IntraService Customer Interaction System Authentication Bypass

The vulnerability of the IntraService customer interaction system relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Nagios Log Server Disclosure

The vulnerability of the user import function in the Nagios Log Server monitoring and analysis software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

iOS iPadOS Permission Misconfiguration

The vulnerability of iOS and iPadOS operating systems is related to incorrect default permissions. Exploiting this vulnerability can allow attackers to access protected information by circumventing screen lock security restrictions...

f2fs Kernel Data Compromise

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

sunrpc Kernel Data Compromise

The vulnerability of the sunrpc component in the Linux operating system’s kernel relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

Framework Android Disclosure

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

Linux drivers/iommu/amd/init.c Buffer Overflow

The vulnerability in the drivers/iommu/amd/init.c component of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

Linux kernel fbdev/core/fbmem.c Heap Buffer Overflow DoS

The vulnerability of the doregisterframebuffer function in the fbdev/core/fbmem.c file of the Linux kernel relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

Linux kernel SPI Data Compromise

The vulnerability of the spi component in the Linux operating system’s kernel involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

RISC-V Linux Handle Misaligned Load

The vulnerability of the handlemisalignedload function in the arch/riscv/kernel/trapsmisaligned.c module of the module management subsystem for the RISC-V architecture-based Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to...

Linux kernel rseq.c Data Compromise

The vulnerability of the rseq.c component in the Linux operating system’s kernel is related to its dependence on unreliable input data during security decision-making. Exploiting this vulnerability allows attackers to compromise the confidentiality and accessibility of protected information...

Notepad HarmonyOS Unauthorized Access

The vulnerability of the Notepad module in the HarmonyOS operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

SROOT Component Unauthorized Access

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

JetBrains Hub Authentication Bypass

The vulnerability of the JetBrains Hub account management software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

DA Component Privilege Escalation

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

Nagios XI Session Duration Unauthorized Access

The vulnerability of the Nagios XI monitoring tool is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Adminer Access Control Error

The vulnerability of the Adminer database management software is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and modify protected information...

Go SSH Server Compromise

The vulnerability of the SSH-server for the Go programming language library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

Nagios XI Disclosure

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

OSGeo GeoServer WMS Disclosure DoS

The vulnerability of the Web Map Service WMS protocol implementation in the software for managing and publishing geospatial data on the OSGeo GeoServer server is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to...