imalib2 Integer Overflow Code Execution

The vulnerability of the imlib2 graphic library for 32-bit platforms arises from integer overflows memory writes beyond the boundaries of the memory buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created large-sized image...

NGINX HTTP Server Code Execution

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...

libhevc Code Execution

The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

libhevc Code Execution

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process remotely...

Mediaserver libhevc DoS

The vulnerability of the Mediaserver application’s libhevc service stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure memory corruption by using a specially created file...

Adobe XMP-Toolkit-SDK Heap Buffer Overflow Privilege Escalation

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information...

Ollama System Data Exposure DoS

The vulnerability of Ollama’s system for running and managing large language models is related to the exposure of system data to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ImageMagick IPTC Metadata Data Compromise

The vulnerability of the IPTC writing module in the console-based image editing tool ImageMagick is related to the escape of operations from the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected...

Apache Kafka API CONSUMER_GROUP_DESCRIBE Unauthorized Access

The vulnerability of the API CONSUMERGROUPDESCRIBE mechanism used by the Apache Kafka messaging broker is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ImageMagick magick-distribute-cache Disclosure

The vulnerability of the magick-distribute-cache service in the console-based image editing tool ImageMagick is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose protected information...

ImageMagick Decoder Code Execution

The vulnerability of the MSL decoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ImageMagick Unauthorized Access

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ImageMagick ASHLAR Encoder DoS

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Raw Image Disclosure

The vulnerability of the raw image format component of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

magick-distribute-cache DoS

The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ImageMagick MAT Decoder DoS

The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ImageMagick BilateralBlurImage DoS

The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Wavelet DoS

The vulnerability of the WaveletDenoiseImage method in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

ImageMagick Resource Consumption DoS

The vulnerability of the console-based graphic editor ImageMagick is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ImageMagick MSL Encoder DoS

The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

libhevc Android Code Execution

The vulnerability in the Android operating system’s Media Framework libhevc is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GitLab CE/EE Data Compromise

The vulnerability of the mechanism for displaying commit discussions and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...

ImageMagick Unauthorized Access

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Apache HTTP Server Privilege Escalation

The vulnerability of the Apache HTTP Server web server is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

Grafana Alertmanager Templates Test Endpoint DoS

The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and logging platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GitLab EE Access Rights Data Compromise

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...

GitLab EE Data Compromise

The vulnerability of the repository mirroring mechanism of the Git-based software platform for collaborative code development in GitLab CE/EE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...

PostgreSQL SCRAM Disclosure

The vulnerability of the SCRAM authentication subsystem in the PostgreSQL database management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ImageMagick Memory Leak DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...

Git Platform Name Resolution Data Compromise

The vulnerability of the mechanism for resolving Git-link names in the software platform based on Git for collaborative code development in GitLab CE/EE is related to the use of a name with an incorrect link. Exploiting this vulnerability could allow a malicious actor to compromise the integrity ...

libhevc Media Framework Code Execution

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

amcheck Extension RCE

The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...

ImageMagic CheckPrimitiveExtent Heap Buffer Overflow DoS

The vulnerability of the CheckPrimitiveExtent function in the console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PostgreSQL ALTER TABLE Alter Type Data Modification

The vulnerability of the ALTER TABLE/ALTER TYPE command in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to delete or modify data...

ImageMagick Buffer Overflow Code Execution

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Pointer Manipulation DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the use of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ImageMagick Buffer Overflow Code Execution

The vulnerability of the console-based graphic editor ImageMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PostgreSQL GSSAPI Man-in-the-Middle

The vulnerability of the GSSAPI component in the PostgreSQL database management system is related to the lack of integrity checks during the transmission of messages through the communication channel. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks...

PostgreSQL ascii Disclosure

The vulnerability of the ascii function in the PostgreSQL database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

PostgreSQL DDL DoS

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

ECPG clients PostgreSQL DoS

The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure by sending an incorrect bytea value...

Azure SQL Database Privilege Escalation

The vulnerability of Azure SQL Database cloud relational database is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

ImageMagick Uncontrolled Recursion DoS

The vulnerability of the console-based graphic editor ImageMagick is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

libhevc DoS

The vulnerability of the libhevc library in the Media Framework component of the Android operating system is related to improper error handling during memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Assimp FileHandler Code Execution

The vulnerability of the FileHandler component in the Open Asset Import Library Assimp library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

PostgreSQL picksplit Disclosure

The vulnerability of the picksplit function in the PostgreSQL database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...

Traffic Management User Interface BIG-IP Arbitrary Command Execution

The vulnerability of the Traffic Management User Interface TMUI of BIG-IP application protection tools is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands, create or delete files remotely...

Leptonica gplotMakeOutput Command Execution

The vulnerability of the gplotMakeOutput function in the Leptonica image processing library is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to execute any command remotely using the argument gplot rootname...

libhevc Code Execution

The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...