WebRTC Technology Data Compromise

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service failures...

WebXR Component Google Chrome Confidential Data Compromise

The vulnerability of the Google Chrome browser’s WebXR component is related to the use of a memory area after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Google Chrome IndexedDB

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

DNS Server Service Windows Server DoS

The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Trace TCP/IP DHCPv6 DoS

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Ruby on Rails Module Delegation Heap Buffer Overflow DoS

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform is related to the lack of a mechanism for managing code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

Intel PROSet/Wireless WiFi utility Kernel Driver DoS

The vulnerability of the kernel driver of the Intel PROSet/Wireless WiFi utility lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux Kernel Pointer Arithmetic DoS

The vulnerability of Linux operating system kernels is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

Samba LDAP Resource Management DoS

The vulnerability of the Samba networking software’s LDAP server is related to a resource management mechanism error. Exploiting this vulnerability can allow an attacker to cause service failures...

Mozilla Firefox Thunderbird Access Control Issue

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures...

OpenJPEG Encoding Buffer Overflow DoS

The vulnerability of the colorapplyiccprofile function in the OpenJPEG encoding and decoding library is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit

This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service RRAS to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windo...

RnaDaSvr.dll Heap Buffer Overflow DoS

The vulnerability of the CFTLDManager::HandleRequest function in the FactoryTalk Linx automation system software is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

NX-OS LLDP DoS

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

libnvomx driver Heap Buffer Overflow Privilege Escalation

The vulnerability of the NVIDIA Tegra OpenMax driver library libnvomx relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

Junos Routing Protocol Daemon DoS

The vulnerability of the Routing Protocol Daemon RPD in the Junos operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Intel Ethernet I210 DoS

The vulnerability of Intel Ethernet I210 controller’s microprogramming software is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Intel PROSet/Wireless WiFi Connection Utility Information Disclosure

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...