90509 matches found
The vulnerability of the Boot Manager download process for Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the Boot Manager download process in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a hacker to bypass existing security restrictions...
The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems arises from insufficient input validation. This allows attackers to make changes to the system via the network.
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
The vulnerability of Microsoft HPC Pack, a high-performance computing tool, related to deserialization mechanism flaws, allows attackers to escalate their privileges.
The vulnerability of Microsoft HPC Pack, a toolset for high-performance computing, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Microsoft Visual Studio software development tool and the .NET software platform lies in the fact that operations beyond the buffer boundaries in memory can lead to service interruptions for attackers.
The vulnerability of the Microsoft Visual Studio software development tool and the .NET software platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability in the implementation of the Secure Boot protocol for Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the Secure Boot secure bootloading protocol for the Windows operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...
The vulnerability of the Cloud Files Mini Filter driver for the Windows operating system allows a hacker to increase their privileges.
The vulnerability of the Cloud Files Mini Filter driver for the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a perpetrator to trigger a service failure.
The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Adobe Framemaker desktop publishing system, related to integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of the desktop publishing system Adobe Framemaker is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Framemaker desktop publishing system, related to the use of an uninitialized pointer, allows a hacker to disclose protected information.
The vulnerability of the Adobe Framemaker desktop publishing system lies in the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability of the software for controlling uninterruptible power supplies (UPS) of the PowerChute Serial Shutdown system lies in the lack of measures to handle CRLF sequences, allowing a intruder to trigger a service failure.
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending specially crafted POST...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to expose confidential information.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose confidential information using a specially created file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Windows operating system’s kernel, related to insufficient protection of registration data, allows attackers to disclose protected information.
The vulnerability of the Windows operating system’s kernel is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the SICF-processor SRM catalog for SAP Supplier Relationship Management allows a perpetrator to perform cross-site scripting attacks.
The vulnerability of the SICF-processor in the SRM-catalog application for SAP Supplier Relationship Management automation involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Function Discovery service in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Function Discovery service in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Package Catalog component in the Windows operating system, which allows a perpetrator to disclose protected information
The vulnerability of the Package Catalog component in the Windows operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the UPnP Device Host operating system in Windows allows a hacker to increase their privileges.
The vulnerability of the UPnP Device Host operating system in Windows is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the JRPC application interface of the FortiSandbox threat detection and mitigation system allows a perpetrator to execute arbitrary code.
The vulnerability of the JRPC application interface of the FortiSandbox threat detection and mitigation system is related to the failure to eliminate special elements “|” when processing the jid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending...
The vulnerability of Adobe Illustrator, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
The vulnerability of the Shell command shell of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Shell command shell in the Windows operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Brokering File System (BFS) of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Brokering File System BFS in the Windows operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Connected User Experiences and Telemetry operating system service allows a perpetrator to trigger a service failure.
The vulnerability of the Connected User Experiences and Telemetry services in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Windows Kernel component of the Windows operating system allows attackers to disclose sensitive information that is protected by security measures.
The vulnerability of the Windows Kernel component of the Windows operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Shell command shell of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Shell command shell of the Windows operating system is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
The vulnerability of the server for automating work processes in n8n-MCP, related to insufficient validation of requests on the server side, allows attackers to influence the integrity and accessibility of protected information.
The vulnerability of the n8n-MCP server for automating processes is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...
The vulnerability of the Adobe Framemaker desktop publishing system, related to errors in data type mixing, allows a hacker to execute arbitrary code.
The vulnerability of the desktop publishing system Adobe Framemaker is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to errors in processing input data, allowing a intruder to compromise the integrity of the protected information.
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to errors in processing input data. Exploiting this vulnerability allows an attacker to influence the integrity of protected information by sending specially crafted POST requests...
The vulnerability of Adobe Connect and Adobe Connect Desktop Application’s messaging services lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of Adobe Connect and Adobe Connect Desktop Application messaging services is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, and Acrobat 2024 lies in the uncontrolled modification of object prototype attributes, allowing attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs Acrobat DC, Acrobat Reader DC, and Acrobat 2024 is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to cause system failures.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Adobe Framemaker desktop publishing system, related to the use of an unreliable search path, allows a hacker to execute arbitrary code.
The vulnerability of the desktop publishing system Adobe Framemaker is related to the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Windows Ancillary Function Driver for WinSock in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the Windows Ancillary Function Driver for WinSock in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
The vulnerabilities of SAP S/4HANA and SAP ERP software platforms, related to deficiencies in authentication procedures, allow attackers to influence the integrity and accessibility of protected information.
The vulnerabilities of SAP S/4HANA and SAP ERP software platforms are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers operating remotely to compromise the integrity and accessibility of protected information...
The vulnerability of the UPnP Device Host operating system in Windows allows a hacker to execute arbitrary code.
The vulnerability of the UPnP Device Host operating system in Windows relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the SAP NetWeaver AS ABAP software integration platform lies in the redirection of URLs to unreliable websites, allowing attackers to redirect users to arbitrary URL addresses.
The vulnerability of the SAP NetWeaver AS ABAP software integration platform is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any given URL address...
The vulnerability of SAP Business Analytics and SAP Content Management systems lies in their inadequate authentication procedures, which allow unauthorized users to gain access to protected information.
The vulnerability of SAP Business Analytics and SAP Content Management systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system allows a violator to delete any arbitrary directory.
The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete any directory by sending speciall...
The vulnerability of the Microsoft Power Apps development environment, related to the lack of measures to neutralize specific elements, allows a perpetrator to circumvent security restrictions.
The vulnerability of the Microsoft Power Apps development environment is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the OData Service in the SAP S/4HANA software platform allows a perpetrator to gain access to read, modify, and delete data.
The vulnerability of the OData Service in the SAP S/4HANA software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, and delete data...
The vulnerability of the SAP Business Planning and Consolidation solution for managing financial indicators, as well as the SAP Business Warehouse data management and analytics system, stems from the lack of measures taken to protect the SQL query structure. This allows attackers to gain access to read, modify, and delete data.
The vulnerability of the SAP Business Planning and Consolidation system for managing financial indicators, as well as the SAP Business Warehouse data management and analytics system, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can all...
The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, stems from insufficient validation of input data. This allows attackers to exploit this flaw to increase their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to increase their privileges...
The vulnerability of the Adobe Photoshop graphic editor lies in the ability to read data beyond the allowed range of memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Bridge file manager, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.
The vulnerability of the driver responsible for providing functionality for Storage Spaces in Windows operating systems involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...