configuration management system and Data Compromise

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cau...

SLURM Authentication Bypass

The vulnerability of the SLURM resource manager relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

SLURM srun Privilege Bypass

The vulnerability of the srun --uid command used by SLURM resource managers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

Network Slicing Information Disclosure

The vulnerability of the 5G network segmentation mechanism, which involves dividing the network into multiple independent virtual networks, is related to the lack of correlation between identifiers at the application layer and the transport layer. Exploiting this vulnerability can allow a malicio...

docker daemon Resource Consumption DoS

The vulnerability of the dockerd daemon, a tool for automating the deployment and management of applications in Docker containerized environments, is related to improper handling of the image manifest file. Exploiting this vulnerability allows an attacker to cause service interruptions...

Node.js localhost6 Whitelist Access Confidential Data Compromise

The vulnerability of the Node.js software platform is related to the presence of localhost6 in the white list. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

salt-netapi Remote Execution DoS

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...

OpenLDAP slapd DoS

The vulnerability of the slapd process in the OpenLDAP package is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

WebReports XML External Object Disclosure

The vulnerability of the WebReports report server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

Netgear ProSafe Plus DHCP DoS

The vulnerability of the DCHP configuration of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 networking devices relates to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to trigger...

Network Address Translation DoS

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to security flaws in service data protection. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Google Chrome SwiftShader Buffer Overflow DoS

The vulnerability of Google Chrome’s SwiftShader component relates to the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause service failures...

Firejail SUID Use-After-Free

The vulnerability in the checkoutput function of output.c, with the SUID attribute and a isolated programming environment like Firejail, is related to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow an attacker to access confidential data, compromise i...

Squid nonce digest integer overflow DoS

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Samba DoS

The vulnerability of the Samba network interaction software suite in AD DC is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

DNS Server Service Windows DoS

The vulnerability of the DNS server service in Windows operating systems is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

DNS Server Service Windows DoS

The vulnerability of the DNS server service for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the unixstreamrecvmsg function in Linux operating system kernels is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

GPU Display Driver Privilege Escalation

The vulnerability of the GPU Display Driver is related to improper access to outdated APIs in the driver nvlddmkm.sys for DxgkDdiEscape or IOCTL. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Sympa Resource Consumption DoS

The vulnerability of the Sympa mailing list manager is related to the improper handling of incorrect parameters. Exploiting this vulnerability can allow a malicious actor to cause service failures...