The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libgsf-x86 package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the qt3-devel-doc package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information

The adm8211-kmp-xen package of the OpenSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information

The USBVision-KMP-XEN operating system package has multiple vulnerabilities that, if exploited, may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the gpg package in the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the file-64bit operating system package of openSUSE. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC) allows a perpetrator to execute arbitrary commands and increase their privileges.

The vulnerability of the Web interface for managing Cisco Integrated Management Controllers involves insufficient validation of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and elevate their privileges to the root level...

The vulnerability of embedded software developed by Qualcomm relates to the ability to write any arbitrary value anywhere in the buffer, allowing a malicious actor to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips lies in the ability to write any value anywhere and to overflow the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the ReadSFWImage() function in the ImageMagick console graphics editor’s coders/sfw.c file allows a hacker to induce a service failure.

The vulnerability of the ReadSFWImage function in the ImageMagick console graphics editor’s coders/sfw.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) relates to the occurrence of operations outside the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

The vulnerability of the JavaScript function in the Protocol Buffers (Protobuf) library called protobufjs, which allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript function in the Protocol Buffers Protobuf library, called protobufjs, is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WebView component of the Google Chrome browser on Android operating systems allows a hacker to gain access to confidential information.

The vulnerability of the WebView component in Google Chrome’s Android operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information through a specially created HTML page...

The vulnerability of the checkstackGC() function in the Lua script interpreter allows a attacker to trigger a service failure.

The vulnerability of the checkstackGC function in the Lua script interpreter is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the SimpleTrustManagerFactory component in the TSL client framework for network application development, servers, and Netty protocol clients allows a attacker to carry out a type of “man-in-the-middle” attack.

The vulnerability of the SimpleTrustManagerFactory component in the TSL client of the networking application development framework for Netty involves errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle”...

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise products relates to a flaw in data protection mechanisms, allowing attackers to circumvent security restrictions.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise products is related to a flaw in data protection mechanisms. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to synchronization errors when using a shared resource, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages stems from deficiencies in the deserialization mechanism, allowing attackers to exploit their privileges.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the FreeCounter() function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to escalate their privileges and cause service failures.

The vulnerability of the FreeCounter function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow a malicious...

The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor involves the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client and the Microsoft Word text editor is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Hyper-V component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on macOS operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the node-tmp package on the Node.js software platform allows attackers to compromise the confidentiality of protected information.

The vulnerability of the node-tmp package on the Node.js software platform is related to an incorrect limitation on the path name of the directory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of the protected information...

The vulnerability of the GenericInlineModelAdmin class in the Django web development framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GenericInlineModelAdmin class in the Django web development framework is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Poetry dependency manager in the Python programming language arises from incorrect restrictions on path names in the directory structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Poetry dependency manager in the Python programming language is related to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the access control model for the container registry in the Git repository management system Gitea allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the access control model for the container registry in the Git repository management system Gitea is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the application software interface of the ChromaDB database allows a perpetrator to execute arbitrary code.

The vulnerability of the application software interface of the ChromaDB database management system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the map_keys_roles() function in the RBAC role management subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform allows a perpetrator to bypass existing security mechanisms.

The vulnerability of the mapkeysroles function in the RBAC role management subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms...

The vulnerability of the Connection.bind() function in the Open WebUI (formerly Ollama WebUI) web interface allows a hacker to bypass existing security mechanisms.

The vulnerability of the Connection.bind function in the Open WebUI formerly Ollama WebUI AI-based web interface is related to deficiencies in the authentication process when processing the password parameter: str. Exploiting this vulnerability allows a malicious actor to bypass existing security...

The vulnerability of the IKEv2 VPN server implementation in the operating system PAN-OS allows a perpetrator to cause a service failure.

The vulnerability of the IKEv2 VPN server implementation in the PAN-OS operating system is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of measures taken to neutralize special elements in the output data, allowing attackers to perform spoofing attacks.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to perform spearishing attacks...

The vulnerability of Windows operating systems, related to access control errors, allows attackers to escalate their privileges.

Vulnerabilities of Windows operating systems are related to access control errors. Exploiting these vulnerabilities can allow attackers to increase their privileges...

The vulnerability of the Microsoft Outlook email client on iOS operating systems, related to the lack of data cleaning at the management level, allows attackers to execute arbitrary commands.

The vulnerability of the Microsoft Outlook email client on iOS operating systems is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of Google Chrome’s GPU component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s GPU component is related to a numerical overflow condition. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the mptcp_recvmsg() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mptcprecvmsg function in the Linux operating system is related to the lack of input validation for cyclic operations. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the remote image blocking function in the RoundCube Webmail client allows attackers to disclose protected information.

The vulnerability of the delete block function in the RoundCube Webmail email client is related to the lack of validation for incoming requests. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the `setUpgradeFW()` function in the `cgi-bin/cstecgi.cgi` script of the TOTOLINK N300RH router’s microprogramming software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the setUpgradeFW function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router microprogramming system is related to the escape operation from memory buffers when processing the FileName variable. Exploiting this vulnerability allows an attacker to execute arbitrar...

The vulnerability of the GC component in the Firefox web browser and the Thunderbird email client allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the GC component in the Firefox web browser and the Thunderbird email client is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise...

The vulnerability of the __unmap_hugepage_range() function in the mm/hugetlb.c file of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the unmaphugepagerange function in the mm/hugetlb.c file, belonging to the memory management subsystem of the Linux kernel, is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.

The vulnerability of the ShareFile content-sharing software’s storage controller relates to the unlimited download of files of a malicious nature. Exploiting this vulnerability could allow an attacker to remotely alter system configurations and execute arbitrary code...

The vulnerability of the /api/v1/attachments component of the software platform for creating custom interfaces based on Language Models (LLMs) from Flowise allows a malicious actor to gain access to the ability to upload any files.

The vulnerability of the /api/v1/attachments component of the software platform for creating user interfaces based on Language Models LLM from Flowise is related to the ability to download files of a dangerous type without restrictions. Exploiting this vulnerability could allow an attacker...

The vulnerability of the elem_size() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the elemsize function in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the enhanceRequest function in the Fastify Node.js software framework is related to the occurrence of interpretation conflicts when processing HTTP header names and values. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access systems lies in the fact that they allow functions to be accessed from an untrusted controlled area, enabling attackers to compromise the confidentiality of protected information.

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access lies in the fact that these systems enable functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to compromise the confidentiality of protected information...

The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale involve the exposure of information through registration files, allowing attackers to gain unauthorized access to protected data and enhance their privileges.

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the exposure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information and enhance their privileges...

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass security restrictions.

The vulnerability of the DevTools suite for web development in Google Chrome relates to a data protection mechanism flaw. Exploiting this vulnerability allows an attacker to circumvent security restrictions by downloading malicious extensions remotely...

The vulnerability of the WebML component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the GNU Binutils development tool, related to reading beyond the buffer boundaries in memory, allows an attacker to disclose protected information or cause system failures.

The vulnerability of the GNU Binutils development tool lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

The vulnerability of the msm_dsi_host_init() function in the drivers/gpu/drm/msm/dsi/dsi_host.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmdsihostinit function in the drivers/gpu/drm/msm/dsi/dsihost.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...