IndexedDB Vulnerability

The vulnerability of the IndexedDB component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the exposure of information. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected informati...

Linux z_erofs_lzma_head() Compromise Protected Information

The vulnerability of the zerofslzmahead function in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

GitLab EE Authentication Bypass Info Disclosure

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose the protected information...

FreeRDP kerberos_AcceptSecurityContext Use-After-Free

The vulnerabilities of the kerberosAcceptSecurityContext and kerberosInitializeSecurityContextA functions in the FreeRDP client are related to a memory reclamation error. Exploiting these vulnerabilities could allow an attacker to compromise the accessibility of protected information...

ROS-20260401-73-0049

Vulnerability in zabbix7-lts related to a flaw in the authorization mechanism. Exploitation of the vulnerability may allow a remote intruder to gain unauthorized access to protected information...

MHI bus driver Heap Buffer Overflow

The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Direct Rendering Infrastructure GPU Function Compromise

The vulnerability of the xevmbindiocl function in the drivers/gpu/drm/xe/xevm.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the drmschedjobaddresvdependencies function in the drivers/gpu/drm/scheduler/schedmain.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allo...

Dell ECS Information Disclosure

The vulnerability of the Dell ECS storage platform lies in the fact that information is stored in an open manner. Exploiting this vulnerability could allow an attacker to disclose the protected information...

EXT/STANDART extension PHP Unauthorized Access

The vulnerability of the EXT/STANDART extension in the PHP programming language is related to the disclosure of information through caching. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

arch/x86/kernel/cpu/common.c Heap Buffer Overflow DoS

The vulnerability of the setupsmap function in the arch/x86/kernel/cpu/common.c module on the x86 kernel of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected...

Microsoft Office 365 Apps for Enterprise Buffer Overflow Info Disclosure

The vulnerability of Microsoft Office and 365 Apps for Enterprise applications is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Red Database Privilege Manipulation

The vulnerability of the “Red Database” database management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

Cisco Nexus Dashboard Fabric Controller REST API Unauthorized Access

The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

WISE-4010LAN Ethernet Module Unencrypted Storage

The vulnerability of the microprogrammed Ethernet module software WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

Apache InLong Deserialization Unauthorized Access

The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by sending specially crafted data...

CORS Unauthorized Access

The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Linux kernel Ethernet driver HclgeFetchRegPfReg Buffer Overflow

Vulnerability of the hclgeFetchRegPfReg function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeRegCs.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to compromise the...

Linux amdpgu driver Buffer Overflow DoS

The vulnerability of the read and write functions in the drivers/gpu/drm/amd/display/modules/hdcp/hdcpddc.c file, a driver for AMD GPU, in the Linux operating system is related to incorrect index calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

YAQL Component Disclosure

The vulnerability of the YAQL component in the interface for managing service configurations in the OpenStack Murano cloud platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected...