Windows kernel driver Privilege Escalation

The vulnerability of the Windows operating system’s kernel driver relates to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to gain increased privileges...

OCC API Endpoint SAP Commerce Cloud Unauthorized Access

The vulnerability of the OCC API Endpoint component in the SAP Commerce Cloud platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or compromise the integrity of data...

Exposure Of Sensitive Information To An Unauthorized Actor

libzpehyr.so is vulnerable to Exposure Of Sensitive Information To An Unauthorized Actor. The vulnerability is due to improper handling of encryption procedure status codes, which allows a custom-made remote controller to incorrectly indicate success even when encryption requests are rejected...

ROS-20240916-03

A vulnerability in the Node.js software platform is related to insufficient data authentication. Exploitation of the vulnerability could allow an attacker acting remotely to disable the validation of the integrity A vulnerability in the APIgenerateKeys function of the Node.js software platform is...

CVE-2024-6544

The Custom Post Limits plugin for WordPress is vulnerable to full path disclosure in all versions up to, and including, 4.4.1. This is due to the plugin utilizing bootstrap and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to retrieve the full path...

UBUNTU-CVE-2024-46687

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfssubmitchunk BUG There is an internal report that KASAN is reporting use-after-free, with the following backtrace: BUG: KASAN: slab-use-after-free in...

Firefox ESR Thunderbird Type Conversion Confidential Data

The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird is related to type conversion errors caused by the enabled autostart of the private mode. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Linux DRM/amdgpu/vkms Pointer Dereferencing DoS

The vulnerability of the DRM/amdgpu/vkms components of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

UEFI EDK2 Configuration Error

The vulnerability of open-source development environments for UEFI EDK2 is related to configuration errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

Libstb Pointer Dereferencing DoS

The vulnerability of the stbiloadgiffrommemory component in the C/C++ Libstb library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux DRM amdgpu Pointer Swapping DoS

The vulnerability of the DRM/amdgpu cores in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

QEMU Synchronization DoS

The vulnerability of the QEMU hardware emulation software is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Samba Synchronization DoS

The vulnerability of the Samba networking communication package is related to synchronization errors when using a shared resource due to incorrect metadata processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

LZ4 Data Compression Algorithm DoS

The vulnerability of the lossless LZ4 data compression algorithm is related to errors in number processing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Cisco Application Policy Infrastructure Controller RCE

The vulnerability of the Cisco Application Policy Infrastructure Controller relates to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and elevate their privileges to the root level...

CVE-2024-6446 Business Logic Errors in GitLab

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application...

CVE-2024-6446 Business Logic Errors in GitLab

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application...

Adobe Reader < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30475, 2017.011.30120, or 2019.010.20091. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.3011...

Adobe Acrobat < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30475, 2017.011.30120, or 2019.010.20091. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.301...

Adobe Reader < 2015.006.30461 / 2017.011.30110 / 2019.010.20064 Multiple Vulnerabilities (APSB18-41) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30461, 2017.011.30110, or 2019.010.20064. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.2008...