LibSoup SoupAuthDomainDigest Unauthorized Access

The vulnerability of the SoupAuthDomainDigest class in the LibSoup access library is related to the repeated use of a secret word during the generation of cryptographic keys. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Linux multimedia driver Heap Buffer Overflow DoS

The vulnerability of the hi846initcontrols function in the drivers/media/i2c/hi846.c module of the Linux multimedia device driver relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...

S390 Linux __unset_online() DoS

The vulnerability of the unsetonline function in the drivers/s390/cio/css.c module of the S390 platform driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Django SQL Injection

The vulnerability of the Django web application framework lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Linux DRM/Radeon Kernel DoS

The vulnerability of the DRM/Radeon kernel component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a hacker to cause a service failure...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to incorrect external management of file names or file paths. Exploiting this vulnerability can allow an attacker to gain increased privileges...

SMB Server Privilege Escalation

The vulnerability of the SMB server for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges...

TOTOLINK X6000R NTPSyncWithHost Handler Command Execution

The vulnerability of the NTPSyncWithHost handler in the /usr/sbin/shttpd executable of the X6000R router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

NVUE Interface Privilege Escalation

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to privilege assignment errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

TP-Link Archer AX53 tmpserver Module Code Execution

The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

Adobe After Effects Buffer Overflow

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dnsmasq DNS Data Compromise

The vulnerability of the Dnsmasq DNS server is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

OpenSky Flight Planning SQL Injection

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures to protect the SQL query structure during the processing of the search parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Ollama readGGUFV1String Heap Buffer Overflow DoS

The vulnerability of the readGGUFV1String function in the Ollama system, which is used for running and managing large language models LLMs, is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

D-Link D-View Authentication Bypass

The vulnerability of the D-Link D-View software platform relates to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the account and the system...

Rust Binder Driver DoS

The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel relates to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

Graylog Privilege Escalation

The vulnerability of the Graylog log collection, analysis, and storage software lies in the deficiencies of the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Grafana Pyroscope Continuous Profiling Information Disclosure

The vulnerability of Grafana Pyroscope’s continuous profiling software is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

Substance 3D Sampler Buffer Overflow

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

UTT 1250GW strcpy Buffer Overflow

The vulnerability of the strcpy function in the /goform/formUserStatusRemark file of the UTT 1250GW network device software is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Nimes Backup and Recovery Command Injection

The vulnerability of the Nimes Backup and Recovery software for automated backup and data recovery operations is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute...

NTLM Spoofing

The vulnerability of the NTLM NT LAN Manager protocol in Windows operating systems is related to incorrect external handling of file names or file paths when processing hashes. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

OpenVPN Access SAML Assertion Consumer Service XSS

The vulnerability of the SAML Assertion Consumer Service ACS of the OpenVPN Access server is related to the lack of security measures taken for the structure of the web page during the processing of the RelayState parameter. Exploiting this vulnerability allows a malicious actor to execute...

UTT HiPER 840G formPictureUrl DoS

The vulnerability of the formPictureUrl component in the UTT HiPER 840G router microprogramming system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Radware Cloud Special Character Handler Disclosure

The vulnerability of the Special Character Handler component in the Radware Cloud software firewall is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created HTTP request...

Design Operation Maintenance Man-in-the-Middle

The vulnerabilities of the software for designing, operating, and maintaining technological installations—COMOS, Simcenter 3D, and Simcenter Femap—are related to errors in the authentication process. Exploiting these vulnerabilities can allow a remote attacker to carry out a “man-in-the-middle”...

Undertow HTTP Server SSRF

The vulnerability of the Undertow HTTP server’s kernel is related to errors in the mechanism for checking input data when processing Host headers. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack by sending a specially crafted request...

Windows Cloud Files Mini Filter Driver Privilege Escalation

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems involves a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

SROOT Component Code Execution

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for DGX Spark AI systems is related to an unvalidated return value, which leads to the dereferencing of a zero pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code, cause service failures, o...

CMS BuilderEngine RCE

The vulnerability of the CMS BuilderEngine content management system is related to the unlimited uploading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute malicious code...

NVIDIA GPU Display Driver Uncontrolled Search Path

The vulnerability of the NVIDIA GPU Display Driver is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, and forge protected information...

Linux DRI DoS

The vulnerability of the gucexecqueuetimedoutjob function in the drivers/gpu/drm/xe/xegucsubmit.c driver, a part of the Direct Rendering Infrastructure DRI support driver for the Linux operating system, relates to the reallocation of memory after it is freed. Exploiting this vulnerability could...

Azure Managed Redis Cache for Redis Privilege Escalation

The vulnerability of Azure Managed Redis and Azure Cache for Redis Enterprise data caching services is related to improper authentication. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Tenda ax1803 Stack Overflow Code Execution

The vulnerabilities of the functions fromAdvSetMacMtuWan, wanSpeed, cloneType, and the microprogramming software for Tenda ax1803 are related to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to trigger a stack overflow or execute arbitrary code...

Windows File Explorer Driver Spoofing

The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

PyTorch to_sparse DoS

The vulnerability of the torch.Tensor.tosparse and torch.Tensor.todense methods in the PyTorch machine learning framework is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FFmpeg Heap Buffer Overflow RCE

The vulnerability of the rlerawsize function in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

TP-Link AX10/AX1500 Router Code Execution

The vulnerability of the ARP protocol implementation in TP-Link AX10 and AX1500 router microprogramming systems is related to information disclosure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TOTOLINK downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

D-Link DIR-852 Router Command Execution

The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

Baidu Antivirus BdApiUtil Terminate Process

The vulnerability of the driver BdApiUtil of Baidu Antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary system processes by introducing the malicious driver into the system...

Google Chrome Microsoft Edge Spoofing

The vulnerability of the browser toolbars in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

Linux rtnl_create_link Buffer Overflow DoS

The vulnerability of the rtnlcreatelink function in the include/net/netdevlock.h library of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Storage Manager Brute Force

The vulnerability of the Storage Manager software in the MEAC300-FNADE4 industrial digital gas analyzer is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack...

Elastic Agent Service Data Compromise

The vulnerability of the server-side software for managing Elastic Agent agents and the Elastic Security Endpoint protection software is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected...

Realtek RTL8762E BLE DoS

The vulnerability of the Bluetooth Low Energy BLE technology of Realtek’s RTL8762E software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a service failure...

libblinkapi.so Heap Buffer Overflow DoS

The vulnerability of the bsGetHostInfo function in the libblinkapi.so library, located in the /cgi-bin/lighttpd.cgi file of the LB-LINK router software, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to disclose sensitive informati...

NVIDIA Triton Inference Server Integer Overflow DoS

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause service failures...

NVIDIA Triton Inference Server Integer Overflow DoS

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause service failures...

Cisco Spaces Connectors RCE

The vulnerability of the data collection and aggregation application from Cisco Spaces Connector relates to the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary...