97848 matches found
Microsoft SharePoint Server Subscription Edition Spear Phishing
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Dynamics NAV Auth Bypass Info Disclosure
The vulnerability of the integrated business management system Microsoft Dynamics NAV lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Microsoft Visual Studio Code Editor Path Traversal
The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
Microsoft Visual Studio Code Editor Code Execution
The vulnerability of Microsoft Visual Studio Code’s editor is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
GitLab Authentication Bypass Info Disclosure
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
AI-based Tools Cross-Site Request Falsification Privilege Escalation
The vulnerability of the AI-based tool for automatic analysis of root causes and effective response to incidents in Azure SRE Agents is related to the manipulation of cross-site requests. Exploiting this vulnerability can allow attackers who operate remotely to enhance their privileges...
Azure App Service for Linux Authentication Bypass RCE
The vulnerability of the Azure App Service for Linux platform for deploying, scaling, and administering web applications is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft SharePoint Server Privilege Escalation
The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
GitLab Access Control Issue
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the access control mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify and delete any data they wish...
GitLab Authentication Bypass File Upload
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to upload arbitrary files remotely...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
Skia Graphic Library Access Information Disclosure
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to protected information through a specially created HTML page...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted HTML page...
Microsoft Visual Studio Code Editor Security Decisioning
The vulnerability of Microsoft Visual Studio Code’s editor is related to the use of unreliable input data when making security decisions. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Microsoft Visual Studio Code Editor Code Execution
The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Trusted Execution Environment Privilege Escalation
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems stems from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
Wazuh improper recursive links DoS
The vulnerability of the Wazuh security monitoring and threat detection platform is related to improper restrictions on recursive references to entities in the DTD. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Online Store Template Code Execution
The vulnerability of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can...
Microsoft SharePoint Server Auth Bypass Info Disclosure
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
Wazuh security.update_user() Bypass
The vulnerability of the security.updateuser function on the monitoring and threat detection platform Wazuh is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers operating remotely to bypass existing security mechanisms...
Wazuh check_remote_commands() Code Execution Root Privileges
The vulnerability of the checkremotecommands function on the security monitoring and threat detection platform Wazuh is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...
Wazuh authd Unauthorized Access
The vulnerability of the authd module of the Wazuh security monitoring and threat detection platform relates to the disclosure of information. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...
WNLTK WekaClassifier File Read Write
The vulnerability of the WekaClassifier module in the NLTK library for symbolic and statistical processing of natural language is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to read...
TRENDnet TEW-432BRP Router Form TCP Setup DoS
The vulnerability of the formTcpipSetup function in the /goform/formTcpipSetup file of the TRENDnet TEW-432BRP router microprogramming system is related to the issue of data being written outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability could allow an...
Nginx UI Code Execution
The vulnerabilities in the api/config/add.go, api/config/modify.go, and mcp/config/configmodify.go scripts of the Nginx UI user interface are related to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker who operates remotely to execute arbitrary code,...
WmServiceMock Module Code Execution
The vulnerability of the WmServiceMock module of the IBM WebMethods Integration integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Nginx UI Server Privilege Escalation
The vulnerability in the api/user/router.go code of the Nginx UI server’s user interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and increase their privileges...
Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS
The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux driver power supply core Heap Buffer Overflow DoS
The vulnerability in the drivers/power/supply/powersupplycore.c component of the Linux operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the tipcupdatenametbl function in the net/tipc/namedistr.c component of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Linux SCTP Verify Function Data Compromise
The vulnerabilities of the functions sctpverifyasconf and sctpverifyparam in the net/sctp/smmakechunk.c component of the Linux kernel are related to insufficient resource control during their existence. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiali...
Linux nfsd4 DropRevokedStid() DoS
The vulnerability of the nfsd4 DropRevokedStid function in the fs/nfsd/nfs4state.c component of the Linux operating system is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Linux tegra_ahub_put_value_enum Heap Buffer Overflow DoS
The vulnerability of the tegraahubputvalueenum function in the sound/soc/tegra/tegra210ahub.c component of the Linux operating system is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
Linux kernel Set RQ Size Buffer Overflow
The vulnerability of the setrqsize function in the drivers/infiniband/hw/mlx5/qp.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the qcadmphdr function in the drivers/bluetooth/hciqca.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel BPF Buffer Overflow DoS
The vulnerability of the bpfprogmapcompatible function in the kernel/bpf/core.c file of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
Linux watchdog DoS
The vulnerability of the watchdogunregisterdevice function in the drivers/watchdog/watchdogcore.c component of the Linux operating system’s kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux create_sdw_dailinks Heap Buffer Overflow
The vulnerability of the createsdwdailinks function in the sound/soc/amd/acp/acp-sdw-sof-mach.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the kfddqmsuspendbadqueuemes function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Linux operating system is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker to cause a service...
Linux kernel configfs_lookup Heap Buffer Overflow DoS
The vulnerability of the configfslookup function in the fs/configfs/dir.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux kernel Control Flow
The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux driver/infiniband/sw/rxe/rxe_resp.c Data Compromise
The vulnerability of the drivers/infiniband/sw/rxe/rxeresp.c component of the Linux operating system’s kernel is related to insufficient control of resources during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the getsrqwqe function in the drivers/infiniband/sw/rxe/rxeresp.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the drmsyncobjfindfence function in the drivers/gpu/drm/drmsyncobj.c kernel module of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux kernel srpt_get_desc_tbl Heap Buffer Overflow
The vulnerability of the srptgetdesctbl function in the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...
Linux kernel Crypto SHA204A RCE
The vulnerability of the functions atmelsha204arngreadnonblocking and atmelsha204arngread in the Linux kernel’s drivers/crypto/atmel-sha204a.c file is related to insufficient resource control during their existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the athtxedmatasklet function in the drivers/net/wireless/ath/ath9k/xmit.c file of the Linux kernel is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...