GitPython Repo.clone_from() Unauthorized Access

The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Vite Local Development Path Traversal

The vulnerability of the Vite and Vite+ application development local servers is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Windows Push Notification Service Disclosure

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

ROS-20260615-73-0021

The vulnerability of the xfAppUpdateWindowFromSurface function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

VMware Workstation Heap Buffer Overflow DoS

The vulnerability of VMware Workstation’s hypervisor is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Linux __ieee80211_scan_completed Heap Buffer Overflow DoS

The vulnerability of the ieee80211scancompleted function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OpenPGP verify decrypt Disclosure

The vulnerability of the verify and decrypt functions in the npm OpenPGP library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to obtain a valid signature for a message and disclose the protected information...

Apache Airflow Mask Secret Unauthorized Access

The vulnerability of the masksecret function in the Apache Airflow network programming environment is related to insufficient protection of operational data when processing template fields. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

RISC-V Linux Handle Misaligned Load

The vulnerability of the handlemisalignedload function in the arch/riscv/kernel/trapsmisaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to...

DA Component Privilege Escalation

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

Linux kernel driver CMA buffer overflow DoS

The vulnerability of the cmaCancelRoute function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to gain...

Linux net/sched sch_fq_pie Heap Buffer Overflow DoS

The vulnerability of the fqpieqdiscenqueue function in the net/sched/schfqpie.c module of the network/sched subsystem in the Linux operating system is related to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to access protected information or cause service failure...

EUVD-2018-16918

Malware in sbrugna...

JQ f_strflocaltime() Compromise Protected Information

The vulnerability of the fstrflocaltime function in the JavaScript programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Cisco Customer Collaboration Platform Disclosure

The vulnerability of the web interface of the software for monitoring social networks on the Cisco Customer Collaboration Platform formerly Cisco SocialMiner is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries during file processing for PRC formats. Exploiting this vulnerability can allow attackers to disclose protected...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

Linux kernel NXP SJA1105 Switch Access Disclosure

Vulnerability of the sja1105setup function in the drivers/net/dsa/sja1105/sja1105main.c module – The Linux operating system’s NXP SJA1105 switch support driver is vulnerable due to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability can allow an...

uss720 probe function USB driver Information Disclosure

Vulnerability of the uss720probe function in the drivers/usb/misc/uss720.c module – The Linux kernel’s USB device support driver is vulnerable to security-related errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...