UEFI edk2 Pointer Swapping DoS

The vulnerability in the open-source development environment for UEFI edk2 is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

fig Fig2dev Buffer Overflow

The vulnerability of the readobjects function in the .fig Fig2dev file conversion utility is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise data integrity and cause service failures...

FFmpeg adts_decode_extradata Heap Buffer Overflow DoS

The vulnerability of the adtsdecodeextradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library is related to an unvalidated return value of initgetbits. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its...

WebKitGTK WPE Buffer Overflow DoS

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

GnuTLS Use-After-Free

The vulnerability of the clientsendparams function in the lib/ext/presharedkey.c component of the Transport Layer Security library GnuTLS is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

NTFS Buffer Overflow DoS

The vulnerability of the ntfsattrfindinattrdef function in the NTFS file system driver for the FUSE NTFS-3G module relates to reading data from within allowable buffer limits. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause servic...

Eclipse Jetty Uncontrolled Resource Consumption DoS

The vulnerability of Eclipse Jetty servlet containers is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ANSI-regex Uncontrolled Resource Consumption DoS

The vulnerability of the comparison library with regular expressions containing ANSI escape codes Ansi-regex is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

NTFS File System Driver Heap Buffer Overflow DoS

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to errors during the correction of differences between the MFT and MFTMirror. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

Ansible Configuration Management Insecure Temporary Files

The vulnerability of the Ansible configuration management module is related to insecure temporary files. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Ffmpeg Heap Buffer Overflow DoS

The vulnerability of the fffillrectangle function in the multimedia library Ffmpeg is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

Highlight.js Data Compromise

The vulnerability of the Highlight.js lighting syntax tool is related to modifications of assumed data. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures...

Platinum Host Service Trend Micro Antivirus File Modification DoS

The vulnerability of the Platinum Host Service PtSvcHost.exe implementation of Trend Micro Security antivirus software is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to modify arbitrary files or cause service failures...

Linux TEE IOC Open Session Privilege Escalation

The vulnerability of the TEEIOCOPENSESSION or TEEIOCINVOKE system call implementations in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

Linux kernel mwifiex_usb_recv Buffer Overflow DoS

The vulnerability of the mwifiexusbrecv function drivers/net/wireless/marvell/mwifiex/usb.c in the Linux Server kernel is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Log4j Java DoS

The vulnerability of the Log4j logging library in Java programs exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially crafted recursive request...

Squashfs-Tools Symbolic Link

The vulnerability of the squashfs-opendir function in the unsquash-2.c component of the Squashfs-Tools suite for creating and extracting file systems is related to an incorrect definition of symbolic links before accessing files. Exploiting this vulnerability allows a remote attacker to compromis...

Adobe Bridge Null Pointer DoS

The vulnerability of the Adobe Bridge file manager is related to the assignment of the null pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Unbound DNS Server Buffer Overflow DoS

The vulnerability of the dnamepktcopy function in the Unbound DNS server is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

New Tab Page Data Compromise

The vulnerability of the “New Tab Page” component in Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to influence the accessibility of data or cause service failures...