95883 matches found
The vulnerability of the ColdFusion software platform, related to authentication errors, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the linker.exe executable of Rockwell Automation Arena’s discrete event simulation and automation software allows a attacker to execute arbitrary code.
The vulnerability of the linker.exe executable of Rockwell Automation Arena’s event simulation and automation software is related to the execution of operations beyond the buffer boundaries in memory, resulting from incorrect validation of input data. Exploiting this vulnerability allows an...
Vulnerability of the DOM component: Mozilla Firefox’s navigation feature allows attackers to compromise the privacy and integrity of protected information.
Vulnerability of the DOM component: Mozilla Firefox’s navigation mechanism is associated with deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of protected information...
The vulnerability of the R7-Officer corporate server’s document editor lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary JavaScript code.
The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code...
The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the authd and remoted processes of the monitoring and threat detection platform Wazuh allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the registration demon authd and the synchronization demon remoted of the Wazuh platform for security monitoring and threat detection is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain...
The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Content Credentials SDK libraries, related to insufficient protection of registration data, allows attackers to enhance their privileges.
The vulnerability of Content Credentials SDK libraries is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Windows Audio service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Audio service on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerabilities of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server allow a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office packages, related to buffer overflows in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Key Guard component in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Key Guard component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the MKS/Spreadsheet component of the “S-SMARTH” software suite arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the MKS/Spreadsheet component of the “S-SMARTH” software suite is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the SessionSecurityTokenHandler class in Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.
The vulnerability of the SessionSecurityTokenHandler class in Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their ability to allow unlimited loading of dangerous files, enabling attackers to increase their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the ability to download files of a malicious nature without limitation. Exploiting these vulnerabilities can allow attackers t...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...
The vulnerability of the ColdFusion software platform, related to improper code generation management, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to the lack of authentication for critical functions, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Certificate Revocation List (CRL) function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 allows a intruder to circumvent security restrictions.
The vulnerability of the Certificate Revocation List CRL function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 is related to improper verification of certificate revocation. Exploiting this vulnerability...
The vulnerability of the wazuh-analysisd module of the Wazuh security monitoring and threat detection platform allows a malicious actor to cause a service failure.
The vulnerability of the wazuh-analysisd module of the security monitoring and threat detection platform Wazuh is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
The vulnerability of the IOCTL dispatcher in the ASUS System Control Interface (ASCI) driver and the set of tools for managing and protecting corporate devices provided by ASUS Business Manager, which allows a malicious actor to disclose protected information or cause service failures.
The vulnerability of the IOCTL handler of the ASCI driver allows an attacker to exploit it to disclose protected information or cause service failures. This vulnerability is related to errors that occur during the update of the link counters. Exploiting this vulnerability could enable a remote...
The vulnerability of the camel-pqc component in the Apache Camel Java framework allows a attacker to execute arbitrary code.
The vulnerability of the camel-pqc component in the Apache Camel Java framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in access control errors, which allow attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to access control errors. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...
The vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages allow attackers to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the USB Audio Class driver for Windows operating systems allows attackers to disclose protected information.
The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Unified Consent System component in Windows operating systems, which allows a violator to increase their privileges
The vulnerability of the Unified Consent System component in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from improper encoding or escaping of output data. This allows attackers to execute arbitrary code.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to improper coding or escape sequences in output data. Exploiting these vulnerabilities can allow a remote attacker to execute...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of input data. This allows attackers to exploit this weakness to increase their privileges.
The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to enhance their privileges remotely...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to compromise protected information
The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the microprogrammed input/output module software of the FLEX 5000, related to the repeated release of memory, allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed input/output module software of the FLEX 5000 is related to the repeated release of memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted CIP packets...
The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and redirect users to malicious websites.
The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform and its production process optimization capabilities is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...
Vulnerability of the JavaScript component: Mozilla Firefox’s WebAssembly browser allows attackers to disclose protected information.
JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to an incorrect pointer dereferencing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Content Credentials SDK libraries, related to the use of an unreliable search path, allows a perpetrator to execute arbitrary code.
The vulnerability of Content Credentials SDK library libraries is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of the camel-solr component of the Apache Camel Java framework, which allows a hacker to gain unauthorized access to confidential information or perform a SSRF attack
The vulnerability of the camel-solr component of the Apache Camel Java framework is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or perform a SSRF attack...
The vulnerability of the Redirected Drive Buffering System (RDBS) in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Redirected Drive Buffering System RDBS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Projected File System (ProjFS) file system in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the Projected File System ProjFS in Windows operating systems is related to the incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of Windows operating system’s Cryptographic Services allows attackers to circumvent security restrictions.
The vulnerability of Windows operating system’s Cryptographic Services is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
The vulnerability of the Microsoft .NET software platform, related to improper encoding or escaping of output data, allows a perpetrator to execute an SSRF attack.
The vulnerability of the Microsoft .NET software platform is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...
The vulnerability of the SMB server for Windows operating systems allows attackers to expose protected information.
The vulnerability of the SMB server for Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the DirectX Graphics Kernel component of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...