The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

The vulnerability of the Common Application Objects component in the PeopleSoft Enterprise business process management tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Common Application Objects in the PeopleSoft Enterprise Business Process Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the Messaging Enabler component of the Service Delivery Platform software, a component of the Oracle Fusion Middleware software platform, allows a perpetrator to gain full control over the application.

The vulnerability of the Messaging Enabler component of the Service Delivery Platform software, part of the Oracle Fusion Middleware software platform, is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...

The vulnerability of the SSH server on the RouterOS operating system of MikroTik allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SSH server on the RouterOS operating system of MikroTik is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the ioctl component in the kernel of the FreeBSD operating system, which allows a hacker to increase their privileges

The vulnerability of the ioctl component in the FreeBSD operating system’s kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the ip_vs_bind_dest function in the ipvs component of the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the ipvsbinddest function in the ipvs component of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the Rsync file transfer and synchronization utility, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Rsync file transfer and synchronization utility is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the port_default_packet_handler() function in the OpenSSL library allows a hacker to induce a service failure.

The vulnerability of the portdefaultpackethandler function in the OpenSSL library is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the HLINK_BUMP module in the Rsync file transfer and synchronization utility allows a hacker to trigger a service failure.

The vulnerability of the HLINKBUMP module in the Rsync file transfer and synchronization utility is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Wireless Setup Section component in the microprogramming software of D-Link DSL-2740R routers allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Wireless Setup Section component in D-Link DSL-2740R microprogramming software is related to the lack of measures taken to protect the website structure when processing the Wireless Network Name parameter. Exploiting this vulnerability allows a remote attacker to perform...

The vulnerability of the formAdvFirewall function in D-Link DIR-605L router software allows a hacker to execute arbitrary commands.

The vulnerability of the formAdvFirewall function in D-Link DIR-605L router microprogramming systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the system.

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the system using the HTTPS protocol...

The vulnerability of the Install component of the Oracle Enterprise Manager Base Platform software allows a perpetrator to trigger a service failure.

The vulnerability of the Install component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTPS protocol...

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager software platform allows a hacker to gain full control over the system.

The vulnerability of the OIM Legacy UI controller component and the Oracle Identity Manager software platform within Oracle Fusion Middleware is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full...

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.

The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which is used for simplified deployment of the Oracle Fusion Middleware software, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control...

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

The vulnerability of the script included in the syntaxhighlight.php tool used for implementing the MediaWiki hypertext environment allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the syntaxHighlight.php script used by the MediaWiki hypertext environment is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

The vulnerability of the nf_queue module in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nfqueue module in the Linux operating system’s kernel is related to out-of-buffer writing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the br_multicast_leave_group() function in the net/bridge/br_multicast.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the brmulticastleavegroup function in the net/bridge/brmulticast.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the CMP module in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the CMP module in the OpenSSL library is related to the pointer manipulation during the processing of the protectionAlg parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the CMP module in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the CMP module in the OpenSSL library is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Rsync file transfer and synchronization utility, related to unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the Rsync file transfer and synchronization utility is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the read_args() function in the Rsync utility for file transfer and synchronization allows a malicious actor to trigger a service failure.

The vulnerability of the readargs function in the Rsync utility for file transfer and synchronization is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the CORS configuration mechanism of the Langflow agent creation and deployment tool allows a attacker to execute arbitrary code.

The vulnerability of the CORS configuration mechanism used by the Langflow agent creation and deployment tool is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Authentication Engine component of the Oracle Access Manager control system allows a perpetrator to gain full control over the system.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system using the HTTP network protocol...

The vulnerability of the Security component of the Oracle PeopleSoft Enterprise Campus Solutions platform allows a hacker to gain full control over the application.

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

The vulnerability of the add_implied_include() function in the rsync network daemon – a utility for transferring and synchronizing files – allows a hacker to cause a service failure.

The vulnerability of the addimpliedinclude function in the rsync network daemon—a utility for transferring and synchronizing files—is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform allows a hacker to gain full control over the application.

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the SSH protocol...

The vulnerability of the hedwigcgi_main() function in D-Link DIR-645 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the hedwigcgimain function in D-Link DIR-645 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the email analysis mechanism of the Cisco AsyncOS operating system for Cisco Secure Email protection tools allows for the execution of arbitrary commands.

The vulnerability of the email analysis mechanism of Cisco AsyncOS operating system in Cisco Secure Email protection solutions is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with roo...

The vulnerabilities of Intel TDX, Intel Scalable SGX, and AMD SEV-SNP microprogramming software for Intel and AMD processors allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of implementations of confidential computing technologies such as Intel TDX, Intel Scalable SGX, and AMD SEV-SNP microprogramming software for Intel and AMD processors is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers...

The vulnerability of the Windows Storage component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Storage component in operating systems involves the use of an insecure search path. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the __sndctl_ascii_elem_id_parse() function in the library for interacting with kernel audio drivers from the Alsa-lib library allows a attacker to cause a service failure.

The vulnerability of the sndctlasciielemidparse function in the library for interacting with kernel audio drivers from the Alsa-lib library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the addressparser component in the Nodemailer library, which allows a hacker to trigger a service failure.

The vulnerability of the addressparser component in the Nodemailer email sending library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the strcpy function in the HNAP1 component of D-Link’s DIR-823G router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the strcpy function in the HNAP1 component of D-Link DIR-823G microprogrammed router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formDelWebAuthWhiteUser function in the microprogramming software for wireless Wi-Fi routers Tenda W20E allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formDelWebAuthWhiteUser function in the wireless Wi-Fi router software Tenda W20E is related to the operation of the webAuthWhiteUserIndex parameter that goes beyond the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

The vulnerability of Ixia’s IxVeriWave and Vector Informatik traffic analyzer for computer networks, Wireshark, allows a hacker to cause a service failure.

The vulnerability of Ixia’s IxVeriWave and Vector Informatik network traffic analyzer Wireshark components relates to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the TTX Logger component, a traffic analysis tool for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of the formIPMacBindAdd function in the HTTP Handler component of the wireless Wi-Fi routers from Tenda, allowing a hacker to cause a service failure.

The vulnerability of the formIPMacBindAdd function in the HTTP Handler component of the wireless Wi-Fi routers from Tenda, the Tenda W20E, is related to the issue where the operation is executed outside the buffer in memory when processing the IPMacBindRule parameter. Exploiting this vulnerabilit...

The vulnerability of the smux_accept() function in the SMUX module of the SNMP deployment and usage software Net-SNMP allows a attacker to cause a service failure.

The vulnerability of the smuxaccept function in the SMUX software module for SNMP protocol implementation and deployment is related to simultaneous access to a remote resource without a timeout mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the SetDynamicDNSIPv6Settings function in the Dynamic DNS IPv6 Settings component of the D-Link DIR-878 wireless router allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetDynamicDNSIPv6Settings function in the Dynamic DNS IPv6 Settings component of the D-Link DIR-878 wireless router lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the SetWan3Settings function in the WAN Settings component of D-Link DIR-878 wireless routers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetWan3Settings function in the WAN Settings component of the D-Link DIR-878 wireless router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the requestBodyUploader component in the application programming interface of a git-based software platform, which facilitates collaborative code development on GitLab, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the requestBodyUploader component in the application programming interface of a git-based software platform for collaborative code development on GitLab is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability may allow an attack...

The vulnerability of the Azure AI Language Authoring service lies in the lack of authentication for critical functions, allowing attackers to escalate their privileges.

The vulnerability of Azure AI Language Authoring lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

The vulnerability of the Telnet Client command-line tool for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Telnet Client command-line tool for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the command-line interface of the PAN-OS operating system, allowing a perpetrator to execute arbitrary commands

The vulnerability of the command-line interface of the PAN-OS operating system is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands on behalf of the root user...

The vulnerability of the Service Manager component in the Oracle GoldenGate data flow management tool allows a hacker to gain full control over the application.

The vulnerability of the Service Manager component in the Oracle GoldenGate data flow management tool is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP network protoc...

The vulnerability of Cisco IOS XR operating systems, related to improper handling of exceptional states, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Cisco IOS XR operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of RFC software modules in developing and executing applications in the ABAP SAP NetWeaver Application Server ABAP language allows attackers to disclose sensitive information.

The vulnerability of RFC software modules for developing and executing applications in the ABAP SAP NetWeaver Application Server ABAP environment is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to disclose the protected information...