95883 matches found
The vulnerability of the urb_select_interface() function in the RDP client FreeRDP allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the urbselectinterface function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...
The vulnerability of the Cisco RoomOS operating system, related to the lack of measures for data encryption, allows a intruder to disclose protected information.
The vulnerability of the Cisco RoomOS operating system is related to the lack of measures for data encryption. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
Уязвимость функции readSeparateStripsIntoBuffer() библиотеки LibTIFF, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Уязвимость функции readSeparateStripsIntoBuffer библиотеки LibTIFF связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации посредством специально созданных...
The vulnerability of the ImagingTgaRleEncode() function in the TgaRleEncode.c component of the Pillow image processing library allows a hacker to disclose protected information.
The vulnerability of the ImagingTgaRleEncode function in the TgaRleEncode.c component of the Pillow image processing library is related to the output of the operation outside the buffer. Exploiting this vulnerability could allow an attacker to disclose protected information through the generated...
The vulnerability of the PdfParser.PdfStream.decode() function in the PIL/PdfParser.py module of the Pillow image processing library allows a hacker to induce a service denial.
The vulnerability of the PdfParser.PdfStream.decode function in the PIL/PdfParser.py module of the Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...
The vulnerability of Microsoft Defender for Endpoint for Mac, related to deficiencies in access control for personal information, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Microsoft Defender for Endpoint for Mac is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Windows operating system installation process allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the Windows operating system installation process is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
The vulnerability of Windows operating systems with HID technology allows attackers to disclose sensitive information.
The vulnerability of Windows operating systems with HID devices is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to data type mixing errors, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.
The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerabilities of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise allow attackers to execute arbitrary code.
The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office programs, and Microsoft 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the WebRTC component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the GPAC multimedia platform, related to the lack of memory release after the effective service life, allows a intruder to trigger a service failure.
The vulnerability of the multimedia platform GPAC is related to the lack of memory release after the effective lifespan of the device. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the ainput_send_input_event() function in the RDP client FreeRDP allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the ainputsendinputevent function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the asn1_decode_snmp() function in the printing server’s CUPS implementation allows a attacker to disclose protected information or cause service failures.
The vulnerability of the asn1DecodeSnmp function in the CUPS printing server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...
The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor allows a hacker to trigger a service failure.
The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the AppX Deployment Extensions for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the AppX Deployment Extensions for Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Cisco RoomOS operating system, related to deficiencies in access control, allows attackers to bypass existing security restrictions and increase their privileges.
The vulnerability of the Cisco RoomOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain increased privileges...
The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the decoder in the MSL console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the MSL decoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the console-based graphic editor ImageMagick arises from improper handling of symbolic links before accessing a file. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the console-based graphic editor ImageMagick is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system allows a intruder to gain unauthorized access to the VNC server of virtual machines.
The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the VNC serv...
The vulnerability affects the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software management platform FortiSwitch Manager, and the FortiProxy proxy server for Internet attack protection. This allows a perpetrator to execute arbitrary code.
The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to trigger an Error Message Response (MNRF).
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, Compact GuardLogix, and GuardLogix controllers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to trigger a...
The vulnerability of the Windows Search search and indexing service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Search search and indexing service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Rockwell Automation’s communication adapter software 1715-AENTR allows a intruder to gain unauthorized access to protected information.
The vulnerability of Rockwell Automation’s communication adapter software 1715-AENTR relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the DLL file loading mechanism of the SAProuter proxy server allows a hacker to execute arbitrary code.
The vulnerability of the DLL file loading mechanism of the SAProuter proxy server is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...
The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Media Foundation component in Windows operating systems relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerabilities of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise allow attackers to disclose protected information.
The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerability of the microprogrammed software of modules 1756-EN2, 1756-EN3, and 1756-ENBT of Rockwell Automation’s Logic Controllers ControlLogix allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed software modules 1756-EN2, 1756-EN3, and 1756-ENBT of Rockwell Automation’s ControlLogix logic controllers is related to improper verification of integrity values. Exploiting this vulnerability can allow an attacker to trigger a service failure using...
The vulnerability of the Media component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Media component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
The vulnerability of the WinRT component in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the WinRT component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Network File System (NFS) on Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Network File System NFS on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems regarding client remote desktops is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the ctsattach component of the SAP Change and Transport System Attach Tool allows a perpetrator to execute arbitrary code.
The vulnerability of the ctsattach component of the SAP Change and Transport System Attach Tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code using a specially created archive file...
The vulnerability in the web interface of the SAP NetWeaver Application Server Java Configuration Wizard allows attackers to perform cross-site scripting attacks.
The vulnerability of the SAP NetWeaver Application Server Java Configuration Wizard web interface is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Netlogon service in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Netlogon service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to integer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the UNIX Disk Format File System Driver (UDFS) on Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the UNIX Disk Format File System Driver UDFS on Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of Windows operating system kernels relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the DirectX graphics kernel driver (dxgkrnl.sys) on Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the DirectX graphics kernel driver dxgkrnl.sys on Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...