Google Chrome IndexedDB

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Google Chrome Memory Use After Free

The vulnerability of the Google Chrome browser’s media component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Samba krb5_extract_ticket Authentication Bypass

The vulnerability of the krb5extractticket function in the Samba networking software package is related to the lack of a mechanism for verifying the authenticity of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Linux touch_pmd Heap Buffer Overflow DoS

The vulnerability of the touchpmd function in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

Jackson-databind readValue Heap Buffer Overflow DoS

The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library is related to improper validation of the data before it is deserialized. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Gem Name Handler Code Generation Data Compromise

The vulnerability of the Gem Name Handler component in the Bundler dependency management tool for Ruby applications relates to improper handling of gems with identical names. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause...

DNS Server Service Windows Server DoS

The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Kernel Pointer Arithmetic DoS

The vulnerability of Linux operating system kernels is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

Samba LDAP Resource Management DoS

The vulnerability of the Samba networking software’s LDAP server is related to a resource management mechanism error. Exploiting this vulnerability can allow an attacker to cause service failures...

OpenJPEG Encoding Buffer Overflow DoS

The vulnerability of the colorapplyiccprofile function in the OpenJPEG encoding and decoding library is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

Ruby on Rails Module Delegation Heap Buffer Overflow DoS

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform is related to the lack of a mechanism for managing code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

Trace TCP/IP DHCPv6 DoS

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Intel PROSet/Wireless WiFi utility Kernel Driver DoS

The vulnerability of the kernel driver of the Intel PROSet/Wireless WiFi utility lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Mozilla Firefox Thunderbird Access Control Issue

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures...

Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit

This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service RRAS to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windo...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2021-374)

This update for java-180-openjdk fixes the following issues : - Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

libnvomx driver Heap Buffer Overflow Privilege Escalation

The vulnerability of the NVIDIA Tegra OpenMax driver library libnvomx relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

NVIDIA Control Panel Driver Privilege Escalation

The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause system failures or increase their...

RnaDaSvr.dll Heap Buffer Overflow DoS

The vulnerability of the CFTLDManager::HandleRequest function in the FactoryTalk Linx automation system software is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

NX-OS LLDP DoS

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...