95883 matches found
The vulnerability of the integrated enterprise management system of Microsoft Dynamics NAV allows a hacker to execute arbitrary code.
The vulnerability of the integrated business management system Microsoft Dynamics NAV is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the SMB protocol driver, Server Network Transport Driver (srvnet.sys), in Windows operating systems, allows a perpetrator to execute arbitrary code.
The vulnerability of the SMB protocol driver, Server Network Transport Driver srvnet.sys, in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of the Widget component: Firefox web browser and Thunderbird email client, allowing attackers to trigger a service failure.
The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Playback component in the Firefox web browser and Thunderbird email client allows a hacker to compromise data integrity.
The vulnerability of the Playback component in the Firefox web browser and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...
The vulnerability of the IP Protection component in the Firefox web browser and the Thunderbird email client allows attackers to access confidential data.
The vulnerability of the IP Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability of the trx_addons plugin of the WordPress content management system allows a hacker to upload arbitrary files.
The vulnerability of the trxaddons plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to load any files remotely...
The vulnerability of the Camera Driver software’s microprogramming system in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries during the processing of Flash commands. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerability of the Deployment Server web interface component of the Splunk Web platform for operational analysis in Splunk Enterprise allows a perpetrator to execute arbitrary SPL commands and expose protected information.
The vulnerability of the Deployment Server web interface of the Splunk Web platform for operational analysis in Splunk Enterprise relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary SPL commands and disclose sensitive...
The vulnerability of the maybe_fork_scalars() function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the maybeforkscalars function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise t...
The vulnerability of the smp_cmdPairingReq() function in the net/bluetooth/smp.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smpcmdPairingReq function in the net/bluetooth/smp.c module of the Linux operating system is related to insufficient security checks for protected connections. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the Syslog Server server, a management tool for virtual infrastructure in VMware vCenter Server, allows a attacker to execute arbitrary code.
The vulnerability of the Syslog Server server used in managing the virtual infrastructure of VMware vCenter Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability in the implementation of the waitid() system call layer of the Linuxulator kernel in FreeBSD allows a attacker to disclose protected information.
The vulnerability in the implementation of the waitid system call layer of the Linuxulator kernel in FreeBSD operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security...
The vulnerability of the tcp_rack.ko module in the kernel of FreeBSD allows a hacker to increase their privileges.
The vulnerability of the tcprack.ko module in FreeBSD operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems allows a hacker to make changes to the system via the network.
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
The vulnerability of the USB Print Driver driver for Windows operating systems allows attackers to gain increased privileges.
The vulnerability of the USB Print Driver driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer boundaries in memory, allowing attackers to trigger a service failure.
The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client allows attackers to compromise data integrity.
The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...
The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the npm library for web development with LibJS in the Ladybird web browser allows a hacker to execute arbitrary code.
The vulnerability of the npm library for web development, LibJS, in the Ladybird web browser, is related to synchronization errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JS file...
The vulnerability of the npm library is-is-arrayish, related to the presence of undeclared features, allowing attackers to execute arbitrary code.
The vulnerability of the npm library isarrayish is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the 07FLYCMS content management system, related to the absence of authentication, allows a hacker to perform a CSRF attack.
The vulnerability of the 07FLYCMS content management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
The vulnerability of the config_dirs directive in the NGINX Agent daemon and the NGINX Instance Manager automation platform allows a malicious actor to gain unauthorized access to read and write arbitrary files.
The vulnerability of the configdirs directive in the NGINX Agent and the NGINX Instance Manager automation platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to read and write arbitrary...
The vulnerability of the SCTP Chunk Parameter Parser component in the operating system kernel of FreeBSD allows a hacker to trigger a service failure.
The vulnerability of the SCTP Chunk Parameter Parser component in the operating system kernel of FreeBSD is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the File Descriptor Handler component in the operating system kernel of FreeBSD allows a attacker to execute arbitrary code with root privileges.
The vulnerability of the File Descriptor Handler component in the FreeBSD operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...
The vulnerability of the socket parameter processor IPV6_MSFILTER in FreeBSD operating systems allows attackers to increase their privileges.
The vulnerability of the socket parameter handler IPV6MSFILTER in FreeBSD operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system allows a hacker to cause a service failure.
The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Graphics component in the Firefox web browser, allowing a hacker to access confidential data
The vulnerability of the Graphics component in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
Vulnerability of JavaScript components: Firefox’s WebAssembly browser allows attackers to access sensitive data and compromise its integrity
JavaScript component vulnerability: Firefox’s WebAssembly browser is vulnerable due to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to access sensitive data and compromise its integrity...
The vulnerability in the Firefox web browser relates to the insecure management of privileges, allowing a perpetrator to trigger a service failure.
The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client, allowing attackers to access confidential data
The vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer boundaries in memory, allowing attackers to trigger a service failure.
The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the `index_local_file_headers_within_bounds()` function in the `libclamav/unzip.c` file of the ClamAV antivirus program allows a hacker to execute arbitrary code and cause service failure.
The vulnerability of the indexlocalfileheaderswithinbounds function in the libclamav/unzip.c file of the ClamAV antivirus program is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failures...
The vulnerability of the simple-file-list plugin in the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the simple-file-list plugin in the WordPress content management system involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the fetch_gravatar_from_remote() function in the Breeze Cache plugin of the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the fetchgravatarfromremote function in the Breeze Cache plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Camera Driver software’s microprogramming in Qualcomm embedded chips allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Camera Driver microprogramming software in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted commands containing...
The vulnerability of the functions __ioam6_fillTraceData() and ioam6_fillTraceData() in the net/ipv6/ioam6.c module of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability in the `drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c` file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c file of the Broadcom wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...
The vulnerability of the __xfrm_state_delete() function in the net/xfrm/xfrm_state.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmstatedelete function in the net/xfrm/xfrmstate.c module, which is part of the Linux kernel’s networking functions, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the create_space_info() function in the fs/btrfs/space-info.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the createspaceinfo function in the fs/btrfs/space-info.c module of the Linux kernel is related to a bug involving the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the dsp_mmap_single() function in the operating system kernel of FreeBSD allows a hacker to cause a service failure.
The vulnerability of the dspmmapsingle function in the operating system kernels of FreeBSD is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the compat32 subsystem in FreeBSD’s kernel allows a hacker to disclose protected information.
The vulnerability of the compat32 compatibility layer in the Linuxulator kernel of FreeBSD operating systems is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these layers...
Vulnerability of the DOM component: Security features in Firefox web browser and Thunderbird email client, which allow attackers to access confidential data and compromise its integrity
Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...
The vulnerability of the postMessage component in the Firefox web browser and Thunderbird email client, which allows a hacker to trigger a service failure.
The vulnerability of the postMessage component in the Firefox web browser and the Thunderbird email client is related to the。 Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Popup Blocker component in the Firefox web browser and Thunderbird email client allows a hacker to compromise data integrity.
The vulnerability of the Popup Blocker component in the Firefox web browser and Thunderbird email client is related to the false representation of critical information to the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...
The vulnerability of the sys_timer_delete() function in the kernel/time/posix-cpu-timers.c file of Linux operating systems allows a hacker to increase their privileges and expose sensitive information.
The vulnerability of the systimerdelete function in the kernel/time/posix-cpu-timers.c file of Linux operating systems is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability can allow an attacker to enhance their privileges and disclose...
The vulnerabilities in the files pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go of the Kubernetes Gateway API provider, which is used by Containous Traefik, allow attackers to compromise the confidentiality and integrity of the protected information.
The vulnerabilities in the files pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go of the Kubernetes Gateway API reverse proxy server Containous Traefik are related to the use of resources with similar identifiers. Exploiting these vulnerabilities allows a...
The vulnerability of the CheckPassword() function in the pkg file of the intermediate software suite Traefik BasicAuth, which is part of the Containous Traefik reverse proxy server, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the CheckPassword function in the pkg file, located in the middlewares/auth/basicauth.go section of the Traefik BasicAuth intermediate software, is related to vulnerabilities in the authentication process. Exploiting this vulnerability could allow an attacker, operating...
The vulnerability of the index_local_file_headers() function in the libclamav/unzip.c file of the ClamAV antivirus program allows a hacker to cause a service failure.
The vulnerability of the indexlocalfileheaders function in the libclamav/unzip.c file of the ClamAV antivirus program is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...