The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the issue of buffer overflows. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...

The vulnerability of the node.js library SAP Approuter, related to redirecting URLs to unreliable websites, allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP Approuter library in Node.js involves redirecting URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Rockwell Automation’s 1734 POINT I/O microprogramming system, related to unlimited resource distribution, allows a hacker to trigger a service failure.

The vulnerability of Rockwell Automation’s 1734 POINT I/O software lies in its unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability in the set of Microsoft XML Core Services on the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft XML Core Services on the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the Network File System (NFS) on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Network File System NFS on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Bluetooth service for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Siemens’ vulnerabilities in engineering and industrial software, related to the use of an unreliable search path, allow attackers to escalate their privileges.

The vulnerability of Siemens’ engineering and industrial software is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Web Proxy Auto-Discovery Protocol (WPAD) implementation in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Web Proxy Auto-Discovery Protocol WPAD implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the console-based graphic editor ImageMagick lies in its reliance on memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module on the Django web application software platform allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Cisco RoomOS operating system, related to insufficient resource control during its existence, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco RoomOS operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick allows a hacker to induce a service failure.

The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the raw image format component in the console-based graphic editor ImageMagick allows a hacker to exploit it to disclose protected information.

The vulnerability of the raw image format component of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the XWD encoder in the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the PyImaging_MapBuffer() function in the src/map.c component of the Pillow image processing library allows a attacker to disclose protected information or cause service interruptions.

The vulnerability of the PyImagingMapBuffer function in the src/map.c component of the Pillow image processing library is related to the issue of the operation exceeding the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

The vulnerability of the Apache Fineract digital financial services platform, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

The vulnerability of Honeywell IQ4 programmable logic controllers’ microprogramming software lies in the lack of authentication for critical functions, allowing attackers to gain full access to the device.

The vulnerability of the microprogrammed software in Honeywell IQ4 programmable logic controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device...

The vulnerability of the Command Line Interface (CLI) of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local platform for managing software products allows a perpetrator to execute arbitrary code.

The vulnerability of the Command Line Interface CLI of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local software platform is related to an incorrect restriction on the path...

The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of remote desktop protocol (RDP) clients for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of client machines in Windows operating systems when using the Remote Desktop Client allows attackers to escalate their privileges.

The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of the Windows WebView component on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows WebView component in operating systems involves the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the audin_server_recv_formats() function in the RDP client FreeRDP allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the audinserverrecvformats function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the Cisco RoomOS operating system, related to improper handling of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the Cisco RoomOS operating system is related to improper handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the open5gs-amfd process of the Access and Mobility Management Function in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.

The vulnerability of the open5gs-amfd process of the Access and Mobility Management Function in the NR/LTE Open5GS network creation and management tool is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of Schneider Electric’s Cybersecurity Admin Expert (CAE) software, a security management tool, stems from insufficient protection for registration data. This vulnerability allows attackers to enhance their privileges.

The vulnerability of Schneider Electric’s Security Management Software, EcoStruxure Cybersecurity Admin Expert CAE, is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to trigger an Error Message Response (MNRF).

The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...

The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of cloud-based software for Opcenter X’s digital production capabilities, related to errors in verifying cryptographic signatures, allows a hacker to gain full access to the application.

The vulnerability of cloud-based software for digital production in Opcenter X is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain full access to the application...

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers lies in the unlimited distribution of resources, which allows a hacker to trigger a service failure.

The vulnerability of software for modeling and simulating the operation of Siemens S7 controllers is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in service operations...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the freerdp_certificate_data_hash_() function in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the freerdpcertificatedatahash function in the RDP client FreeRDP is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of Windows operating systems, related to deficiencies in access control, allows attackers to escalate their privileges

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the parser for EPS files in the PIL/EpsImagePlugin.py module, a library for working with images using Pillow, allows a hacker to cause a service failure.

The vulnerability of the parser for EPS files in the Pillow image processing library’s EPSImagePlugin.py module lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause service failures when processing specially crafted EPS...

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to the failure to handle CRLF sequences in HTTP headers, allows attackers to gain unauthorized access and modify authentication requests.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access and modify...

Vulnerability of Windows operating systems, related to deficiencies in access control, allowing attackers to circumvent security restrictions

Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass security restrictions...

The vulnerability of the Windows Filtering Platform (WFP), a filtering platform for Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Windows Filtering Platform WFP in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages involves a calculated loss of significance, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to a calculated loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the implementation of the Remote Desktop Protocol (RDP) on Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant involves redirecting URLs to unreliable websites, allowing attackers to escalate their privileges.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Perl programming language module Text::CSV_XS, related to memory usage after deallocation, allows a remote attacker to execute arbitrary code.

The vulnerability of the Perl programming language module Text::CSVXS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the GPAC multimedia platform, related to improper cleaning or release of resources, allows a violator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

Vulnerability of the rdp_write_logon_info_v2() function in the RDP client FreeRDP, allowing a hacker to cause a service failure

The vulnerability of the rdpwritelogoninfov2 function in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the urb_select_interface() function in the RDP client FreeRDP allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the urbselectinterface function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...