Linux kernel Heap Buffer Overflow DoS

The vulnerability of the nvmetdatatransferlen function in the drivers/nvme/target/core.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

TOTOLINK X15 Router Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...

HPE StoreOnce VSA Disclosure

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized environment is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information from ...

Linux j1939_session_deactivate() DoS

The vulnerability of the j1939sessiondeactivate function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

LlamaIndex get_article_urls() DoS

The vulnerability of the getarticleurls function in the KnowledgeBaseWebReader class of the LlamaIndex framework, which is used for working with large language models, is related to an uncontrolled resource consumption when processing the maxdepth parameter. Exploiting this vulnerability could...

IBM InfoSphere Information Server Unencrypted Storage

The vulnerability of the IBM InfoSphere Information Server software platform lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data...

OneDev Service Data Read Arbitrary Files

The vulnerability of the OneDev collaborative development platform is related to insufficient protection for service data. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

WAVLINK QUANTUM D2G Plugin Code Execution

The vulnerability of the syslogin function in the /cgi-bin/login.cgi script of the WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3, and WL-WN576K1 routers is related to the copying of buffers without checking the size of the input data during the processing of the loginpage...

VideoGrace DoS

The vulnerability of VideoGrace video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Mojo Library Code Execution

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Cisco AnyConnect DoS

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway network devices is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

HMI configuration software VS6EditData!CDrawSLine::GetRectArea() Unauthenticated RCE

The vulnerability of the VS6EditData!CDrawSLine::GetRectArea function of the HMI configuration software for Monitouch V-SFT is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

VS6ComFile!MakeItemGlidZahyou() function in the Code Execution

The vulnerability of the VS6ComFile!MakeItemGlidZahyou function in the HMI configuration software for Monitouch V-SFT lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

PCMan FTP Server Buffer Overflow DoS

The vulnerability of the FTP server PMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Monitouch V-SFT VS6EditData!VS4_SaveEnvFile Heap Buffer Overflow Privilege Esc

The vulnerability of the VS6EditData!VS4SaveEnvFile function of the HMI configuration software for Monitouch V-SFT lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

APOGEE PXC TALON TC Encryption Unauthorized Access

The vulnerability of the microprogramming software of APOGEE PXC and TALON TC is related to insufficiently secure data encryption. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the alloctaggingslabfreehook function in the Linux kernel’s memory management subsystem is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

UserGate XMLRPC Disclosure

The vulnerability of the XMLRPC software on the UserGate Next-Generation Firewall NGFW, as well as the UserGate Management Center UGMC and the UserGate Log Analyzer LogAn system, is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...

Zabbix UI Code Execution

The vulnerability in the Zabbix UI of the IT infrastructure monitoring system is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to enhance their privileges within the system and execute arbitrary code...

Windows Media Component Code Execution

The vulnerability of the Windows Media component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cobalt Ashlar-Vellum Buffer Overflow

The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the reading of data beyond the buffer limit in memory during the processing of CO files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Moodle Unauthorized Access

The vulnerability of the Moodle virtual learning environment’s web service is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user data...

PHP TCPDF Path Traversal Unauthorized Access

The vulnerability of the PHP library TCPDF lies in the incorrect path limitation for the access to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

E-Staff automated recruitment process system Unauthorized Access

The vulnerability of the E-Staff recruitment process automation system is related to data filtering errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the dosysperfeventopen function in the kernel/events/core.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

dpll_nl_pin_get_dumpit Heap Buffer Overflow DoS

Vulnerability of the dpllnlpingetdumpit function in the drivers/dpll/dpllnetlink.c module – The DPLL driver support in Linux kernels is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause service failures...

ASS/SSA Libass subtitle renderer Heap Buffer Overflow DoS

The vulnerability of the assoutlineconstruct function in the ASS/SSA Libass subtitle renderer is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Google Chrome Custom Tabs Privilege Escalation

The vulnerability of Google Chrome’s Custom Tabs component is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

Grassroots DiCoM JPEG2000Codec Decode Buffer Overflow DoS

The vulnerability of the JPEG2000Codec::DecodeByStreamsCommon function, a tool for working with DICOM images in Grassroots DiCoM, is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidenti...

VTK xmlTreeReader Heap Buffer Overflow DoS

The vulnerability of the xmlDocGetRootElement function in the IO/Infovis/vtkXMLTreeReader.cxx component of the VTK image processing library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

AMD Ryzen AI Integer Overflow

The vulnerability of software for optimizing and deploying AI-based applications related to AMD Ryzen AI is associated with a numerical overflow condition. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...

XWiki Privileged API Access

The vulnerability of the XWiki Platform relates to errors that occur when using privileged application programming interfaces APIs. Exploiting this vulnerability can allow a malicious actor to gain access to read, modify, and delete user accounts...

Apache OpenMeetings Memory Compromise

The vulnerability of Apache OpenMeetings video conferencing software lies in the recovery of unreliable data from memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

nouveau nouveau_gem_new Heap Overflow DoS

Vulnerability of the nouveaugemnew function in the drivers/gpu/drm/nouveau/nouveaugem.c module – The driver that supports Direct Rendering Infrastructure DRI for NVIDIA video cards in the Linux operating system is vulnerable due to the reutilization of previously freed memory. Exploiting this...

Linux kernel I2C STM32F7 Buffer Overflow

The vulnerability of the stm32f7i2cxfer function in the drivers/i2c/busses/i2c-stm32f7.c module of the operating system’s kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Siemens Industrial Edge Management XSS

The vulnerability of the platform for centralized management of industrial peripheral applications and Siemens Industrial Edge Management devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

Teamcenter Visualization Buffer Overflow Code Execution

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to buffer overflow attacks involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...

FortiWeb web applications Network Firewall Bypass Command Execution

The vulnerability of FortiWeb web applications’ network firewalls is related to the improper processing of syntaxically incorrect structures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands by sending specially crafted HTTP/S...

Cisco IOS XR BGP DoS

The vulnerability of the BGP routing protocol implementation in Cisco IOS XR operating systems lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted BGP reques...

PHP HTTP Request Smuggling

The vulnerability of the PHP programming language interpreter is related to deficiencies in the processing of HTTP request headers. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP Request Smuggling attack...

Qnap Network Device Authentication Bypass

The vulnerability of the Qnap network device support automation system is related to errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device remotely...

ArcGIS Server XSS

The vulnerability of ArcGIS Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

IObit Uninstaller Heap Buffer Overflow DoS

The vulnerability of the functions 0x8001E000, 0x8001E00C, 0x8001E004, and 0x8001E010 of the system file IURegistryFilter.sys in the IObit Uninstaller uninstaller software is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

phpGACL Template XSS

The vulnerability of the phpgacl/acladmin.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the action template parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site...

SYSMAC FINS Unauthorized Access Command Execution

The vulnerability of the Factory Interface Network Service FINS protocol implemented in SYSMAC programmable logic controllers is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to sensitive informati...

iio Component DoS

The vulnerability of the iio component in the Linux operating system’s kernel is related to improper validation of input data in the afe4403readraw function. Exploiting this vulnerability can allow an attacker to cause service failures...

SPID.AspNetCore.Authentication Unauthorized Access

The vulnerability of the SPID.AspNetCore.Authentication library in the ASP.NET Core software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending specially crafted...

D-Link DIR-853 A1 Router DoS

The vulnerability in the prog.cgi script of the SetQuickVPNSettings module of the D-Link DIR-853 A1 router operating system is related to buffer overflow during the processing of the Password parameter. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...