95883 matches found
The vulnerability of the GIFLIB library for working with GIF files, related to a memory reclamation error, allows a hacker to trigger a service failure.
The vulnerability of the GIFLIB library for working with GIF files is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is caused by buffer overflows in the stack. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing attackers to escalate their privileges.
The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to disclose sensitive information
The vulnerability of the HTTP.sys driver on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected informatio...
The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Remote Access Service (RAS) in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Remote Access Service RAS in Windows operating systems is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the `io.netty.handler.proxy.HttpProxyHandler` component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to inject arbitrary HTTP headers into CONNECT requests.
The vulnerability of the io.netty.handler.proxy.HttpProxyHandler component in the framework for developing network applications, servers, and clients using the Netty protocol is related to the failure to handle CRLF sequences properly. Exploiting this vulnerability allows a malicious actor to...
The vulnerability of the metadata processing mechanism in the repomd.xml repository file of the libzypp library allows a perpetrator to execute arbitrary code.
The vulnerability of the file metadata processing mechanism in the repomd.xml repository of the libzypp library is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability in the `src/libImaging/Jpeg2KDecode.c` file of the Pillow image processing library allows a hacker to induce a service denial.
The vulnerability in the src/libImaging/Jpeg2KDecode.c file of the Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of Active Directory Certificate Services on Windows operating systems allows attackers to increase their privileges.
The vulnerability of Active Directory Certificate Services on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of Group Policy Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of embedded Qualcomm microprogramming software, related to reading memory outside the buffer, allows attackers to read and manipulate data.
The vulnerability of microprogramming software in embedded Qualcomm chips relates to reading memory data outside the buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate data...
The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application is related to synchronization errors when using a shared resource, allowing an attacker to escalate their privileges.
The vulnerability of the Adobe Creative Cloud Desktop Application is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its failure to address the issue of eliminating special elements used in the operating system’s command line. This allows attackers to execute arbitrary code.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of Azure Synapse, a cloud-based analytics service, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of Azure Synapse cloud analytics service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and client protocols via Netty allows a hacker to induce a service failure.
The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and protocol clients related to Netty involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Media Foundation component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the GDI+ component in Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the GDI+ component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vulnerability of the DOM component: Core and HTML browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to induce a service failure.
Vulnerability of the DOM component: The Core and HTML browsers of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable because they allow memory to be used after it is released. Exploiting this vulnerability could enable a malicious actor to cause service interruptions...
The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the mechanism for displaying discussions about commit messages and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the mechanism for displaying commit discussions and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...
The vulnerability of Windows operating system installers allows a hacker to increase their privileges.
The vulnerability of Windows operating system installers is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Vulnerability of Windows operating systems, related to deficiencies in access control, allows attackers to escalate their privileges
Vulnerabilities of Windows operating systems are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
The vulnerability of embedded software developed by Qualcomm arises from operations that occur outside of the buffer in memory, allowing attackers to execute arbitrary code and trigger a service failure.
The vulnerability of embedded software with Qualcomm’s microprogramming technology arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and trigger a service failure...
The vulnerability of embedded software developed by Qualcomm, related to operations performed outside of memory buffers, allows attackers to read and manipulate data.
The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...
The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab EE allows a violator to compromise the confidentiality of the protected information.
The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...
The vulnerability of the _ppdCreateFromIPP() function in the CUPS printing server allows a attacker to cause a service failure.
The vulnerability of the ppdCreateFromIPP function in the CUPS printing server is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the driver/net/ppp/ppp_generic.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the driver/net/ppp/pppgeneric.c component in the Linux operating system is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the DefaultHeaderFilterStrategy class in the NATS Java framework by Apache Camel allows a attacker to perform an SSRF attack.
The vulnerability of the DefaultHeaderFilterStrategy class in the NATS Java framework, Apache Camel, is related to insufficient validation of input data when processing parameters such as inFilter, inFilterPattern, and inFilterStartsWith. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the Form_Logout() function in the /formLogout.htm file of the TOTOLINK NR1800X router microprogramming software allows a intruder to execute arbitrary code or cause a service failure.
The vulnerability of the FormLogout function in the /formLogout.htm file of the TOTOLINK NR1800X router microprogramming system is related to the operation of writing data outside the buffer in memory when processing the Host parameter. Exploiting this vulnerability allows an attacker to execute...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their authentication procedures’ flaws, which allow attackers to escalate their privileges.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of the Adept Workflow programming language lies in the insufficient protection of registration data, allowing attackers to execute arbitrary code.
The vulnerability of the Adept Workflow programming language is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to reading data outside of the allowed range in memory, allows a hacker to disclose protected information.
The vulnerability of Microsoft Excel spreadsheet editors involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Microsoft Edge browser vulnerability, related to incorrect path name limitation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Edge relates to an incorrect limitation on the path name limitation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Appliance Work Place microprogramming software for SonicWall SMA 1000 network devices allows a perpetrator to execute an SRF attack.
The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...
The vulnerability of the Moby container isolation system creation software, related to synchronization errors when using shared resources, allows a intruder to trigger a service failure.
The vulnerability of the Moby container isolation system creation software is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.
The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the console-based graphic editor ImageMagick, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to overflow of a buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted data...
The vulnerability of the nfs-utils package, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of the nfs-utils package is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability in the `net/ipv6/ip6_output.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/ipv6/ip6output.c component in the Linux operating system is related to errors in processing parameter values related to length. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the net/core/filter.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the net/core/filter.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of libraries for integrating the OData protocol in modern ASP.NET-based web applications, such as Microsoft.AspNet.OData and Microsoft.AspNetCore.OData, relates to unlimited resource distribution. This allows attackers to cause service failures.
The vulnerability of libraries for integrating the OData protocol in modern ASP.NET-based web applications, such as Microsoft.AspNet.OData and Microsoft.AspNetCore.OData, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the `nikon_load_padded_packed_raw()` function in the `src/decoders/decoders_libraw.cpp` file, which is part of the LibRaw image processing library, allows a hacker to trigger a service failure.
The vulnerability of the nikonloadpaddedpackedraw function in the src/decoders/decoderslibraw.cpp file, which is part of the LibRaw image processing library, relates to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing the loadflags and rawwidt...