95883 matches found
The vulnerability of the load balancer Progress Kemp LoadMaster, related to the failure to perform data cleaning at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of the load balancing device Progress Kemp LoadMaster lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the imageUploadHandle() function in the WPBookit plugin, a content management system for WordPress websites, allows a hacker to execute arbitrary code.
The vulnerability of the imageUploadHandle function in the WPBookit plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerabilities of the Ingress components and Custom Resource Definitions (CRDs) of the NGINX Ingress Controller platform allow a malicious actor to insert arbitrary configuration directives into NGINX, gain unauthorized access to file creation and deletion operations, or trigger service failures.
The vulnerability of the Ingress components and Custom Resource Definitions CRDs of the NGINX Ingress Controller monitoring and management platform is related to the lack of measures taken to neutralize special elements during the processing of string values. Exploiting this vulnerability allows ...
The vulnerability of the smb_grant_oplock() function in the fs/smb/server/oplock.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the smbgrantoplock function in the fs/smb/server/oplock.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the smb2_calc_max_out_buf_len() function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smb2calcmaxoutbuflen function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to incorrect calculation of buffer size during packet processing. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the ceph_handle_auth_reply() function in the net/ceph/auth.c module of the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and accessibility of...
The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtualization infrastructure management tool, allows an attacker to gain unauthorized access to protected information.
The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtual infrastructure management tool, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the BOOTP File Handler component in the FreeBSD operating system allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the BOOTP File Handler component in the FreeBSD operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
The vulnerability of the NTFS file system of the Windows operating system, which allows a hacker to execute arbitrary code
The vulnerability of the NTFS file system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the tls_swCancelWorkTx() function in the net/tls/tlsSw.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tlsswCancelWorkTx function in the net/tls/tlssw.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer in memory, allowing an attacker to access confidential data.
The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability in the Firefox web browser, related to writing beyond the buffer limit, allows a hacker to trigger a service failure.
The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client allows attackers to access confidential data.
The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird, which allow attackers to access and compromise confidential data.
Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird are vulnerable due to a lack of source verification mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...
The vulnerability of the nameAndService() function in the pkg/provider/kubernetes/crd/kubernetes_http.go file, a provider for integrating with the Kubernetes CRD of the reverse proxy server Containous Traefik, allows an attacker to gain unauthorized access to protected information.
The vulnerability of the nameAndService function in the pkg/provider/kubernetes/crd/kuberneteshttp.go file, which is part of the integration provider for Kubernetes’ CRD reverse proxy server Containous Traefik, is related to insufficient spatial partitioning. Exploiting this vulnerability could...
The vulnerability in the implementation of the STP (Spanning Tree Protocol) protocol for the net/bridge subsystem of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the STP protocol implementation in the Linux kernel’s net/bridge subsystem lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the sneeit_articles_pagination_callback() function in the Sneeit Framework, a content management system for WordPress, allows a hacker to execute arbitrary code.
The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Termix server management software, related to access control errors, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Termix server management software is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Camera Driver software’s microprogramming in Qualcomm embedded chips allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted JPEG commands...
The vulnerabilities of the functions set_posix_acl_entries_dacl() and set_ntacl_dacl() in the fs/smb/server/smbacl.c module support SMB server functionality in Linux operating systems. These vulnerabilities allow attackers to cause service failures.
The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
The vulnerability of the smb2_compound_op() function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the smb2compoundop function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, relates to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the structnf_queue_entry() function in the include/net/netfilter/nf_queue.h module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the structnfqueueentry function in the include/net/netfilter/nfqueue.h module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...
The vulnerability of the dhclient component in FreeBSD operating systems allows a attacker to execute arbitrary code with root privileges.
The vulnerability of the dhclient component in FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
The vulnerability of the Linuxulator component in the kernel of FreeBSD operating systems allows a hacker to increase their privileges.
The vulnerability of the Linuxulator component in the kernel of FreeBSD operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Vulnerability of the msync(MS_INVALIDATE) function in FreeBSD operating systems, allowing attackers to enhance their privileges
The vulnerability of the msyncMSINVALIDATE function in FreeBSD operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer in memory, allowing an attacker to access confidential data.
The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
Vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client, allowing attackers to access confidential data
Vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves reading data from buffer areas beyond the allowed limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the TrueConf Server software, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client allows a hacker to compromise data integrity.
The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client involves bypassing authentication processes through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, allows attackers to disclose sensitive information that should be protected.
The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, is related to HTTP request processing flaws. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
The vulnerability of the secrets-store-csi-driver driver of the Kubernetes cluster management software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the secrets-store-csi-driver driver in the Kubernetes cluster management software is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Vulnerability of the prepare_form() function in the acfe_module_form_front.render plugin: This vulnerability allows a hacker to execute arbitrary code.
Vulnerability of the prepareform function in the acfemoduleformfront.render method of the Advanced Custom Fields plugin: This vulnerability is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the openssl_private_decrypt() function in the WPvivid Backup & Migration plugin of the WordPress content management system allows for the execution of arbitrary code and gives full control over the website.
The vulnerability of the opensslprivatedecrypt function in the WPvivid Backup & Migration plugin of the WordPress content management system is related to the ability to download unlimited files of a dangerous type. Exploiting this vulnerability allows an attacker, operating remotely, to execute...
The vulnerability of the Camera Driver software’s microprogramming system in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to the writing beyond the buffer boundaries when processing parameters such as the input batch size and the number of buffer planes. Exploiting this vulnerability can allow an attacker to cause a...
The vulnerability of the ioctl request handler CONS_HISTORY in FreeBSD’s operating systems allows a attacker to increase their privileges and execute arbitrary code.
The vulnerability of the ioctl request handler CONSHISTORY in FreeBSD operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
The vulnerability of Firefox browser and Thunderbird email client relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Firefox browser and Thunderbird email client lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerabilities of Firefox browsers, Firefox ESR, and Thunderbird email clients, Thunderbird ESR, are related to the execution of operations outside of the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability in browsers Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the .NET software platform, related to the unlimited distribution of resources, allows a hacker to cause a service failure.
The vulnerability of the .NET software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Vulnerability of the network driver for Windows Server operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the Windows Server operating system’s network driver is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the File History backup application for the Windows operating system allows a perpetrator to increase their privileges.
The vulnerability of the File History backup application for the Windows operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the PT MaxPatrol 10 security control system, which allows a violator to increase their privileges
The vulnerability of the PT MaxPatrol 10 security control system is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity and confidentiality of the protected data...
The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer boundaries in memory, allowing attackers to trigger a service failure.
The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Vulnerability of the Audio/Video component: Playback in Firefox web browser and Thunderbird email client, allowing attackers to trigger a service failure
The vulnerability of the Audio/Video component: Playback in Firefox web browser and Thunderbird email client involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Vulnerability of the DOM component: The Core and HTML components of the Firefox web browser and Thunderbird email client, allowing attackers to trigger a service failure.
Vulnerability of the DOM component: The Core and HTML components of the Firefox web browser and Thunderbird email client are vulnerable due to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to cause service interruption...
The vulnerability in the `net/packet/af_packet.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the WebAssembly component in the Firefox web browser and the Thunderbird email client, which allows a hacker to trigger a service failure
The vulnerability of the WebAssembly component in the Firefox web browser and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the scanfd() function in the clamd/scanner.c file of the ClamAV antivirus program allows a hacker to gain unauthorized access to protected information.
The vulnerability of the scanfd function in the clamd/scanner.c file of the ClamAV antivirus program is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the HttpObjectDecoder decoder, a framework for developing network applications, servers, and clients using the Netty protocol, allows a attacker to cause a service failure.
The vulnerability of the HttpObjectDecoder decoder, a framework for developing network applications, servers, and clients using the Netty protocol, is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the `install_and_activate_plugin_from_external()` function of the GutenKit plugin – Page Builder Blocks, Patterns, and Templates for the Gutenberg Block Editor, a content management system for WordPress – allows attackers to upload arbitrary files.
The vulnerability of the installandactivatepluginfromexternal function of the GutenKit plugin – which is used for Page Builder Blocks, Patterns, and Templates in the Gutenberg Block Editor of the WordPress content management system – is related to the lack of authentication. Exploiting this...