of the PAN-OS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

Core Component Oracle Coherence Full Control

The vulnerability of the Core component of the Oracle Coherence data processing software is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCP protocol...

Cisco IOS XR Resource Management Data Compromise

The vulnerability of Cisco IOS XR operating systems is related to inadequate control over resources throughout their entire lifecycle. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco IOS XR Data Compromise

The vulnerability of Cisco IOS XR operating systems is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

RFC modules in developing Information Disclosure

The vulnerability of RFC software modules for developing and executing applications in the ABAP SAP NetWeaver Application Server ABAP environment is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

SAP GUI System Library Data Compromise

The vulnerability of the SAP GUI graphical user interface for Windows relates to deficiencies in the mechanism for calling system libraries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a...

SAP Business Warehouse DoS

The vulnerability of the module of the SAP Business Warehouse data management and analytics system is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

SAP NetWeaver Application Server ABAP Auth Bypass

The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms is related to the absence of authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SAP Solution Manager ST-PI Disclosure

The vulnerability of the functional module of the SAP Solution Manager SAP Solution Tools Plug-In ST-PI is related to the absence of an authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

Siebel Cloud Manager Data Compromise

The vulnerability of the Siebel Cloud Manager cloud version of the Siebel CRM Cloud Applications system’s customer relationship management system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

Ivanti Endpoint Manager Mobile Privilege Escalation

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to elevate their...

SAP Supply Chain Management Unvalidated Data Input DoS

The vulnerability of SAP Supply Chain Management’s supply management software is related to unverified data inputs used as conditions for executing loops. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Oracle In-Memory Cost Management Internal Operations Unauthorized Access

The vulnerability of the Internal Operations component of the Oracle In-Memory Cost Management for Discrete Industries software solution is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to create, delete, or modify...