CVE Vulnerability Catalog

Windows NTFS Elevation of Privilege Vulnerability. Technical details are not provided in the description.

Windows Kernel Information Disclosure Vulnerability.

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability.

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability.

A remote code execution vulnerability in Windows Print Spooler allows an attacker to execute arbitrary code with system privileges.

Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Checkbox Survey versions prior to 7.

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature.

A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.

W Arm Trusted Firmware M do wersji 1.2, świat NS może wywołać zatrzymanie systemu, nadpisanie danych zabezpieczonych lub wydrukowanie danych zabezpieczonych podczas wywoływania funkcji zabezpieczonych w trybie obsługi NSPE.

The Arm Mali GPU kernel driver allows an unprivileged user to access freed memory, leading to information disclosure or root privilege escalation. Affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.

An improper authorization vulnerability has been reported in QNAP NAS running HBS 3 (Hybrid Backup Sync). If exploited, the vulnerability allows remote attackers to log in to a device without proper authorization.

Microsoft Exchange Server Security Feature Bypass Vulnerability.

A remote code execution vulnerability exists in the HTTP Protocol Stack. Technical details are not provided in the description.

The Arm Mali GPU kernel driver allows privilege escalation or denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. Affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. Affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.

A stack buffer overflow vulnerability exists in /goform/setmac on Tenda AC11 devices with firmware through 02.03.01.104_CN. It allows attackers to execute arbitrary code via a crafted POST request.

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. The vulnerability affects multiple Qualcomm Snapdragon platforms, including Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables.