NTFS File System Privilege Escalation

The vulnerability of the ntfsattrsetupflag function in the NTFS file system driver for the FUSE NTFS-3G module is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

GnuTLS key_share Memory Leak Data Compromise

The vulnerability of the keyshare extension in the GnuTLS transport layer security library relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

GnuTLS Use-After-Free

The vulnerability of the clientsendparams function in the lib/ext/presharedkey.c component of the Transport Layer Security library GnuTLS is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

Ffmpeg Heap Buffer Overflow DoS

The vulnerability of the fffillrectangle function in the multimedia library Ffmpeg is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

Highlight.js Data Compromise

The vulnerability of the Highlight.js lighting syntax tool is related to modifications of assumed data. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures...

Eclipse Jetty Uncontrolled Resource Consumption DoS

The vulnerability of Eclipse Jetty servlet containers is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

NTFS File System Driver Heap Buffer Overflow DoS

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to errors during the correction of differences between the MFT and MFTMirror. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

NTFS File System Driver Heap Buffer Overflow DoS

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through a specially created Unicod...

Ffmpeg get_block_row Buffer Overflow DoS

The vulnerability of the getblockrow function in the Ffmpeg multimedia library is related to buffer overflow in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

ANSI-regex Uncontrolled Resource Consumption DoS

The vulnerability of the comparison library with regular expressions containing ANSI escape codes Ansi-regex is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

NTFS File System Buffer Overflow DoS

The vulnerability of the ntfsgetattributevalue function in the NTFS file system driver for the FUSE NTFS-3G module is related to the absence of attribute filtering. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

UEFI edk2 Pointer Swapping DoS

The vulnerability in the open-source development environment for UEFI edk2 is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Platinum Host Service Trend Micro Antivirus File Modification DoS

The vulnerability of the Platinum Host Service PtSvcHost.exe implementation of Trend Micro Security antivirus software is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to modify arbitrary files or cause service failures...

PT-2022-15025 · Replit · @Replit/Crosis

Name of the Vulnerable Software and Affected Versions: @replit/crosis versions prior to 7.3.1 Description: A vulnerability exists that involves exposure of sensitive information. When using the library to communicate with Replit in a standalone fashion, if there are multiple failed attempts to...

Linux TEE IOC Open Session Privilege Escalation

The vulnerability of the TEEIOCOPENSESSION or TEEIOCINVOKE system call implementations in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

PT-2025-37514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's DRM/MSM subsystem related to inconsistent handling of hardware shutdown logic in the .remove and .shutdown callbacks. The .remove and .shutdown...

Linux kernel mwifiex_usb_recv Buffer Overflow DoS

The vulnerability of the mwifiexusbrecv function drivers/net/wireless/marvell/mwifiex/usb.c in the Linux Server kernel is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-2-1974

2.1974 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

Log4j Java DoS

The vulnerability of the Log4j logging library in Java programs exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially crafted recursive request...

Use safeTransfer/safeTransferFrom consistently instead of transfer/transferFrom

Handle defsec Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers or to use something like OpenZeppelin’s safeTransfer/safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause silen...