Secure Boot Protocol Security Monitor XSS

The vulnerability of the security-monitor function in the Secure Boot protocol a part of the UEFI specification is related to an error in the display of ssh for the root user, when this protocol is not enabled for the user. Exploiting this vulnerability can allow a remote attacker to access...

Astra Linux Directory Service’s Data Compromise

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an initialization processing error. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

Astra Linux Directory service EPW management system Buffer Overflow DoS

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error that causes operations to go beyond the memory limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Google Chrome V8 Heap Buffer Overflow DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect implementation of the engine. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Apache Tomcat Session Fixation

The vulnerability of the Apache Tomcat application server’s authentication mechanism is related to the lack of session fixation mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

Debian-eu Privilege Management

The vulnerability of many components of the Debian-eu distribution is related to a lack of security measures in privilege management. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

Apache Tomcat JMX Unauthorized Access

The vulnerability of the Apache Tomcat application server’s JMX component is related to the lack of a mechanism to protect registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of...

Google Chrome Confidential Data Access

The vulnerability of the Google Chrome multimedia browser component is related to a memory management flaw after memory is released. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

TriStation 1131 DoS

The vulnerability of the “password” function in the TriStation 1131 security logic analysis software is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Graphviz agroot Heap Buffer Overflow DoS

The vulnerability of the agroot function in the Graphviz visualization application is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ImageMagick EvaluateImages DoS

The vulnerability of the EvaluateImages function in the console-based graphic editor ImageMagick is related to the output of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

dhcpd DNS Server Resource Release DoS

The vulnerability of the DHCP server dhcpd and the DNS server BIND is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Xen Hypervisor Input Verification

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

Xen Hypervisor Input Validation DoS

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause service failures...

Xen Hypervisor Input Validation DoS

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause service failures...

Xen Hypervisor Comparison Exchange DoS

The vulnerability of comparison and exchange operations in Xen hypervisors is related to the infinite operation of the loop. Exploiting this vulnerability allows an attacker to cause service failures...

ImageMagick coders/mat.c Heap Buffer Overflow Info Disclosure

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

cdf_readproperty_info function Confidential Data Access

The vulnerability of the cdfreadpropertyinfo function of the file classification tool is related to a buffer overflow error data exceeding 4 bytes. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Python ECDSA DoS

The vulnerability of the Python ECDSA cryptographic library involves simultaneous operations using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Symfony Shared Resource Synchronization

The vulnerability of the Symfony software platform for developing and managing web applications is related to the simultaneous execution and use of a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidentia...