Portainer open redirection

The vulnerability of the Portainer container management platform is related to the use of open redirection. Exploiting this vulnerability could allow a attacker to redirect users to any desired website...

React-PDF security vulnerabilities

React-PDF is an application by Wojciech Maj Personal Developer. A security vulnerability exists in react-pdf. An attacker exploiting this vulnerability could execute JavaScript code...

Oracle Virtualization security vulnerabilities

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the...

Mattermost security vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from an inability to check the "inviteguest" permission when inviting people from other teams to join the team. A privileged...

Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts

The Mozilla Foundation Security Advisory describes this flaw as: Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie respon...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that is due to an improper implementation in site isolation. An attacker can exploit this vulnerability to bypass security restrictions...

NEXO-OS Arbitrary File Load Code Execution

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this...

OpenSearch Project Security Vulnerability

OpenSearch Project is OpenSearch Project open source a community-driven, Apache 2.0 licensed open source search and analytics suite. Making it easy to access, search, visualize and analyze data. A security vulnerability exists in OpenSearch. An attacker exploiting this vulnerability could perform...

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2 metadata management library relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

GlusterFS Resource Consumption DoS

The vulnerability of the GlusterFS file system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Microsoft Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows Defender operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Google Android OS security vulnerabilities

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework. An attacker can exploit this vulnerability to gain elevated privileges on the system...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework, which is due to an error in a framework component that can be exploited by an attacker to gain elevated privileges on the system...

Cisco Identity Services Engine File Upload/Deletion

The vulnerability of the Cisco Identity Services Engine’s web management interface relates to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor to upload or delete certain files using a specially created HTTP request...

Electra Central AC unit security vulnerability

The Electra Central AC unit is an Electra Central AC unit from Electra. A security vulnerability exists in the Electra Central AC unit. An attacker could exploit the vulnerability to cause the unit to connect to an unauthorized update server...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a series of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets. An attacker exploiting this vulnerability could cause memory corruption...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a series of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets. An attacker exploiting this vulnerability could cause memory corruption...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Prosody WebSocket DoS

The vulnerability of the WebSocket server implementation for Jabber/XMPP Prosody is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Mozilla: Undesired attributes could be set as part of prototype pollution

The Mozilla Foundation Security Advisory describes this flaw as: If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution...