MySQL InnoDB DoS

The vulnerability of the InnoDB component of the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures using the MySQL protocol...

Oracle Java SE Hotspot Unauthorized Access

The vulnerability of the Oracle Java SE software platform’s hotspot component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected data or cause service failures...

Schneider Electric Industrial Automation Exception DoS

The vulnerabilities of systems for data collection and process control in Schneider Electric’s StruxureWare SCADA Expert, Vijeo Citect, Vijeo Citect, CitectSCADA, StruxureWare PowerSCADA Expert, and PowerLogic SCADA systems are related to improper handling of exceptions. Exploiting these...

JasPer Heap Buffer Overflow DoS

The vulnerability of the function function jasimagedepalettize libjasper/base/jasimage.c in the JasPer library is due to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and confidentiality, or cause service...

Check Point Security Gateway Resource Release DoS

The multiple vulnerabilities of Check Point Security Gateway are related to resource release errors. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures remotely...

Check Point Security Gateway Resource Release DoS

The vulnerability of Check Point Security Gateway relates to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by redirecting users to the UserCheck page...

Google Chrome ServiceWorker Data Compromise

The vulnerability of Google Chrome’s ServiceWorker script is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

VLC demux/mkv/mkv.cpp Component Data Compromise

The vulnerability of the demux/mkv/mkv.cpp component in the VideoLAN VLC media player software relates to its use after release. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

FAAD2 Heap Buffer Overflow DoS

The vulnerability of the faadresetbits function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 FAAD2, is related to buffer overflows. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected...

Firefox Thunderbird Buffer Overflow

The vulnerability of WebGL buffer data in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to buffer overflows in certain graphics drivers. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

Redis HyperLogLog Buffer Overflow DoS

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This command allows the addition of up to 12 bytes of information beyond the stack limit. Exploiting...

libzmq Data Compromise

The vulnerability of the libzmq library, a library for asynchronous messaging, is related to stack overflow and reallocation due to memory buffer overflow. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and caus...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a read-off error beyond the allocated memory buffer. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

Django HStoreField JSONField SQL Injection

The vulnerability of the django.contrib.postgresfields.HStoreField and django.contrib.postgresfields.JSONField functions in the Django web development framework is related to conversion and key search errors, as well as index searching issues. Exploiting this vulnerability can allow an attacker t...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the blkdrainqueue function in the block/blk-core.c file of the Linux operating system’s kernel is related to the use of this function after error handling. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protecte...

Linux parse_hid_report_descriptor() Buffer Overflow DoS

The vulnerability of the parsehidreportdescriptor function in the Linux operating system is related to writing beyond buffer boundaries during debugging messages generation. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected...

VLC SeekIndex Function

The vulnerability of the SeekIndex function in the VideoLAN VLC media player lies in its division by zero. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures...

VLC Media Player Heap Buffer Overflow DoS

The vulnerability of the DemuxInit function in the VideoLAN VLC media player software is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures by usin...

Docker Automation Tool Data Compromise

The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments is related to errors in code generation during dynamic library loading. Exploiting this vulnerability can allow a malicious actor to compromise data integrity, gain unauthorized access ...

SIP ALG DoS

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers stems from resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...