SpiceDB Data Compromise

The vulnerability of the SpiceDB database management system is related to the improper storage of permissions. Exploiting this vulnerability allows a malicious actor to influence data integrity through the CheckPermission parameter...

Nextcloud Share Component Data Compromise

The vulnerability of the Share component in the cloud software for creating and using Nextcloud Server storage involves the sending of requests to delete old versions of files that could only be accessed with read permissions. Exploiting this vulnerability allows a malicious actor to compromise...

App Component Data Compromise

The vulnerability of the App tool component for managing applications and Flatpak environments is related to the elevation and concealment of permissions. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

ROS-20240627-04

A vulnerability in the ioctl component of the Flatpak application and environment management tool is related to copying text from the virtual console and pasting it into the command buffer, from which the command can be run after exiting the Flatpak application. Exploitation of the vulnerability...

Dawn Component Data Compromise

The vulnerability of the Dawn component in Microsoft Edge and Google Chrome lies in the improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a special...

Python Pillow Image Library Data Compromise

The vulnerability of the imagingcms.c file in the Pillow image processing library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

UPX Heap Buffer Overflow DoS

The vulnerability of the getne64 function in the bele.h file of the executable packaging tool by UPX is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

Schneider Electric Sage Web Interface Data Compromise

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a...

Linux Platform Environment Control Interface Heap Buffer Overflow DoS

The vulnerability of the adevrelease function in the drivers/peci/cpu.c module of the Linux operating system’s Platform Environment Control Interface PECI kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel USB driver Disable Show Store Buffer Overflow DoS

The vulnerability of the disableshow,store functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to an infinite waiting loop for resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Philips/NXP SJA1000 device driver Linux Heap Buffer Overflow

The vulnerability of the emspcmciaaddcard function in the drivers/net/can/sja1000/emspcmcia.c file of the Philips/NXP SJA1000 device driver in the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Mellanox Technologies mlx4_en_try_alloc_resources buffer overflow DoS

The vulnerability of the mlx4entryallocresources function in the drivers/net/ethernet/mellanox/mlx4/ennetdev.c file of the Mellanox Technologies networking adapter driver for Linux-based systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow ...

Linux f2fs Heap Buffer Overflow DoS

The vulnerability of the f2fsreadmultipages function in the fs/f2fs/data.c file of the Linux kernel’s file system f2fs is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

LiteUART driver Heap Buffer Overflow DoS

The vulnerability of the liteuartremove function in the drivers/tty/serial/liteuart.c file of the Linux kernel’s LiteUART driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Bluetooth Kernel msft_do_close() Buffer Overflow DoS

The vulnerability of the msftdoclose function in the net/bluetooth/msft.c module of the Linux operating system’s Bluetooth protocol implementation is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker...

CVE-2024-5197

A flaw was found in libvpx. When creating images, libvpx trusts the width, height, and alignment of the user input. However, it does not properly validate the provided values. This flaw allows an attacker to craft user inputs or trick the user into opening crafted files, where these types of valu...

CVE-2024-28021

A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity...

CVE-2024-37176

CVE-2024-37176 concerns SAP BW/4HANA Transformation and Data Transfer Process (DTP). The connected sources describe an authentication-required path where improper authorization checks allow an attacker to elevate privileges within the SAP BW/4HANA DTP, with no impact to data confidentiality and l...

PT-2024-7620

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 127 Description The issue is related to incorrect restriction of visualizable layers in the user interface of the Firefox browser's screenshot creation page. This could allow a remote attacker to compromise data...

CVE-2024-5389

In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to create, update, get, and delete prompt variations for datasets not owned by their organization. This issue arises due to the application not properly validating the ownership of dataset...