CVE Database

Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the QVM to cause …

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all …

Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExportController behavior applies userHasAccess() only to the import() …

On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including …

On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated attacker with network access to a PTP-enabled port can create a …

On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network …

On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted …

A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.

A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication, withdrawal reconciliation, and BGP origin-validation updates.

On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its default value disables default protective Access Control …

An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP route updates accepted by the device. Successful exploitation requires …

An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on the device to trigger the Rip agent …

On affected EOS platforms where 802.1x is configured in multi-host authenticated mode and the device is configured with Policy Based Routing (PBR), traffic from unauthenticated …

On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who can establish a BGP peering session with an affected …

This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link State (BGP-LS) configured for Dynamic Path Selection (DPS). On affected …

On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP …

An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated party with local host access to obtain administrative privileges on a …

An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain shard-level administrative privileges to cause persisted internal …

An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is bypassed for outbound connections to IPv6-addressed peers. When a MongoDB process …

A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When processing certain authentication requests, the server fails to …

A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator used by certain $setWindowFields aggregation pipelines. Under specific conditions, the …

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach_entry_files() function. This …

Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able …

In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. This …

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 …

Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally.

Use after free in Winsock allows an authorized attacker to elevate privileges locally.

Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.

Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.