92434 matches found
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to operations that occur outside of the buffer in memory, allowing attackers to disclose protected information.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the RuBackup backup system, related to access control errors, allows a intruder to gain unauthorized access and edit information.
The vulnerability of the RuBackup backup system is related to errors in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Service Task Priorities” panel...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Windows Bluetooth Service in the Windows operating system allows a hacker to gain elevated privileges.
The vulnerability of the Windows Bluetooth Service in the operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages stems from deficiencies in the deserialization mechanism, allowing attackers to exploit their privileges.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of the Windows kernel component of the Windows operating system allows attackers to increase their privileges.
The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows operating system’s Telephony Service allows attackers to disclose protected information.
The vulnerability of the Windows operating system’s Telephony Service is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Ghost content management system, related to the lack of measures taken to protect the SQL query structure, allows attackers to gain unauthorized access to the protected information.
The vulnerability of the Ghost content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the FreeCounter() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the FreeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow a malicious...
The vulnerability of the Cargo package manager in the Rust programming language arises from the use of non-canonical URL paths for authentication solutions. This allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Cargo package manager in the Rust programming language is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems relates to the use of memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.
The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
The vulnerability of Adobe InDesign’s computer layout automation software, related to reading data outside the buffer in memory, allows attackers to gain unauthorized access to protected information.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...
Уязвимость функции TabGroups браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить подмену пользовательского интерфейса
Уязвимость функции TabGroups браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить подмену пользовательского интерфейса с помощью вредоносного сетевого трафика...
The vulnerability of the Windows Graphics Component, which allows a hacker to execute arbitrary code on Windows operating systems
The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Hyper-V component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Hyper-V component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Azure Stack Edge hardware platform, related to improper external management of file names or paths, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Azure Stack Edge software platform is related to improper external management of file names or file paths. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability relates to the implementation of the HTTP/2 decoder in Python programming language. This allows a attacker to trigger a service failure.
The vulnerability of the HTTP/2 decoder implementation in Python programming language is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the miSyncDestroyFence() function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the miSyncDestroyFence function in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to increase their privileges and cause service...
The vulnerability of the Cargo package manager in the Rust programming language arises from deficiencies in the mechanism for handling symbolic references, allowing an attacker to execute arbitrary code.
The vulnerability of the Cargo package manager in the Rust programming language is related to deficiencies in the mechanism for handling symbolic references. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Dashboard Server interface of the Universal Robots PolyScope software allows a perpetrator to execute arbitrary code.
The vulnerability of the Dashboard Server interface of the Universal Robots PolyScope software lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Mozilla Firefox and Firefox Focus lies in a violation of data protection mechanisms, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Mozilla Firefox and Firefox Focus is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Function Discovery Service (fdwsd.dll) on Windows operating systems allows a perpetrator to escalate their privileges.
The vulnerability of the Function Discovery Service fdwsd.dll on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.
The vulnerability of the Windows Push Notification Service relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to disclose sensitive information that is protected by this service...
Уязвимость компонента Tab Hover Cards браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить подмену домена
Уязвимость компонента Tab Hover Cards браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, подмену домена с помощью созданного доменного имени...
The vulnerability of the Windows Attestation service for Windows operating systems allows a perpetrator to escalate their privileges.
The vulnerability of the Windows Attestation service for Windows operating systems is related to the violation of trust boundaries. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the DRIGetBuffersWithFormat module in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, allows a malicious actor to escalate their privileges and cause service failures.
The vulnerability of the DRIGetBuffersWithFormat module in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain elevated privileges and cause service interruptions...
The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Windows Common Log File System Driver in the operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.
The vulnerability of the Windows Push Notification Service relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to disclose sensitive information that is protected by this service...
Vulnerability of the “Geo: Employee Birthdays” module in the Content Management System (CMS) of 1C-Bitrix: Insufficient protection measures related to SQL query structures, allowing attackers to execute arbitrary code.
Vulnerability of the “Geo: Employee Birthdays” module in the Content Management System CMS of 1C-Bitrix: Failure to protect the SQL query structure allows an attacker to execute arbitrary code remotely...
The vulnerability of the Windows Performance Monitor component of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the Windows Performance Monitor component of the Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the Windows Push Notifications service allows a perpetrator to disclose protected information.
The vulnerability of Windows Push Notifications services relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these services...
The vulnerability of the RuBackup backup system, related to access control errors, allows a intruder to gain unauthorized access and edit information.
The vulnerability of the RuBackup backup system is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Blocked Devices” panel...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Shell command shell in Windows operating systems, which allows a hacker to disclose protected information
The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a remote attacker to disclose protected information...
The vulnerability of the _XkbSetMapChecks() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to gain elevated privileges and cause service failures.
The vulnerability of the XkbSetMapChecks function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow...
The vulnerability of Microsoft Exchange Server servers stems from the lack of protective measures for website structures, allowing attackers to carry out spear-phishing attacks.
The vulnerability of Microsoft Exchange Server servers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Web Codecs component in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.
The vulnerability of the Web Codecs component in Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the CreateSaverWindow() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X Window System Server implementation, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the CreateSaverWindow function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X Window System X.Org Server implementation, is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024, related to integer overflow, allows attackers to cause service interruptions.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to cause a service failure by opening the malicious file...
The vulnerability of the Kernel component of the Windows operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...