92298 matches found
The vulnerability of Microsoft Edge’s browser on Android operating systems, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft Edge’s browser on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...
The vulnerability of the data collection tool for Azure Monitor Agents from virtual machines and physical servers arises from improper external management of file names or paths. This allows attackers to escalate their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, is related to incorrect external management of file names or paths. Exploiting this vulnerability can allow a malicious actor to increase their privileges...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Office 365 allows attackers to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Office 365 is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows Filtering Platform (WFP), a filtering platform for Windows operating systems, allows attackers to circumvent existing security restrictions.
The vulnerability of the Windows Filtering Platform WFP in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...
The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.
The vulnerability of the Windows Operating System’s Telephony Service relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the skb_try_coalesce() function in the Linux operating system allows a hacker to increase their privileges.
The vulnerability of the skbtrycoalesce function in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to incorrect external management of the file name or path. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages stems from deficiencies in the deserialization mechanism, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the .NET software platform, related to the execution of operations beyond buffer boundaries in memory, allows attackers to exploit their privileges.
The vulnerability of the .NET software platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Edge’s browser on Android operating systems, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft Edge’s browser on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...
The vulnerability of Microsoft Office packages, related to deficiencies in access control, allows attackers to carry out spear-phishing attacks.
The vulnerability of Microsoft Office packages is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...
The vulnerability of the .NET software platform, related to executing a loop with an unavailable exit condition, allows a hacker to cause a service failure.
The vulnerability of the .NET software platform lies in the execution of a loop with an exit condition that is not met. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the EMM solution WorksPad, related to access control errors, allows a hacker to execute arbitrary code and upload external files.
The vulnerability of the EMM solution WorksPad is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and upload external files...
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the ATMs system “BUK TS-G” arises from the lack of measures taken to neutralize special elements, allowing for the execution of arbitrary codes.
The vulnerability of the ATMs system “BUK TS-G” is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in Android operating systems, related to access control errors, allows attackers to perform spearishing attacks.
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in Android operating systems is related to access control errors. Exploiting this vulnerability could allow attackers to carry out spear-phishing attacks...
The vulnerability of the command-line interface (CLI) of Fortinet’s FortiAP and FortiAP-W2 access points allows a attacker to execute arbitrary commands.
The vulnerability of the command-line interface CLI of Fortinet’s FortiAP and FortiAP-W2 microprogramming solutions lies in the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary comman...
Microsoft Edge’s vulnerability, related to improper external management of file names or paths, allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Edge relates to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the command-line interface (CLI) of Fortinet’s FortiAP and FortiAP-W2 access points allows a attacker to execute arbitrary commands.
The vulnerability of the command-line interface CLI of Fortinet’s FortiAP and FortiAP-W2 microprogramming solutions lies in the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary comman...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of Windows SMB operating systems for clients allows attackers to increase their privileges.
The vulnerability of SMB operating system clients in Windows systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
The vulnerability of the Win32K component – ICOMP in Windows operating systems, which allows attackers to exploit their privileges.
The vulnerability of the Win32K component – ICOMP in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft Edge browser vulnerability, related to incorrect elimination of special elements in output data, allows attackers to enhance their privileges.
The vulnerability of Microsoft Edge relates to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of Microsoft Office packages, related to buffer overflows in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the Rich Text Edit Control text editor in Windows operating systems, which allows attackers to exploit their privileges.
The vulnerability of the Rich Text Edit Control text editor in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Rich Text Edit Control text editor in the Windows operating system, which allows attackers to exploit their privileges.
The vulnerability of the Rich Text Edit Control text editor in the Windows operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Netlogon service in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Netlogon service in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems affects synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Native WiFi Miniport Driver for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Native WiFi Miniport Driver for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages stems from deficiencies in the deserialization mechanism, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of monitoring panels in the Git-based software platform allows attackers to perform cross-site scripting attacks during collaborative code development in GitLab Enterprise Edition.
The vulnerability of monitoring panels in the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...
The vulnerability of the EMM solution WorksPad, related to access control errors, allows a perpetrator to perform arbitrary actions.
The vulnerability of the EMM solution WorksPad is related to access control errors. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to cause service failures.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.
The vulnerability of the Windows Operating System’s Telephony Service relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Microsoft Outlook email client on iOS operating systems, related to the lack of data cleaning at the management level, allows attackers to execute arbitrary commands.
The vulnerability of the Microsoft Outlook email client on iOS operating systems is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the ATMs system “BUK TS-G” lies in the lack of measures taken to protect SQL queries. This allows attackers to send arbitrary queries and gain access to protected information.
The vulnerability of the “BUK TS-G” automation system is related to the lack of measures taken to protect SQL queries. Exploiting this vulnerability allows a malicious actor to send arbitrary queries and gain access to protected information...
Vulnerability of operating systems due to improper validation of specified input types, allowing attackers to execute arbitrary code.
The vulnerability of operating systems iPadOS, iOS, and macOS Tahoe is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.
The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow an attacker to execute arbitrary...