Red Database Main Function

The vulnerability of the main function in the guard.cpp module of the “Red Database” database management system is related to the handling of the -t parameter. Exploiting this vulnerability can allow a malicious actor to cause a failure in the operation of the rdbguard utility...

Action Text interpreter Ruby plain_text_for_blockquote_node DoS

The vulnerability of the plaintextforblockquotenode function in the Action Text interpreter for Ruby is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

WebKitGTK WPE Integer Overflow DoS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

kernel: net/bluetooth: race condition in conn_info_{min,max}_age_set()

A race condition was found in the Linux kernel's net/bluetooth device driver within the conninfomin,maxageset function. This issue can lead to an integrity overflow issue, potentially disrupting Bluetooth connections or facilitating a denial of service attack...

opennurbs.dll DLL Unauthenticated Code Execution

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, exists due to a boundary error in file processing. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitrary...

ASMKERN228A.dll ASMdatax229A.dll AutoCAD Code Execution

The vulnerability of the ASMKERN228A.dll and ASMdatax229A.dll libraries, which are software for simulation, design, and drafting in AutoCAD, exists due to a boundary error in processing unreliable input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Regular Expression Denial Of Service (ReDoS)

Knwl.js is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to the presence of inefficient regular expressions, which allow attackers to craft input that causes excessive backtracking, leading to high CPU usage and potential service disruption...

Sybil Attacks

github.com/libp2p/go-libp2p-kad-dht is vulnerable to Sybil attacks. The vulnerability is due to the method of assigning routing information based on the DHT distance between peer IDs and content IDs, allows attackers to generate many Sybil peers with small DHT distances, enabling them to disrupt ...

mptcp DoS

The vulnerability of the mptcp component in the Linux operating system’s kernel is related to incorrect blocking in the subflowgetinfo function. Exploiting this vulnerability can allow an attacker to cause a service failure...

riscv Component DoS

The vulnerability of the riscv component in the Linux operating system’s kernel is related to errors in reading beyond the boundary of the buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux ext4_mb_find_by_goal Heap Buffer Overflow DoS

The vulnerability of the ext4mbfindbygoal function in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

FFmpeg Heap Buffer Overflow DoS

The vulnerability of the apedecodeframe function in the libavcodec/apedec.c file of the FFmpeg multimedia library relates to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity,...

Firefox Buffer Overflow DoS

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

libavfilter/vf_convolution.c Heap Buffer Overflow DoS

The vulnerability of the filter16roberts function in the libavfilter/vfconvolution.c component of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

FFmpeg Heap Buffer Overflow DoS

The vulnerability of the FFmpeg multimedia library relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created MXF file...

Nested iFrame Handler Firefox SameSite Cookie

The vulnerability of the Nested iFrame Handler component in the Firefox web browser is related to an incorrect SameSite attribute in the cookie file. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions...

Firefox Pointer Use DoS

The vulnerability in the Firefox web browser is related to the exploitation of an incorrect pointer. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Firefox Exchange Buffer Heap Buffer Overflow DoS

The vulnerability of the Firefox web browser’s exchange buffer component is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

libavfilter/vf_convolution.c Heap Buffer Overflow DoS

The vulnerability of the filterprewitt function in the libavfilter/vfconvolution.c file of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

FFmpeg MMS Buffer Overflow DoS

The vulnerability of the MMS protocol in the FFmpeg multimedia library relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...