Prototype Pollution

Overview engine.io is a realtime engine behind Socket.IO. It provides the foundation of a bidirectional connection between client and server Affected versions of this package are vulnerable to Prototype Pollution through the WebTransport upgrade handling in packages/engine.io/lib/server.ts. An...

NVIDIA Cumulus Linux neighmgrd nlmanager DoS

The vulnerability of the neighmgrd and nlmanager components of the NVIDIA Cumulus Linux network operating system is related to an exception handling error. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Samba ActiveDirectory DC Audit Log DoS

The vulnerability of the ActiveDirectory/DC log management module in the Samba networking software package is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Samsung SMR buffer error vulnerability

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. Samsung SMR suffers from a security vulnerability that stems from an OOB read vulnerability in libsaacextractor prior to the September 2021 release of SMR. An attacker can exploit...

CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

Flash Player Adobe Integrated Runtime Code Execution

The vulnerabilities of the Flash Player and Adobe Integrated Runtime programs are caused by buffer overflow attacks. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures remotely...