Python-cryptography Elliptic Curve Private Key Disclosure

The vulnerabilities of the functions EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey, and loadpempublickey in the Python-cryptography cryptographic library are related to insufficient validation of data authenticity. Exploiting these vulnerabilities...

Linux KVM Shadow MMU Privilege Escalation

The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...

GNU Binutils Buffer Overflow DoS

The vulnerability of the GNU Binutils development tool lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to trigger a system failure using a malicious file...

BusyBox strip_unsafe_prefix() DoS

The vulnerability of the stripunsafeprefix function in the UNIX command-line utility set of BusyBox is related to external control via a name or file path. Exploiting this vulnerability could allow an attacker to cause a system failure...

nsnave Component DoS

The vulnerability of the nspawn component in the Systemd service initialization and management subsystem is related to the use of an unreliable source. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow Privilege Escalation

The vulnerability of the sctpprocessasconfparam function in the net/sctp/smmakechunk.c module of the Linux kernel is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level...

nltk.pathsec SSRF

The vulnerability of the validatenetworkurl function in the nltk.pathsec component of the NLTK library, a software library for symbolic and statistical processing of natural language, is related to insufficient validation of requests on the server side. Exploiting this vulnerability may allow a...

DedeCMS Setup Code Execution

The vulnerability of the 4Setup function in the DedeCMS content management system’s install/index.php script is related to improper external manipulation of file names or file paths. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows (Positives) (No. 1 from 2026.08.11 10:13:23)

...

PyOpenSSL OpenSSL Buffer Overflow DoS

The vulnerability of the library for accessing functions of the cryptographic library OpenSSL PyOpenSSL is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Python Lib/html/parser Heap Buffer Overflow DoS

The vulnerability of the Lib/html/parser.py component of the Python interpreter is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through the creation of...

BusyBox data_extract_all.c DoS

The vulnerability of the dataextractall.c component of the UNIX utility set in BusyBox is related to external control via a filename or file path. Exploiting this vulnerability can allow an attacker to cause a service failure...

Systemd Service Privilege Management

The vulnerability in the Systemd service initialization and management subsystem is related to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

pam_passkey_child_read_data() DoS

The vulnerability of the pampasskeychildreaddata function in the src/responder/pam/pamsrvpasskey.c file of the access control service for remote directories and the SSSD authentication mechanism is related to a buffer overflow. Exploiting this vulnerability could allow an attacker to cause a...

Util-linux Symbolic Link Access

The vulnerability of the Util-linux command-line utility package relates to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Tenda CH22 Router Command Execution

The vulnerability of the formCertListInfo function in the /goform/CertListInfo file of the Tenda CH22 router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

Python interpreter Path Traversal

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

Pillow ImageFilter RankFilter Filter

The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

FreeBSD kernel Privilege Escalation

The functions jailset and jailget of the FreeBSD operating system have a vulnerability related to memory reclamation errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Termix Server Access Control Unauthorized Access

The vulnerability of the Termix server management software is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

WavePlayer Plugin Arbitrary File Upload Code Execution

The vulnerability of the waveplayercreatelocalcopy function in the WordPress content management system’s plugin, WavePlayer, allows for unlimited loading of malicious files. Exploiting this vulnerability enables a remote attacker to load arbitrary files and execute arbitrary code by loading a...

Camera Driver Qualcomm System DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to the writing beyond the buffer boundaries when processing parameters such as the input batch size and the number of buffer planes. Exploiting this vulnerability can allow an attacker to cause a...

Splunk Enterprise REST API Disclosure

The vulnerability of the REST API implementation of the Splunk Enterprise platform for operational analysis is related to insufficient protection of sensitive data when the |rest command is executed. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sendi...

Splunk Enterprise REST API Unauthenticated Access Code Execution

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to an incorrect limitation on the path name to the $SPLUNKHOME/etc/ directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access t...

Google Chrome GPU DoS

The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Smb File System Heap Buffer Overflow DoS

The vulnerability of the smb2calcmaxoutbuflen function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to incorrect calculation of buffer size during packet processing. Exploiting this vulnerability allows an attacker to compromise the...

Linux SMB2 Compound Operation

The vulnerability of the smb2compoundop function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, relates to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Ceph Auth Buffer Overflow

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and accessibility of...

VMXNET3 Virtual Network Adapter Code Execution

The vulnerability of the VMXNET3 virtual network adapter in the VMware ESX hypervisor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

FreeBSD BOOTP File Handler Code Execution

The vulnerability of the BOOTP File Handler component in the FreeBSD operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

FreeBSD File Descriptor Handler RCE

The vulnerability of the File Descriptor Handler component in the FreeBSD operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

FreeBSD Linuxulator Privilege Escalation

The vulnerability of the Linuxulator component in the kernel of FreeBSD operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

FreeBSD execve Full Control

The vulnerability of the execve system call in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain full control over the system...

libalias RTSP Code Execution

The vulnerability of the RTSP processor in the libalias library of FreeBSD operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FreeBSD compat32 subsystem Disclosure Protected Information

The vulnerability of the compat32 compatibility layer in the Linuxulator kernel of FreeBSD operating systems is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these layers...

.NET Resource Exhaustion DoS

The vulnerability of the .NET software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Network driver Windows Server Code Execution

The vulnerability of the Windows Server operating system’s network driver is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Graphics component WebGPU Firefox Thunderbird Confidential Data Access

Vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves reading data from buffer areas beyond the allowed limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

PT MaxPatrol Privilege Bypass

The vulnerability of the PT MaxPatrol 10 security control system is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity and confidentiality of the protected data...

Firefox Heap Buffer Overflow DoS

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux net/packet/af_packet.c DoS

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Protection component Confidential Data Access

The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Firefox Privilege Management DoS

The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Firefox Popup Blocker Thunderbird Data Compromise

The vulnerability of the Popup Blocker component in the Firefox web browser and Thunderbird email client is related to the false representation of critical information to the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

Firefox Thunderbird Security Bypass

The vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...

IP Protection Component Firefox Thunderbird Confidential Data Access

The vulnerability of the IP Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Firefox Thunderbird Security Bypass

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...