95883 matches found
The vulnerability of Microsoft Fabric’s data management platform, related to the absence of authentication, allows attackers to escalate their privileges.
The vulnerability of the Microsoft Fabric data management platform is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of Microsoft Discovery Studio’s research environment arises from the improper elimination of special elements in data queries, allowing an intruder to disclose protected information.
The vulnerability of the Microsoft Discovery Studio research environment is related to the improper elimination of special elements in data queries. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
The vulnerability of the DirectMusic component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the DirectMusic component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Windows PDF document processing component on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Windows PDF document processing component on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The software’s vulnerability for providing secure remote access to data through the Palo Alto Networks GlobalProtect App allows a perpetrator to execute arbitrary commands.
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...
The vulnerability of the EndPoint DLP module of the remote access user protection agent for corporate resources and applications provided by Palo Alto Networks’ Prisma Access Agent allows attackers to bypass existing security mechanisms and expose protected information.
The vulnerability of the EndPoint DLP module of the remote user access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows attackers to bypass existing security measure...
The vulnerability of the Internal Operations component of the application’s technical maintenance, repair, and major system overhauls in Oracle Complex Maintenance, Repair, and Overhaul allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Internal Operations component of the Oracle Complex Maintenance application regarding technical maintenance, repairs, and major system overhauls is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to...
The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms lies in insufficient validation of incoming requests. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce stems from defects in the deserialization mechanism, allowing attackers to execute arbitrary code.
The vulnerability of the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce lies in the shortcomings of its deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Windows Message Queuing system allows a perpetrator to execute arbitrary code.
The vulnerability of Windows’ Message Queuing system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the multimedia framework Media Foundation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the multimedia framework Media Foundation in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Checkov code analysis tool provided by Prisma Cloud lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.
The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows attackers to execute arbitrary commands...
The vulnerability of Wireshark, a protocol analyzer for analyzing computer network traffic, allows a hacker to cause a service failure.
The vulnerability of the SSH protocol analyzer and traffic sniffer software Wireshark is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of the web interface of the operating system PAN-OS, allowing a perpetrator to execute arbitrary code
The vulnerability of the PAN-OS operating system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the decoder handlers in the BGP OPEN messages parser of the GoBGP edge gateway module pkg/packet/bbg protocol allows a attacker to cause a service failure.
The vulnerability of the decoder handlers for BGP OPEN messages in the GoBGP border gateway module’s pkg/packet/bbg protocol relates to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the gf_cenc_set_pssh() function in the isomedia/drm_sample.c file of the GPAC multimedia platform allows a perpetrator to cause a service failure.
The vulnerability of the gfcencsetpssh function in the isomedia/drmsample.c file of the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the audio stream parser of the GPAC multimedia platform, which allows a hacker to cause a service failure.
The vulnerability of the Opus audio stream parser on the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the get_text_props() function in the src/textprop.c file of the Vim text editor allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the gettextprops function in the src/textprop.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...
The vulnerability of the Python omni-completion module’s autoload mechanism, runtime/autoload/python3complete.vim, allows a hacker to execute arbitrary code.
The vulnerability of the Python omni-completion module’s autoload mechanism, located in the runtime/autoload/python3complete.vim file, is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the netrw text editor plugin in Vim allows a hacker to execute arbitrary code.
The vulnerability of the netrw text editor plugin in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the RPC Runtime Library for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the RPC Runtime Library in Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the gf_hevc_read_sps_bs_internal() function in the media_tools/av_parsers.c file of the GPAC multimedia platform allows a hacker to induce a service failure.
The vulnerability of the gfhevcreadspsbsinternal function in the mediatools/avparsers.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the ctts_box_write() function in the isomedia/box_code_base.c file of the GPAC multimedia platform allows a violator to trigger a service failure.
The vulnerability of the cttsboxwrite function in the isomedia/boxcodebase.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of MIH, MPEG DSM-CC, eDonkey, and MEGACO traffic analyzer Wireshark allow attackers to induce service failures.
The vulnerability of MIH, MPEG DSM-CC, eDonkey, and MEGACO protocol decoders, as well as the Wireshark traffic analyzer, is related to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the GoBGP edge gateway protocol allows a attacker to cause a service failure.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the GoBGP edge gateway protocol is related to a single-bit offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the BGP OPEN Message Handler component of the GoBGP protocol allows a attacker to increase their privileges.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the BGP OPEN Message Handler component is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the DirectShow component in Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the DirectShow component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the HTTP Print Provider component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the HTTP Print Provider component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the EncryptInterceptor component of the Apache Tomcat application server allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the EncryptInterceptor component in the Apache Tomcat application server is related to insufficient technical documentation. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of the gf_isom_copy_sample_info() function in the isomedia/isom_write.c file of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfisomcopysampleinfo function in the isomedia/isomwrite.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the smooth_parse_stream_index() function in the src/media_tools/mpd.c file of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the smoothparsestreamindex function in the src/mediatools/mpd.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the decodeSliceUnit_WPP() function in the libde265/decctx.cc file of the h.265 video codec implementation by Libde265, which allows a attacker to cause a service failure.
The vulnerability of the decodeSliceUnitWPP function in the libde265/decctx.cc file of the h.265 codec implementation, developed by Libde265, is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause...
The vulnerabilities of the functions um_goto_line() and get_text_props() in the src/textprop.c file of the Vim text editor allow a hacker to induce a service failure.
The vulnerability of the umgotoline and gettextprops functions in the src/textprop.c file of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
Vulnerability of the vms_fixfilename() function in the Vim text editor’s vim/src/os_vms.c file, allowing an attacker to execute arbitrary code.
The vulnerability of the vmsfixfilename function in the Vim/src/osvms.c file of the Vim text editor is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the autodoppleing mechanism in the C omni-completion module of the runtime/autoload/ccomplete.vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the NetrwLocalRmFile() function in the runtime/pack/dist/opt/netrw/autoload/netrw.vim text editor allows a hacker to execute arbitrary commands.
The vulnerability of the NetrwLocalRmFile function in the runtime/pack/dist/opt/netrw/autoload/netrw.vim file of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the UpdatePathAttrs4ByteAs() function in the GoBGP edge gateway protocol’s internal/pkg/table/message.go file allows a attacker to cause a service failure.
The vulnerability of the UpdatePathAttrs4ByteAs function in the GoBGP edge gateway protocol’s internal/pkg/table/message.go file is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the gf_opus_parse_packet_header() function in the media_tools/av_parsers.c file of the multimedia platform GPAC allows a hacker to cause a service failure.
The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file of the multimedia platform GPAC is related to incorrect numerical calculations when processing values with a comma-separated format. Exploiting this vulnerability could allow an attacker to cause service...
The vulnerability of the gf_node_get_tag() function in the scenegraph/base_scenegraph.c file of the GPAC multimedia platform allows a attacker to cause a service failure.
The vulnerability of the gfnodegettag function in the scenegraph/basescenegraph.c file of the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gf_odf_vvc_cfg_write_bs() function in the odf/descriptors.c file of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfodfvvccfgwritebs function in the odf/descriptors.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the TrackWriter component of the GPAC multimedia platform, which allows a intruder to trigger a service failure
The vulnerability of the TrackWriter component of the GPAC multimedia platform relates to the assignment of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the filein_process() function in the in_file.c file of the GPAC multimedia platform allows a attacker to cause a service failure.
The vulnerability of the fileinprocess function in the infile.c file of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability in the built-in ZIP-plugin of the runtime/autoload/zip.vim text editor in Vim allows a hacker to execute arbitrary commands.
The vulnerability in the built-in ZIP-plugin of the Vim text editor’s runtime/autoload/zip.vim module is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
The vulnerability of the VimCrypt file decoding mechanism in Vim’s text editor, located in the src/crypt.c file, allows a hacker to cause a service failure.
The vulnerability of the VimCrypt file decoding mechanism in the src/crypt.c file of the Vim text editor lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the spell_soundfold_sal() function in the Vim text editor’s src/spell.c file allows a hacker to trigger a denial-of-service attack.
The vulnerability of the spellsoundfoldsal function in the src/spell.c file of the Vim text editor is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a attacker to cause a system failure...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol is related to the operation of pushing data out of the buffer into memory. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the ReadMultiple() function in the Storage REST API component of MinIO allows a attacker to gain unauthorized access to protected information.
The vulnerability of the ReadMultiple function in the Storage REST API of the MinIO object storage server is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the tree_count_words() function in the src/spellfile.c file of the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the treecountwords function in the src/spellfile.c file of the Vim text editor is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the autocompletion mechanism in Python’s omni-completion modules runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim of the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the Python omni-completion mechanisms for runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim in the Vim text editor involves the integration of features from an unreliable control domain. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim allows a hacker to execute arbitrary code.
The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...