openSUSE Compromise Protected Information

The adm8211-kmp-debug package of the OpenSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the polkit-qt-0.103.0 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libgda2-ruby package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libgnomevfs2-ruby package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Local Compromise Data Compromise

The multiple vulnerabilities in the udev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

Debian GNU/Linux Local Compromise Data Compromise

The multiple vulnerabilities in the xboing package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

Debian GNU/Linux Remote Compromise Protected Information

The hostap-modules-2.4.27-4-k7 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the kernel-headers-2.4.27-4-sparc64-smp Debian GNU/Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...

OpenSUSE Data Compromise

The multiple vulnerabilities in the ppc64-diag-debugsource package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the autofs-5.0.1 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

Red Hat Linux Data Compromise

The multiple vulnerabilities in the cross-ppc64 operating system of the Red Hat Linux package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

OpenSUSE Data Compromise

The multiple vulnerabilities in the cloop-debugsource package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

OpenSUSE Data Compromise

The multiple vulnerabilities in the cloop-kmp-desktop package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The multiple vulnerabilities in the netpbm-progs-10.25 package of the Red Hat Enterprise Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Webasyst Shop-Script CMS Code Execution

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

iFlightDoc Path Traversal Unauthorized Access

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

CrocoTime employee working time management system Code Execution

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FortiOS Certificate Authenticity Verification

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

Linux net/ceph/osdmap crush_decode Heap Buffer Overflow

The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

Linux drivers/greybus/gb-beagleplay.c Heap Buffer Overflow

The vulnerability of the cc1352bootloaderrx function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Linux cdns_resume() Buffer Overflow DoS

The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux TPM-core Device Driver Heap Buffer Overflow DoS

The vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module of the Linux TPM-devices driver module is related to improper inter-process communication for critical data deletion. Exploiting this vulnerability could allow an attacker to cause a service failure...

NDR RDPEAR RDP-client Parser Unauthorized Access

The vulnerability of the NDR RDPEAR RDP-client FreeRDP lies in the reading of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

DIAFAN.CMS SQL Injection

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WPE WebKit DoS

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft Office Excel 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

drivers/usb/dwc3/host.c Heap Buffer Overflow DoS

The vulnerability of the dwc3hostinit function in the drivers/usb/dwc3/host.c file of the DesignWare USB3 controller support driver in the Linux operating system is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Next.js beforeInteractive() Code Execution

The vulnerability of the beforeInteractive function in the Next.js web application development software platform is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PHP urldecode DoS

The vulnerability of the urldecode function in the PHP programming language is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

Secure Boot Bypass

The vulnerability of the Secure Boot implementation for Windows operating systems lies in the dependency on a component that cannot be updated. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

Windows TCP/IP Privilege Escalation

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

oui-httpd rpc Heap Buffer Overflow DoS

The vulnerability of the dlopen function in the library /usr/lib/oui-httpd/rpc of the microprogramming software for routers GL.iNet GL-MT3000 is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

Media component UI Replacement

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

LibreChat HTTP Request Handler XSS

The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Blink Rendering DoS

The vulnerability of the Blink module in Google Chrome and Microsoft Edge browsers is related to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause service interruptions...

BuildKit Path Traversal

The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PyPDF2 Excessive Iteration DoS

The vulnerability of the PyPDF2 library for processing PDF files is related to excessive iteration. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Microsoft Defender Antimalware Platform Resource Consumption DoS

The vulnerability of Microsoft Defender Antimalware Platform relates to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

XCP-ng RBAC HVM Serial Write Access

The vulnerability of the hvmserial component in the Role-Based Access Control RBAC access management subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor,...

LoLLMS create_post XSS

The vulnerability of the createpost function in the system for launching and managing large language models of LoLLMS Lord of Large Language Multimodal Systems is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to...

Individual CRM Web Application XSS

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, проводить межсайтовые сценарные атаки XSS...

Bitrix24 CMS Code Execution

Vulnerability of the landing module of the Bitrix24 business management service for content management systems CMS: Website management is related to incorrect handling of file names used in PHP functions like include or require. Exploiting this vulnerability allows a malicious actor to execute...

Redirected Drive Buffering System DoS

The vulnerability of the Redirected Drive Buffering System RDBS is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel memblock_set_node Heap Buffer Overflow DoS

The vulnerability of the memblocksetnode function in the mm/memblock.c module of the Linux kernel’s memory management subsystem is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

kvm_arch_vcpu_ioctl() ARM64 Kernel DoS

The vulnerability of the kvmarchvcpuioctl function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Blink Rendering Compromise

The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

BeyondTrust Remote Support Privilege Escalation

The vulnerability of the BeyondTrust Remote Support remote support tool and the BeyondTrust Privileged Remote Access remote access tool is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a...