DjVuLibre Buffer Overflow DoS

The vulnerability of the library for viewing, creating, and editing DjVu files in DjVuLibre is related to the lack of checks for zero bytes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Unidirectional Link Detection DoS

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Ffmpeg filter_intra Heap Buffer Overflow DoS

The vulnerability of the filterintra component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Squashfs-Tools Namespace Limitation

The vulnerability of the squashfs-opendir function in the unsquash-1.c component of the Squashfs-Tools tooling suite relates to deficiencies in pathname limitation. Exploiting this vulnerability could allow an attacker to compromise data integrity and cause service failures...

Puma HTTP Server Resource Consumption

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

VMware vCenter Server XML Parsing DoS

The vulnerability of the VMware vCenter Server virtual infrastructure management tool is related to incorrect syntactic analysis of XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Adobe AIR SDK Out-of-Buffer

The vulnerabilities of Adobe Flash Player, Adobe Integrated Runtime AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler are related to the execution of operations beyond the buffer boundaries. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failur...

Bluetooth Classic Input Verification DoS

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Zhuhai Jieli AC690X Bluetooth Classic Input Verification

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures through the created LMP packet...

Linux kernel Nitro Enclaves Pointer Arithmetic DoS

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Linux shiftfs Heap Buffer Overflow DoS

The vulnerability of the copyfromuser function in the file system of the shiftfs filesystem in Linux’s operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

Singularity container Input Sanitization Information Disclosure

The vulnerability of the Singularity container platform relates to the failure to cleanse input data. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Linux kernel Privilege Escalation

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of permission assignments for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures...

overlayfs Privilege Escalation

The vulnerability of the overlayfs component in the Linux operating system’s kernel involves ignoring user name spaces when configuring file permissions in the underlying file system. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, a...

Eterm Mrxyt Rxyt-unicode SSL-Proxy Data Compromise

The vulnerability of the Eterm, Mrxyt, Rxyt, and Rxyt-unicode software lies in the improper handling of certain control sequences. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Flask Extension Privilege Management

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

libdnf Cryptographic Signature Verification

The vulnerability of the package manager library libdnf is related to a bug in the signature verification function. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Manuscript pickle.load() Heap Buffer Overflow DoS

The vulnerability of the pickle.load function in software for manuscript writers involves restoring unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

Virtualization Containerization Privilege Escalation

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, is related to improper checking of the return value of functions. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise it...

BinData Uncontrolled Resource Consumption DoS

The vulnerability of the declarative method for reading and writing BinData binary file formats is related to the relatively slow creation of certain classes. Exploiting this vulnerability could allow a malicious actor to cause service failures...