74701 matches found
The vulnerability of the VS6EditData!Conv_Macro_Data() function of the HMI configuration software for Monitouch V-SFT allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failure.
The vulnerability of the VS6EditData!ConvMacroData function of the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execu...
The VS6EditData!VS4_SaveEnvFile() function of the programming tool for configuring HMI interfaces of Monitouch V-SFT is vulnerable. This vulnerability allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.
The vulnerability of the VS6EditData!VS4SaveEnvFile function of the HMI configuration software for Monitouch V-SFT lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...
The vulnerability of the VS6MemInIF!set_temp_typedefault() function in the HMI configuration software for Monitouch V-SFT allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failure.
The vulnerability of the VS6MemInIF!settemptypedefault function in the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information,...
The vulnerability of the TYPO3 content management system’s session handler allows attackers to circumvent existing security restrictions.
The vulnerability of the TYPO3 content management system’s session handler involves exploiting an alternative authentication process or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
The vulnerability of the amdgpu_dm_initialize_drm_device() function in the DRI driver allows a hacker to cause a system failure. This vulnerability relates to AMD GPU-based Linux operating system hardware.
The vulnerability of the amdgpudminitializedrmdevice function in the DRI driver for AMD graphics cards in Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the overflow_allocation_test() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the overflowallocationtest function in the Linux operating system is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gfx_v11_0_hw_init() function in the DRI support driver for AMD GPU cores in Linux operating systems allows a hacker to cause a system failure.
The vulnerability of the gfxv110hwinit function in the DRI support driver for AMD GPU cores in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ath12k_station_assoc() function in the Atheros/Qualcomm wireless communication adapter support driver for Linux operating systems allows a hacker to induce a service failure.
The vulnerability of the ath12kstationassoc function in the Atheros/Qualcomm wireless adapter support driver for Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of theOTP library set in the Erlang programming language lies in the lack of control over the data entered by users. This allows attackers to trigger a service failure.
The vulnerability of theOTP library in the Erlang programming language is related to the lack of control over the data entered by users. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the `evaluate` function in the BusyBox command-line utility set allows a hacker to cause a service failure.
The vulnerability of the evaluate function in the BusyBox command-line utilities is related to an incorrect use after its initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the drm_syncobjPut() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drmsyncobjPut function in the Linux operating system is related to a potential memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the module drivers/gpu/drm/v3d/v3d_submit.c of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/gpu/drm/v3d/v3dsubmit.c kernel module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the command-line utility BusyBox, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of the BusyBox command-line utility set is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Redis database management system server, which allows a hacker to cause a service failure
The vulnerability of the Redis database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability in the command-line utility BusyBox, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of the BusyBox command-line utility set is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Grafana monitoring and observation platform, related to access control errors, allows a violator to disrupt the operation of the program.
The vulnerability of the Grafana monitoring and observation platform is related to access control errors. Exploiting this vulnerability could allow a malicious actor to disrupt the program’s operation by deleting the server administrator’s account...
Vulnerability eliminated
...
The vulnerability of theOTP library set in the Erlang programming language lies in the lack of control over the data entered by users. This allows attackers to trigger a service failure.
The vulnerability of theOTP library in the Erlang programming language is related to the lack of control over the data entered by users. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the web_snmp_notifyv3_add_post() function in PLANET Technology’s microcontroller software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the websnmpnotifyv3addpost function in PLANET Technology’s microcontroller software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the hostip parameter. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the web_snmp_v3host_add_post() function in PLANET Technology’s microcontroller software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the websnmpv3hostaddpost function in PLANET Technology’s microcontroller software stems from the issue of the operation exceeding the buffer boundaries in memory when processing the hostip parameter. Exploiting this vulnerability allows an attacker to compromise the...
The vulnerability of the web_acl_mgmt_Rules_Apply_post() function in PLANET Technology’s microcontroller software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the webaclmgmtRulesApplypost function of the PLANET Technology microprogramming device is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter ruleNamekey. Exploiting this vulnerability could allow an attacker to...
The vulnerabilities of Software Guard eXtensions (SGX) and Trust Domain Extensions (TDX) in microsoftware for Intel Xeon 6 processor with E-cores allow attackers to enhance their privileges.
The vulnerability of Software Guard eXtensions SGX and Trust Domain Extensions TDX in microsoftware for Intel Xeon 6 processor with E-cores is related to improper restrictions on software interfaces by hardware functions. Exploiting this vulnerability can allow attackers to enhance their privileg...
The vulnerability of the web_snmpv3_remote_engineId_add_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the websnmpv3remoteengineIdaddpost function in PLANET Technology’s microprogrammed device software is related to the issue of operations going beyond the buffer boundaries in memory when processing the remoteip parameter. Exploiting this vulnerability could allow a malicious...
The vulnerability of the web_acl_mgmt_Rules_Edit_postcontains() function in PLANET Technology’s microcontroller software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the webaclmgmtRulesEditpostcontains function of the PLANET Technology microprogramming device is related to the issue of the operation exceeding the buffer boundaries in memory when processing the byruleEditName parameter. Exploitation of this vulnerability could allow an...
The vulnerability of the web_tacplus_serverEdit_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the webtacplusserverEditpost function in the microprogramming software for PLANET Technology relates to the issue of the operation exceeding the buffer boundaries in memory when processing the tacIp parameter. Exploiting this vulnerability could allow an attacker to compromis...
The vulnerability of Microprogrammed Software for Intel Arc A-series Graphics and Intel Arc Pro A-series Graphics lies in insufficient testing of exception states, allowing attackers to trigger service failures.
The vulnerability of microprogrammed software for Intel Arc A-series graphics processors and Intel Arc Pro A-series graphics processors is related to insufficient testing of exception states. Exploiting this vulnerability can allow attackers to cause system failures...
The vulnerability of the web_radiusSrv_post() function in PLANET Technology’s microcontroller software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webradiusSrvpost function in PLANET Technology’s microcontroller software stems from the operation of the function beyond the buffer boundaries in memory when processing the radIpkey parameter. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the web_stp_globalSetting_post() function in the microprogramming software of PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webstpglobalSettingpost function in PLANET Technology’s microcontroller software lies in the issue of the operation exceeding the buffer boundaries in memory when processing the stpconfname parameter. Exploiting this vulnerability allows an attacker to compromise the...
The vulnerability of the web_sys_infoContact_post() function in PLANET Technology’s microcontroller software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the websysinfoContactpost function in PLANET Technology’s microcontroller software stems from the operation of the function beyond the buffer boundaries in memory when processing the contact parameter. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to the manipulation of NULL pointers, allows attackers to cause service interruptions.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the handling of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Adobe Illustrator graphic editor lies in the overflow of buffer in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to overflow of the buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Adobe Bridge file manager, related to a countable loss of significance, allows an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows operating system’s remote desktop service allows a hacker to execute arbitrary code.
The vulnerability of the Windows remote desktop service is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the testing tool for Microsoft Windows Hardware Lab Kit (HLK) operating systems allows a hacker to exploit their privileges.
The vulnerability of the Microsoft Windows Hardware Lab Kit HLK testing tool is related to the use of rigidly encoded credentials. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the lack of authentication mechanisms. This allows attackers to compromise the integrity of the protected information.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the absence of authentication. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...
The vulnerability of the setUPnPCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router’s microprogramming system allows a attacker to cause a service failure.
The vulnerability of the setUPnPCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted POST...
The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.
The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted PO...
The vulnerability of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.
The vulnerability of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted...
The vulnerability of the RebootSystem function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A720R router’s microprogramming software allows a hacker to circumvent existing security restrictions.
The vulnerability of the RebootSystem function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A720R router software is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
The vulnerability of the CloudACMunualUpdate() function in the microprogrammed software routers of TOTOLINK T10, TOTOLINK A3100R, TOTOLINK A950RG, TOTOLINK A800R, TOTOLINK N600R, TOTOLINK A3000RU, and TOTOLINK A810R allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the CloudACMunualUpdate function in the microprogrammed routing software devices TOTOLink T10, TOTOLINK A3100R, TOTOLINK A950RG, TOTOLINK A800R, TOTOLINK N600R, TOTOLINK A3000RU, and TOTOLINK A810R lies in the copying of buffers without checking the size of the input data...
The vulnerability of the HTTP POST Request Handler component, sub_40BE30, in the microprogramming software of the A702R, A3002R, and A3002RU routers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the HTTP POST Request Handler component, sub40BE30 in the microprogramming software of the A702R, A3002R, and A3002RU routers, involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSysCmd file in the microprogramming system for routers A702R, A3002R, and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSysCmd file in the microprogramming system for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker...
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSiteSurveyProfile file in the microprogramming software for router devices A702R, A3002R, and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSiteSurveyProfile file in the microprogramming software for routers A702R, A3002R, and A3002RU lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formNtp file in the microprogramming software for routers A702R, A3002R, and A3002RU allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formNtp file in the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the HTTP POST Request Handler component in the microprogramming software of TOTOLINK A3002R and A3002RU devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the submit-url function in the file /boafrm/formReflashClientTbl of the HTTP POST Request Handler component of the microprogramming software for TOTOLINK routers A702R, A3002R, and A3002RU allows a perpetrator to execute arbitrary code.
The vulnerability of the submit-url function in the /boafrm/formReflashClientTbl file of the HTTP POST Request Handler component of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data...
The vulnerability of the /boafrm/formDMZ file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers allows a perpetrator to execute arbitrary code.
The vulnerability of the /boafrm/formDMZ file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...
The vulnerability of the setWebWlanIdx function in the microprogramming software for TOTOLINK CP450 allows a hacker to execute arbitrary commands.
The vulnerability of the setWebWlanIdx function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the webWlanIdx parameter...
The vulnerability of the wake_on_lan function in D-Link DIR-600L router software allows a hacker to execute arbitrary commands.
The vulnerability of the wakeonlan function in D-Link DIR-600L router software lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the host parameter...