Symfony Shared Resource Synchronization

The vulnerability of the Symfony software platform for developing and managing web applications is related to the simultaneous execution and use of a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidentia...

Google Chrome Download Manager Data Compromise

The vulnerability of Google Chrome web browser’s download manager is related to the use of freed memory segments. Exploiting this vulnerability can allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a specially...

libexif Confidential Data Access DoS

The vulnerability of the library for grammatical analysis of EXIF files in libexif is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data, compromise its integrity, and even cause service failures...

libvpx Heap Buffer Overflow DoS

The vulnerability of the multimedia library libvpx is related to a memory-bound read error. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

fence-agents DoS

The vulnerability of the fence-agents software is related to coding errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Git Submodule Name Check Data Compromise

The vulnerability of the component responsible for checking the names of sub-modules in the distributed version control system Git is related to a lack of input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

GraphicsMagick WriteMATLABImage DoS

The vulnerability of the WriteMATLABImage function coders/mat.c in the GraphicsMagick graphics editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through the use of a specially crafted image...

libseccomp Access Control DoS

The vulnerability of the libseccomp library is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

Ceph Storage DoS

The vulnerability of the Ceph storage system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Firefox Access Resource Disclosure

The vulnerability of Firefox browsers, including Firefox ESR, is related to a type object absence error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Git Insufficient Validation Confidential Data Compromise

The vulnerability of the Git version control system lies in the improper updating of submodules. This occurs because the operation can execute commands found in the .gitmodules file of the malicious repository. Exploiting this vulnerability allows a remote attacker to access confidential data,...

Xen Hypervisor Buffer Overflow DoS

The vulnerabilities of the functions p2mresolvetranslationfault and p2mgetentry in the Xen hypervisor are related to incorrect checks on the root table. Exploitation of these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...

Google Chrome Android Input Validation Data Compromise

The vulnerability of the rendering mechanism in the Google Chrome browser for Android is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

Xen Hypercall Initialise DoS

The vulnerability of the hypercallinitialise function in Xen hypervisors is related to incorrect error handling for the invalid format symbol. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Firefox Buffer Overflow DoS

The vulnerability of Firefox browsers, including Firefox ESR, is related to a copying error from memory without checking its size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

software emulation Heap Buffer Overflow DoS

The vulnerability of the tcpemu function in software for emulating hardware on various QEMU platforms is related to a memory management error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Google Chrome V8 Memory Leak Confidential Data Access

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a memory management error after the memory is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Blink Google Chrome Data Verification

The vulnerability of the data input mechanism in Blink’s Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise the...

Xen Hypervisor Input Validation

The vulnerability of Xen hypervisors relates to the dynamic adaptation of the number of page levels in the IOMMU, in accordance with the size of the address space of the user. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...