The vulnerability of the Nginx UI server’s user interface allows a perpetrator to execute arbitrary code.

The vulnerability of the Nginx UI server’s user interface is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Next.js web application development software platform, related to bypassing the authentication process by using an alternative path or channel, allows attackers to circumvent existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the Next.js web application development software platform lies in the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms and gain unauthorized...

The vulnerability of the centralized network management system of Cisco Catalyst SD-WAN Manager and the software for traffic management of Cisco Catalyst SD-WAN Controller, due to authentication mechanism flaws, allows attackers to gain unauthorized access to the system.

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager and the software for traffic management called Cisco Catalyst SD-WAN Controller is related to authentication mechanism flaws. Exploiting this vulnerability could allow an attacker to gain unauthorized...

The vulnerability of the Copilot Chat component of the Microsoft Edge browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Copilot Chat component of the Microsoft Edge browser is related to the lack of data cleaning at the management level. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise, related to the use of files and directories accessible from external parties, allows attackers to disclose sensitive information.

The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is...

The vulnerability of the Hyper-V component in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Hyper-V component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the N8n automation platform lies in its inability to control the uncontrollable changes in the attributes of the prototype object. This allows attackers to execute arbitrary code.

The vulnerability of the N8n automation platform lies in the uncontrolled changes to the attributes of the prototype object. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Microsoft Bing’s search system, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Bing’s search system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows a hacker to execute arbitrary code by allowing the operation to escape out of the buffer in memory.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to integer overflow. This allows attackers to trigger a service failure.

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the software tools for working with secure metadata, namely the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to integer overflow. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to uncontrolled resource consumption. This vulnerability allows attackers to trigger service failures.

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability in the glue_generator.cpp script of the OpenPLC programmable logic controller software allows a hacker to read and write arbitrary files.

The vulnerability in the gluegenerator.cpp script of the OpenPLC programmable logic controller software relates to an incorrect restriction on the path name when processing parameters varName and varType. Exploiting this vulnerability allows a remote attacker to read and write arbitrary files...

The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise, related to data type mixing errors, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the BitLocker component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the BitLocker component in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant involves redirecting URLs to unreliable websites, allowing attackers to escalate their privileges.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Graphics component of Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Graphics component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of GitHub Copilot, a code editor from Microsoft Visual Studio Code, allows a hacker to bypass existing security restrictions.

The vulnerability of GitHub Copilot, a code editor from Microsoft Visual Studio Code, relates to the lack of measures taken to eliminate special elements in the output data. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the Kernel-Mode Driver driver in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Kernel-Mode Driver driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.

The vulnerability of the Secure Boot implementation for Windows operating systems lies in the dependency on a component that cannot be updated. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of the Microsoft Confluence SAML SSO plugin, as well as the Microsoft JIRA SAML SSO plugin, stems from incorrect implementation of authentication algorithms. This allows attackers to escalate their privileges.

The vulnerability of the Microsoft Confluence SAML SSO plugin and the Microsoft JIRA SAML SSO plugin is related to incorrect implementation of authentication algorithms. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Vulnerability of the .NET Core software platform, related to incorrect path name restrictions, allowing attackers to write arbitrary files

The vulnerability of the .NET Core software platform is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a remote attacker to write arbitrary files...

The vulnerability of Siemens Solid Edge, a design and modeling tool, allows a hacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Data Deduplication function in Windows Server servers allows attackers to escalate their privileges.

The vulnerability of the Data Deduplication function in Windows Server servers relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Adobe Connect Desktop Application’s instant messaging function, related to deficiencies in the authentication process, allows attackers to escalate their privileges.

The vulnerability of the Adobe Connect Desktop Application’s instant messaging feature is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the professional video editing software Adobe Premiere Pro lies in its ability to utilize memory after it is released, allowing a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a hacker to execute arbitrary code, provided that the user opens a specially crafted file...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to insufficient testing of server-side requests, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by sending a specially created malicious file...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of Microsoft Teams’ corporate platform for Android operating systems lies in the use of files and directories accessible from external sources, which allows attackers to carry out spear-phishing attacks.

The vulnerability of Microsoft Teams’ corporate platform for Android operating systems stems from the use of files and directories accessible to external parties. Exploiting this vulnerability could allow attackers to carry out spear-phishing attacks...

The vulnerability of Microsoft Data Formulator’s AI-based data visualization tool, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Data Formulator, a tool for visualizing data based on artificial intelligence, is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Mastodon web application for deploying distributed social networks, related to the improper implementation of the sequence of actions to be performed, allows a perpetrator to bypass existing security mechanisms or gain unauthorized access to protected information.

The vulnerability of the Mastodon web application for deploying distributed social networks is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms or gain unauthorized acce...

The vulnerability of Microsoft Word text editors on Android operating systems, related to access control errors, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Word text editors on Android operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of measures taken to neutralize special elements in the output data, allowing attackers to perform spoofing attacks.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to perform spearishing attacks...

The vulnerability of the Microsoft SQL Server database management system, related to improper external control of file names or file paths, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft SQL Server database management system is related to improper external manipulation of file names or file paths. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Vulnerability of Cryptographic Services in Windows operating systems, allowing attackers to enhance their privileges

The vulnerability of Cryptographic Services in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording beyond buffer limits, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the ability to record beyond the buffer limits. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...

The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer boundaries in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in their lack of access control mechanisms, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

The vulnerability of the SAP Commerce Cloud platform, related to the transmission of critical information in open text, allows a perpetrator to execute arbitrary codes.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Azure IoT Central data management platform, related to information disclosure, allows attackers to enhance their privileges.

The vulnerability of the Azure IoT Central data management platform is related to the exposure of information. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerability of the FortiAuthenticator identification system, related to deficiencies in access control, allows a perpetrator to execute arbitrary codes.

The vulnerability of the FortiAuthenticator identification system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands...

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to uncontrolled resource consumption. This vulnerability allows attackers to trigger service failures.

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of the ngx_http_rewrite_module module in NGINX Plus and NGINX Open Source web servers allows a perpetrator to execute arbitrary code.

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Microprogrammed Software in Ecostruxure Machine Expert HVAC controllers, related to the storage of confidential information in an open manner, allows a intruder to disclose the protected information.

The vulnerability of the microprogramming software used in Ecostruxure Machine Expert HVAC programmable logic controllers is related to the storage of confidential information in an open manner. Exploiting this vulnerability could allow a intruder to disclose the protected information...

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the software tools for working with secure metadata, such as the Content Authenticity JS SDK and the Content Authenticity Rust SDK, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) arises from insufficient validation of requests on the server side. This allows attackers to perform spear-phishing attacks.

The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...