The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the cc1352_bootloader_rx() function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cc1352bootloaderrx function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Vulnerability of the functions dvcman_call_on_receive() and dvcman_channel_close() in the channels/drdynvc/client/drdynvc_main.c file of the RDP client FreeRDP, which allows a intruder to gain unauthorized access to protected information

The vulnerabilities of the functions dvcmancallonreceive and dvcmanchannelclose in the file channels/drdynvc/client/drdynvcmain.c of the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker operating remotely...

The vulnerability of the netlbl_unlabel_addrinfo_get() function in the net/netlabel/netlabel_unlabeled.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the netlblunlabeladdrinfoget function in the net/netlabel/netlabelunlabeled.c module, which is part of the networking functions in the Linux kernel, relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the tpm_dev_release() function in the drivers/char/tpm/tpm-chip.c module of the Linux operating system’s character device driver for TPM-core devices allows a hacker to trigger a service failure.

The vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module of the Linux TPM-devices driver module is related to improper inter-process communication for critical data deletion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tlmi_analyze() function in the drivers/platform/x86/think-lmi.c driver for X86 devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tlmianalyze function in the drivers/platform/x86/think-lmi.c driver for X86 devices in the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failur...

The vulnerability of the Parser component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Parser component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

The vulnerability of the DIAFAN.CMS content management system, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DIAFAN.CMS website content management system is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the MapServer geographic data rendering parser’s SLD system, related to buffer overflows, allows attackers to cause service failures.

The vulnerability of the MapServer geographic data rendering parser’s SLD system is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability in the fs/nfs/file.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/nfs/file.c component of the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the WebAssembly component in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, allows a hacker to trigger a service failure.

The vulnerability of the WebAssembly component in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the hp-bioscfg component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the hp-bioscfg component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the jsonArrayContains() function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, allows an attacker to disclose protected information and execute arbitrary code.

The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure during the processing of the CQLFILTER parameter...

The vulnerability of the sctp_process_asconf_param() function in the net/sctp/sm_make_chunk.c module of Linux kernel allows a hacker to elevate their privileges to the root level.

The vulnerability of the sctpprocessasconfparam function in the net/sctp/smmakechunk.c module of the Linux kernel is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE allows a perpetrator to gain unauthorized access to read and modify protected information.

The vulnerability of the software interface of a Git-based software platform for collaborative code development on GitLab EE is related to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an intruder, operating remotely, to gain...

The vulnerability of Google Chrome’s Password Manager component allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s Password Manager component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

The vulnerability of the Input component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the Rapid Diffs mechanism in the Git-based software platform for collaborative code development in GitLab EE/CE allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Rapid Diffs mechanism in the Git-based software platform for collaborative code development in GitLab EE/CE relates to the absence of authentication. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access to protected information...

The vulnerability of the checkstackGC() function in the Lua script interpreter allows a attacker to trigger a service failure.

The vulnerability of the checkstackGC function in the Lua script interpreter is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the bond_setup_by_slave() function in the Linux kernel bonding driver allows a hacker to induce a service failure.

The vulnerability of the bondsetupbyslave function in the Linux kernel’s bonding driver is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the Media component in Google Chrome and Microsoft Edge allows a hacker to replace the user interface.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the isVMLowLevelOptionForbidden() function in the LXD container management system allows a attacker to elevate their privileges.

The vulnerability of the isVMLowLevelOptionForbidden function in the LXD container management system is related to the use of an incomplete blacklist when processing input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform allows a attacker to perform XSS attacks.

The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the setother_config() function in the RBAC access control subsystem of the XCP-ng supervisor and the XenServer server virtualization platform allows a malicious individual to gain unauthorized access to the file system.

The vulnerability of the setotherconfig function in the RBAC access control subsystem of the XCP-ng supervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of the JavaScript file taskjobs.js in the GLPI system’s scheduling, incident, and computer equipment inventory management module allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript file taskjobs.js in the GLPI system for managing requests, incidents, and inventory of computer equipment is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Omnibox address bar in the Google Chrome browser on iOS operating systems allows a hacker to replace the content in the URL bar.

The vulnerability of the Omnibox address bar in Google Chrome browsers on iOS operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to replace the content in the URL bar using a specially created domain name...

The vulnerability of Windows Admin Center’s server management tool, related to authentication procedures that allow attackers to escalate their privileges.

The vulnerability of the Windows Admin Center management tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows attackers to bypass the sandboxing protection mechanisms.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the implementation of the Kerberos protocol for Windows operating systems allows a perpetrator to circumvent security restrictions.

The vulnerability of the Kerberos protocol for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the mechanism for destroying arrays containing objects of the PHP interpreter’s object model allows a attacker to bypass the protection provided by disable_functions and invoke operating system commands.

The vulnerability of the mechanism for destroying arrays containing objects of the PHP interpreter’s object model is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the disablefunctions protection mechanism and invoke operating syste...

The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.

The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.

The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Substance 3D Stager software lies in its inability to handle buffer overflow attacks, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in its susceptibility to execution outside the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...

The vulnerability of Adobe Audition’s audio editor lies in the ability to record data beyond the buffer limit in memory, which allows a hacker to cause a service failure.

The vulnerability of Adobe Audition is related to the recording of data beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause a service failure if the user opens a specially crafted file...

The vulnerability of the Ivanti Endpoint Manager Mobile (EPMM) application for managing the lifecycle of mobile devices and applications lies in improper code generation. This allows an attacker to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and applications is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the handleServeStandalone() function in the Mattermost plugin, which allows an attacker to perform a CSRF attack on the Mattermost instant messaging application.

The vulnerability of the handleServeStandalone function in the Mattermost plugin for instant messaging applications is related to the manipulation of cross-site requests when processing the X-Calls-E2E header with a value of “true”. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication switches allows a intruder to cause a service failure.

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the WAGO Software Device Sphere centralized control software and the WAGO Software Solution Builder process optimization software lies in the lack of authentication for a critical function, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the WAGO Software Device Sphere centralized control software and the WAGO Software Solution Builder process optimization software lies in the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of the guc_exec_queue_timedout_job() function in the drivers/gpu/drm/xe/xe_guc_submit.c driver, a part of the Direct Rendering Infrastructure (DRI) support driver for the Linux operating system, allows a malicious actor to trigger a service failure.

The vulnerability of the gucexecqueuetimedoutjob function in the drivers/gpu/drm/xe/xegucsubmit.c driver, a part of the Direct Rendering Infrastructure DRI support driver for the Linux operating system, relates to the reallocation of memory after it is freed. Exploiting this vulnerability could...

The vulnerability of the setWiFiMultipleConfig function in the Totolink N600R router microprogramming system, which allows a hacker to cause a service failure.

The vulnerability of the setWiFiMultipleConfig function in the Totolink N600R router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the sub_412E7C() function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the sub412E7C function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

The vulnerability of the Defender Firewall Service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Defender Firewall Service for Windows operating systems is related to data type conversion errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Windows DWM library in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of unreliable pointers. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the rtnl_create_link function in the include/net/netdev_lock.h library of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtnlcreatelink function in the include/net/netdevlock.h library of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the SolarWinds Observability Self-Hosted (SWOSH) software for network monitoring and IT infrastructure management lies in the lack of security measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the SolarWinds Observability Self-Hosted SWOSH software for network monitoring and IT infrastructure management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...