Mbed TLS SSL/TLS Certificate Validation

The vulnerability of TLS and SSL Mbed TLS implementations is related to the incorrect use of the revocationDate check. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

NVIDIA GPU Display Driver Heap Buffer Overflow DoS

The vulnerability of the nvlddmkm.sys component of the NVIDIA GPU Display Driver is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data and cause system failures...

Nginx LDAP Auth Code Execution

The vulnerability of the LDAP-auth HTTP-server implementation based on Nginx is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute any arbitrary code on the vulnerable system...

Samsung SMR buffer error vulnerability

Samsung SMR is a system patch package from South Korea's Samsung Samsung. A buffer overflow vulnerability exists in Samsung SMR, which stems from an incorrect boundary check in the Quram Agif library and can be exploited by attackers to cause arbitrary code execution...

Oracle Enterprise Session Border Controller Log Component Partial DoS

The vulnerability of the Log component in the Oracle Enterprise Session Border Controller is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause a partial service outage using the HTTP protocol...

Oracle Java SE Libraries GraalVM Enterprise Partial DoS

The vulnerability of the Libraries component of the Oracle Java SE software platform, the Oracle GraalVM Enterprise Edition virtual machine, and the Oracle Solaris operating system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a partial servic...

Generic-array module Type Handling DoS

The vulnerability of the Generic-array module in Rust is related to the increased lifespan of the arr! macro. Exploiting this vulnerability allows a remote attacker to cause service failures...

Faust CosPrim computeSigOutput DoS

The vulnerability of the CosPrim::computeSigOutput function in the cosprim.hh component of the Faust sound synthesis and processing programming language is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

Firefox Thunderbird JIT Data Compromise

The vulnerability of the JIT component in the Firefox web browser and the Thunderbird email client is related to errors during resource release. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Paramiko SSHv2 Information Disclosure

The vulnerability of the SSHv2 protocol implementation by the Paramiko library is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to access confidential information...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

Intel Intra-mode BTI Unauthorized Access

The vulnerability of the Intel microprogrammable processor’s Intra-mode BTI IMBTI implementation is related to errors in parameter processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the DumpTrackInfo function in the MP4Box multimedia platform’s command is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Server MySQL DML DoS

The vulnerability of the Server component: The DML part of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Node Set-value module Type Conversion Confidential Data Compromise

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

Server MySQL DML DoS

The vulnerability of the Server component: The DML mechanism of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Server MySQL Locking DoS

The vulnerability of the Server component: Locking the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...