The vulnerability of the client-server WebSocket library in Node-ws software, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the client-server WebSocket library in Node-ws software is related to an incorrect interpretation of the “Sec-Websocket-Protocol” header. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the general proxy server RADIUS software Radsecproxy, related to insufficient input data validation, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the general proxy server RADIUS software Radsecproxy is related to the lack of input validation in the scripts “naptr-eduroam.sh” and “radsec-dynsrv.sh”. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cau...

The vulnerability of the highly efficient pglogical logical replication system, related to the failure to cleanse input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the highly efficient pglogical logical replication system is related to the failure to perform data cleansing on input data. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability in the implementation of the malloc, realloc, and memalign functions of the Apache Nuttx operating system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the malloc, realloc, and memalign functions in the Apache Nuttx operating system arises due to integer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the Indexed DB API for browser storage interfaces in Google Chrome and Microsoft Edge allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Indexed DB API for browser-based structured data storage in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code through a specially created web page...

CVE-2021-37105

There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal...

VulnCheck KEV: CVE-2022-1388

F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services...

mysql: C API unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system, which involves reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Nodemailer email sending library, related to insufficient elimination of specific elements in requests, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Nodemailer email-sending library relates to insufficient elimination of new line characters and the return key in requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the smbserver.py component in the Python3 Impacket networking module, related to name mangling for path restrictions, allows a hacker to gain access to sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the smbserver.py component in the Python3 Impacket networking module is related to incorrect processing of the "../" path. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the CiviCRM web-based contact tracking and interaction management system lies in the lack of restrictions on file downloads. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CiviCRM contact tracking and interaction management web system is related to the ability to upload and execute PHAR archives. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger service interruptions by using a specially created proble...

The vulnerability of the ipaddress library in the Python programming language lies in insufficient input validation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ipaddress library in the Python programming language is related to the incorrect processing of initial zero characters in octal IP address strings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Thunar file manager, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Thunar file manager is related to the use of another program without user confirmation when the file is used as an acommand. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the savevm function in the QEMU hardware emulation software involves unsafe management of privileges, allowing a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the savevm function in the QEMU hardware emulation software relates to the ability to modify data stored in savevm. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the p_lx_elf.cpp component in the UPX executable file packaging mechanism, which involves reading data beyond the allowed buffer size, allows attackers to access confidential information and cause system failures.

The vulnerability of the plxelf.cpp component in the UPX executable file packaging tool is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service interruptions...

The vulnerability of the “pleaseedit” system administration tool is related to an incorrect definition of the link before accessing the file. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the “pleaseedit” system administration tool is related to the use of predictable file names. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficiently checking incoming requests. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, compromise its...