92434 matches found
The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of measures to protect the structure of web pages. This allows attackers to inject malicious scripts into vulnerable form fields.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to inject malicious scripts into vulnerable fields within the system...
The vulnerability of the Adobe Campaign Classic software platform, related to authentication errors, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for managing marketing campaigns is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the Adobe Experience Manager content and media management system lies in the lack of measures taken to protect the structure of web pages. This allows a malicious actor to execute arbitrary JavaScript code within the context of a legitimate user’s session.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code within the authorized user’s session...
The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems allows a perpetrator to execute arbitrary commands through specially crafted HTTP requests.
The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems lies in the lack of measures taken to neutralize specific elements within the system. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through specially...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.
The vulnerability of the Secure Boot implementation for Windows operating systems lies in the dependency on a component that cannot be updated. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
The vulnerability of the ColdFusion interpreter lies in its insufficient checking of input data, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in their unlimited resource distribution. This allows attackers to trigger a service failure.
The vulnerability of the HashiCorp Vault Community Edition and Vault Enterprise storage platforms relates to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the ColdFusion interpreter, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.
The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
The vulnerability of Microsoft Teams’ corporate platform for Android, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of Microsoft Teams’ corporate platform for Android is related to the lack of measures taken at the management level to secure data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of Visual Studio Code’s source editor, related to insufficient input validation, allows attackers to execute arbitrary code.
The vulnerability of Visual Studio Code’s source editor is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Adobe Campaign Classic software platform, related to authentication errors, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for managing marketing campaigns is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the ColdFusion interpreter lies in its lack of protection for website structure, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion interpreter is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Azure HorizonDB database service, related to bypassing authentication through spoofing, allows attackers to escalate their privileges.
The vulnerability of the Azure HorizonDB database service relates to the bypassing of authentication processes through phising techniques. Exploiting this vulnerability can allow attackers to gain increased privileges remotely...
The vulnerability of the certification management interface of the Microsoft Azure Stack Edge software platform allows a perpetrator to carry out spoofing attacks.
The vulnerability of the certificate management interface of the Microsoft Azure Stack Edge software platform is related to insufficient protection of the website structure. Exploiting this vulnerability could allow attackers to carry out spoofing attacks...
The vulnerability of the Microsoft PowerToys system utilities, related to authentication errors, allows a perpetrator to escalate their privileges.
The vulnerability of the Microsoft PowerToys system utilities is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows UEFI boot interface of Windows operating systems allows a hacker to bypass existing security mechanisms.
The vulnerability of the Windows UEFI boot interface in operating systems involves a violation of data protection mechanisms. Exploiting this vulnerability can allow attackers to bypass existing security measures...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Adobe Experience Manager content and media management system lies in the lack of measures taken to protect the structure of web pages. This allows a malicious actor to execute arbitrary JavaScript code within the context of a legitimate user’s session.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code within the authorized user’s session...
The vulnerability of the Adobe Experience Manager content and media management system lies in the lack of measures taken to protect the structure of web pages. This allows a malicious actor to execute arbitrary JavaScript code within the context of a legitimate user’s session.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code within the authorized user’s session...
The vulnerability of the mongod file in the MongoDB database management system allows a hacker to cause a service failure.
The vulnerability of the mongod file in the MongoDB database management system is related to the insufficient use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the ColdFusion interpreter arises from incorrect restrictions on XML references to external objects, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of measures to protect the structure of web pages. This allows attackers to inject malicious scripts into vulnerable form fields.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to inject malicious scripts into vulnerable fields within the system...
The vulnerability of the tcp_write_xmit() function in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the tcpwritexmit function in Linux operating systems is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the NTLM protocol implementation in Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the NTLM protocol implementation in Windows operating systems is related to errors in information processing. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
The vulnerability of the BitLocker data protection function in Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the BitLocker data protection function in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
The vulnerability of the Projected File System (ProjFS) file system in the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Projected File System ProjFS in the Windows operating system relates to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the ColdFusion interpreter lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to bypass existing security restrictions.
The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
The vulnerability of the Kerberos Key Distribution Center (KDC) component of Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Kerberos Key Distribution Center KDC component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform a spear-phishing attack remotely...
The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Windows operating system DHCP clients allows attackers to disclose sensitive information.
The vulnerability of DHCP clients of Windows operating systems is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of Microsoft Visual Studio Code’s editor, related to insufficient protection of service data, allows attackers to disclose protected information.
The vulnerability of Microsoft Visual Studio Code’s editor is related to insufficient protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
Vulnerability of the GRPC.Compressor.Gzip and GRPC.Message modules of the remote procedure call library for the gRPC programming language Elixir “grpc”. This allows attackers to cause a service failure.
The vulnerability of the GRPC.Compressor.Gzip and GRPC.Message modules in the remote procedure call library for the gRPC programming language Elixir allows for the exploitation of severe compression input data. Exploitation of this vulnerability can enable a malicious actor to cause service...
The vulnerability of the Erlpack codec library in the gRPC procedure call library for the Elixir programming language allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the Erlpack codec in the gRPC procedure call library for the Elixir programming language involves shortcomings in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
The vulnerability of the Microsoft Kinect controller for Windows operating systems, which allows a perpetrator to increase their privileges
The vulnerability of the Microsoft Kinect controller for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Click-to-Run package services for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package services for Microsoft Office and Microsoft 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to enhance their privileges...
The vulnerability of the Windows Managed Installer component allows attackers to disclose sensitive information that is protected by this component.
The vulnerability of the Windows Managed Installer component in Windows operating systems is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager allows a malicious individual to gain unauthorized access to create or modify any file, thereby increasing their privileges.
The vulnerability of the web interface of the Cisco Catalyst SD-WAN Manager is related to an incorrect path name limitation for accessing the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to create or modify arbitrary files, thereby increasing...
The vulnerability of the Windows Internet operating system component, which allows a hacker to increase their privileges
The vulnerability of the Windows Internet operating system components is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the MoTw mechanism in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the MoTw mechanism in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of Windows Secure Boot security technology allows attackers to bypass existing security mechanisms.
The vulnerability of Windows Secure Boot in operating systems involves a breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to circumvent existing security measures...
The vulnerability of the Windows NT OS Kernel component allows attackers to enhance their privileges.
The vulnerability of the Windows NT OS Kernel component involves overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...