Cisco IOS XE Resource Exhaustion DoS

The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

Cisco IOS XE Information Disclosure

The vulnerability of Cisco IOS XE operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

Cisco Catalyst SD-WAN Access Control

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco IOS XE Information Disclosure

The vulnerability of Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Cisco IOS XE Privilege Escalation

The vulnerability of Cisco IOS XE operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

F2FS File System Privilege Escalation

The vulnerability of the sbistore and f2fssbishow functions in the fs/f2fs/sysfs.c file of the F2FS file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...

Linux fore200e_shutdown Buffer Overflow

The vulnerability of the fore200eshutdown function in the drivers/atm/fore200e.c module of the Linux network adapter driver relates to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

sound/usb/mixer parse_audio_unit USB Audio

The vulnerability of the parseaudiounit function in the sound/usb/mixer.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

netfilter kernel Heap Buffer Overflow DoS

The vulnerability of the decodechoice function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter kernel in the Linux operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...

go-git Unvalidated Array Indexing

The vulnerability of the go-git library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...

MediaWiki Unauthorized Access

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

MediaWiki Unauthorized Access

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Grav CMS Watermark Disclosure

The vulnerability of the ImageMedium::watermark function in the Grav CMS system is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

OAuth2 Software Unauthenticated Access

The vulnerability of the final point of contact for the dynamic registration mechanism of the OAuth2 software used to manage medical organizations like OpenEMR lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to gain unauthoriz...

Zoom Workplace Video Conference Input Validation

The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

ROS-20260803-73-0006

The vulnerability in Tomcat is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Compositing Unauthorized Access

The vulnerability of the Compositing component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a malicious actor to gain unauthorized access to protected information...

Microsoft Word Numerical Truncation Disclosure

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to disclose protected information...

axios Uncontrolled Resource Consumption

The vulnerability of the axios library is related to an uncontrolled resource consumption when processing the maxBodyLength parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of the protected information...

Google Chrome ViewTransitions Unauthorized Access

The vulnerability of the ViewTransitions component in Google Chrome browser is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...