fly-qdm Graphical Interface Confidential Data Access

The vulnerability of the fly-qdm graphical shell is related to the access rights settings when connecting via RDP for a user whose graphical console mode is enabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

Firefox ESR Thunderbird Parsing Module Data Authenticity Issue

The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, is related to a lack of mechanisms for verifying data authenticity. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its...

fly-wm Authentication Bypass

The vulnerability of the fly-wm window manager is related to the password prompt displayed during session blocking. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

PostgreSQL Unreliable Search Path

The vulnerability of the PostgreSQL database management system is related to an unreliable search path mechanism. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

OpenSSL Uncontrolled Resource Consumption DoS

The vulnerability of the OpenSSL library used by the WildFly server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain full access to the system...

Net-SNMP Privilege Escalation

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to protected information, compromise its integrity, and cause service failures...

Firefox browsers DoS

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

QEMU Hardware Emulation Heap Buffer Overflow DoS

The vulnerability of the xgmacenetsend function in the hw/net/xgmac.c file of the QEMU hardware emulation software is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to access protected information, compromise its...

Junos Kernel Routing Table DoS

The vulnerability of the Kernel Routing Table module in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

systemd Resource Leak

The vulnerability of the initialization and service management subsystems in Linux’s systemd relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

Node.js DoS

The vulnerability of the Node.js software platform is related to an error in handling HTTP header names. Exploiting this vulnerability can allow a remote attacker to cause service failures...

urllib3 Uncontrolled Resource Consumption DoS

The vulnerability of the urllib3 module in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Twisted Web DoS

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

get_user_pages() DoS

The vulnerability of the getuserpages function is related to errors during multi-threaded operations race conditions. Exploiting this vulnerability could allow a hacker to cause service failures...

Intel Data Center Manager Console Information Disclosure

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...

Intel Driver & Support Assistant DoS

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to insufficient protection of permissions. Exploiting this vulnerability can allow a hacker to cause service failures...

Cisco IOS XR DoS

The vulnerability of the input packet processing function in Cisco IOS XR lies in resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft Exchange Server DoS

The vulnerability of Microsoft Exchange Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Filesystem Component DoS

The vulnerability of the Filesystem component in Oracle Solaris is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause service failures...