95883 matches found
The vulnerability in Microsoft Word, the Microsoft SharePoint Server corporate application suite, Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise, as well as the Microsoft Office Server software suite and Microsoft 365 Apps for Enterprise, is related to a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise, as well as the Microsoft Office Server and Microsoft 365 Apps for Enterprise products, is related to buffer overflow in dynamic memory...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the insufficient protection of sensitive data. This allows attackers to circumvent security restrictions.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the WalletService service in the Windows operating system allows a perpetrator to escalate their privileges.
The vulnerability of the WalletService service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...
The vulnerability of the siman.exe executable file of Rockwell Automation Arena’s discrete event simulation and automation software allows a hacker to execute arbitrary code.
The vulnerability of the siman.exe executable file of Rockwell Automation Arena’s discrete event simulation and automation software is related to the execution of operations beyond the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker ...
The vulnerability of the FactoryTalk Directory database on the FactoryTalk Services Platform allows attackers to circumvent security restrictions, gain unauthorized access to protected information, and enhance their privileges.
The vulnerability of the FactoryTalk Directory database in the FactoryTalk Services Platform is related to deficiencies in the authentication process when processing JWT algorithms. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain unauthorized access to...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause service failures...
The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.
The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...
The vulnerability of the TorchModuleWrapper.from_config() function in the Keras library allows a hacker to execute arbitrary code.
The vulnerability of the TorchModuleWrapper.fromconfig function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows a hacker to trigger a service failure
The vulnerability of the HTTP.sys driver on Windows operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the GDI+ component in Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the GDI+ component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the DWM Core Library in Windows operating systems is related to writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Vulnerability of Windows operating systems, related to synchronization errors when using shared resources, allows attackers to escalate their privileges.
The vulnerability of Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Windows operating system DHCP clients allows a perpetrator to execute arbitrary code.
The vulnerability of DHCP clients of Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
The vulnerability of the External Tools module in the integrated Studio 5000 Logix Designer environment allows a hacker to execute arbitrary code.
The vulnerability of the External Tools module in the integrated Studio 5000 Logix Designer environment is related to the absence of quotation marks when writing elements or search paths. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially created...
The vulnerability of the Remote Desktop Protocol (RDP) on Windows operating systems allows attackers to compromise protected information.
The vulnerability of the Remote Desktop Protocol RDP on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of Microsoft Defender for Endpoint for Mac, related to synchronization errors when using a shared resource (“Race Situation”), allows a malicious actor to escalate their privileges.
The vulnerability of Microsoft Defender for Endpoint for Mac is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerabilities of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server allow a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the integrated design environment of Studio 5000 Logix Designer, related to deficiencies in the authentication process, allows a malicious actor to execute arbitrary code.
The vulnerability of the integrated design environment Studio 5000 Logix Designer is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to execute arbitrary code by replacing the configuration file of external tools...
The vulnerability of the integrated design environment for Studio 5000 Logix Designer arises from incorrect path name restrictions to the catalog, allowing unauthorized users to gain unauthorized access to file creation and execute arbitrary code.
The vulnerability of the integrated design environment of Studio 5000 Logix Designer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to file creation and execute arbitrary code by sending a speciall...
Vulnerability of the Cryptographic Operating System Services in Windows, allowing attackers to disclose protected information
The vulnerability of the Windows Cryptographic Operating System services is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the Push Notification component in the Windows operating system allows a hacker to disclose protected information.
The vulnerability of the Push Notification component in the Windows operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages, as well as Microsoft Office Online Server, allow attackers to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs, as well as Microsoft Office Online Server, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...
The vulnerability of the Windows QoS Packet Scheduler allows a hacker to exploit it to disclose protected information.
The vulnerability of the Windows QoS Packet Scheduler in the operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...
The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to authentication errors, allows attackers to escalate their privileges.
The vulnerability of the ColdFusion software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the ColdFusion software platform, related to insufficient validation of queries on the server side, allows attackers to bypass existing security mechanisms.
The vulnerability of the ColdFusion software platform is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of the #update method in the Concurrent::AtomicReference class in the Ruby Concurrent Ruby library allows a violator to trigger a service failure.
The vulnerability of the update method in the Concurrent::AtomicReference class in the Ruby Concurrent library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Content Credentials SDK libraries lies in the insufficient validation of requests on the server side, allowing attackers to increase their privileges.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Brokering File System BFS in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the DHCP Server Service for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the DHCP Server Service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the PlatformHandler.axd handler in the “Project-SMARTPoint Pro” software platform and the “Suvod-SMARTPoint” software suite arises from the lack of authentication for a critical function, allowing attackers to upload arbitrary files.
The vulnerability of the PlatformHandler.axd handler in the “Project-SMARTPoint Pro” software platform and the “Suvod-SMARTPoint” software suite is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a remote attacker to upload arbitrary files...
The vulnerability of the Microsoft Office software package, related to the use of an uninitialized resource, allows a hacker to disclose protected information.
The vulnerability of the Microsoft Office suite is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise software allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the parse_option() function in the DHCP server dhcpcd allows a attacker to trigger a service failure.
The vulnerability of the parseoption function in the DHCP server dhcpcd is related to its dependence on behaviors that are uncertain for each implementation type. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially crafted configuration file...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Illustrator, related to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of Adobe Illustrator’s graphic editor is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to incorrect session expiration times, allows attackers to bypass existing security mechanisms.
The vulnerability of the ColdFusion software platform is related to the incorrect duration of a session. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms remotely...
The vulnerability of the ColdFusion software platform, related to incorrect restrictions on path names in the catalog, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...