Red Hat Advanced Cluster Management Kubernetes Access Control Disclosure

The vulnerability of Red Hat Advanced Cluster Management’s cluster management software for Kubernetes is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to disclose confidential information...

Composer Dependency Arbitrary Command Execution

The vulnerability of the dependency manager for PHP Composer is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Palo Alto Networks GlobalProtect App Privilege Escalation

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

Palo Alto Networks GlobalProtect App PLAP Code Execution

The vulnerability of the Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect App, which enables secure remote access to data, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privilege...

SIMATIC HMI Unified Comfort Panels Standard unsafe initialization unauthorized access

The vulnerability of the high-performance operator panels from the SIMATIC HMI Unified Comfort Panels Standard family relates to the insecure initialization of resources. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the web browser...

Fortinet FortiClient DNS Modification Code Execution

The vulnerability of the Fortinet FortiClient Windows security tool lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to remotely alter or forge DNS responses for the target host and execute arbitrary code using specially...

IBM Sterling B2B Integrator File Gateway Arbitrary JavaScript Disclosure

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

Moxa Router Access Control

The vulnerabilities of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker to gain access to confidential information...

User Remote Access Agent Prisma Access Bypass

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security measures against unauthorized access...

PAN-OS Uninitialized Resource Unauthorized Access

The vulnerability of the PAN-OS operating system is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Red Hat Quay Proxy Cache Privilege Escalation

The vulnerability of the Proxy Cache component of the Red Hat Quay software platform is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Siman Executable Code Execution

The vulnerability of the exprt.exe executable component of the Siman software for discrete event simulation and automation in Rockwell Automation Arena lies in the issue of out-of-buffer writing. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially...

SIPROTEC 5 File Upload Code Execution

The vulnerability of SIPROTEC 5 devices for relay protection, automation, and control is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

NLTK java() function RCE

The vulnerability of the java function in the nltk/internals.py file of the NLTK library, a software package for symbolic and statistical processing of natural language, is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker to gain...

Linux kernel Power Management Driver Buffer Overflow

The vulnerability of the pf1550chargerprobe function in the drivers/power/supply/pf1550-charger.c module of the Linux kernel’s power management driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Linux kernel cryptographic accelerator Module Heap Buffer Overflow DoS

The vulnerability of the atmelsha204aremove function in the drivers/crypto/atmel-sha204a.c driver for the Linux kernel cryptographic accelerator is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel block blk.h buffer overflow DoS

The vulnerability of the biovecphysmergeable function in the block/blk.h module of the Linux kernel is related to an incorrect definition of its internal state. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

RouterOS SSH Privilege Escalation

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to changes in the user trust policy mask due to the introduction or modification of arguments. Exploiting this vulnerability can allow a malicious actor to increase their privileges remote...

Online Store Application Code Execution

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...

macOS iOS iPadOS Buffer Overflow DoS

The vulnerability of operating systems macOS, iOS, and iPadOS relates to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

macOS iOS iPadOS Buffer Overflow DoS

The vulnerability of operating systems macOS, iOS, and iPadOS stems from the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

WAD (Web Access Daemon) Code Execution

The vulnerability of WAD Web Access Daemon in FortiOS operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created sockets...

IBM Sterling B2B Integrator File Gateway Arbitrary JavaScript Disclosure

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

IBM Aspera Console Unauthorized Access

The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

IBM Aspera Console DoS

The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...

IBM Sterling Partner Engagement Manager Arbitrary JavaScript Disclosure

The vulnerability of the IBM Sterling Partner Engagement Manager software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and disclose protected information...

IBM Sterling B2B Integrator Information Disclosure

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

IBM Sterling B2B Integrator File Gateway Arbitrary JavaScript Disclosure

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

Moxa Router Improper Parameter Handling

The vulnerability of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software is related to improper handling of parameter length discrepancies. Exploiting this vulnerability can allow an attacker to trigger service failures...

Prisma Access Agent Authentication Bypass

The vulnerability of the Prisma Access Agent, a user-level remote access agent, relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows attackers to carry out spoofing attacks...

Prisma Access Agent Privilege Escalation

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to an uncontrolled element of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

Palo Alto Networks GlobalProtect App Buffer Overflow Privilege Escalation

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with elevated privileges...

container artifact image verification authentication disclosure

The vulnerability of the container and artifact image verification platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

Gravity Forms Plugin Arbitrary File Upload Code Execution

The vulnerability of the copypostimage function in the Gravity Forms plugin of the WordPress content management system is related to the ability to upload unlimited dangerous files. Exploiting this vulnerability allows a malicious actor to upload any files and execute any code...

Dnsmasq extract_addresses() DoS

The vulnerability of the extractaddresses function in the DNS server library Dnsmasq is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

LibSer SEPControl Kernel Extension Disclosure

The vulnerability of the LibSerSEPControl Deserialize function in AppleKeyStore kernel extensions for iOS, iPadOS, and macOS is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this...

rxgk_extract_token Heap Buffer Overflow DoS

The vulnerability of the rxgkextracttoken function in the net/rxrpc/rxgkapp.c module, which supports RxRPC session sockets in Linux operating systems, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel ip6erspan_changelink Heap Buffer Overflow DoS

The vulnerability of the ip6erspanchangelink function in the net/ipv6/ip6gre.c module of the Linux kernel is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

IBM Sterling Partner Engagement Manager Plaintext Transmission

The vulnerability of the IBM Sterling Partner Engagement Manager software lies in the transfer of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

libtiff Process Command Code Execution

The vulnerability of the processcommandopts function in the libtiff library is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Prisma Access Agent File Deletion DoS

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, stems from an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow a malicious actor to delete system files and cause service...

IBM Sterling B2B Integrator SQL Injection

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Linux kernel OVPN Network Device Driver

The vulnerability of the ovpnnetxmit function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Silabs CP210x VCP virtual COM port driver Privilege Escalation

The vulnerability of the Silabs CP210x VCP virtual COM port driver is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Palo Alto Networks GlobalProtect App Privilege Escalation

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

Linux kernel Cryptographic Subsystem Heap Buffer Overflow DoS

The vulnerability of the acompsavereq function in the crypto/acompress.c module of the Linux kernel cryptographic subsystem relates to access to resources through incompatible types. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Util-linux Error Privilege Escalation

The vulnerability of the Util-linux command-line utility package is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to increase their privileges...

IBM Aspera Console DoS

The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommugroupsetdomaininternal function in the drivers/iommu/iommu.c file of the Linux operating system’s IOMMU driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

mes_userq_create_wptr_mapping Heap Buffer Overflow DoS

The vulnerability of the mesuserqcreatewptrmapping function in the drivers/gpu/drm/amd/amdgpu/mesuserqueue.c file, a part of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system, is related to the dereferencing of a pointer with an expired validity period...