34268 matches found
Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service
A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the...
Security Bulletin: Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation
Summary Langflow uses a local and S3-backed storage service to manage files uploaded by users and referenced by flow components. The flow execution runtime accepts attacker-controlled file paths through the tweaks API without invoking the path containment guard, allowing traversal sequences to...
firefox: thunderbird: Mitigation bypass in the Storage: Cache API component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
Windows Web Platform Storage Elevation of Privilege Vulnerability
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...
Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
Storage Spaces Controller Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...
Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
Windows Storage Management Provider Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...
Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...
Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...
Microsoft Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...
Windows Storage Management Provider Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...