IP Protection Component Firefox Thunderbird Confidential Data Access

The vulnerability of the IP Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Firefox Thunderbird Security Bypass

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...

Networking component: The JAR

Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird are vulnerable due to a lack of source verification mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

WebRTC Audio Video DoS

The vulnerability of the WebRTC component: The Audio/Video features in the Firefox web browser and the Thunderbird email client are related to insecure privilege management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Metabase SQL Injection

The vulnerability of the application software interface for password reset, data visualization, and report creation in the Metabase tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

Containous Traefik Sensitive Information Disclosure

The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, is related to HTTP request processing flaws. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Traefik nameAndService() Unauthenticated Access Disclosure

The vulnerability of the nameAndService function in the pkg/provider/kubernetes/crd/kuberneteshttp.go file, which is part of the integration provider for Kubernetes’ CRD reverse proxy server Containous Traefik, is related to insufficient spatial partitioning. Exploiting this vulnerability could...

Traefik BasicAuth CheckPassword() Unauthenticated Access

The vulnerability of the CheckPassword function in the pkg file, located in the middlewares/auth/basicauth.go section of the Traefik BasicAuth intermediate software, is related to vulnerabilities in the authentication process. Exploiting this vulnerability could allow an attacker, operating...

ClamAV index_local_file_headers Heap Buffer Overflow DoS

The vulnerability of the indexlocalfileheaders function in the libclamav/unzip.c file of the ClamAV antivirus program is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ClamAV scanfd() Unauthenticated Access

The vulnerability of the scanfd function in the clamd/scanner.c file of the ClamAV antivirus program is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ClamAV index_local_file_headers_within_bounds() Code Execution

The vulnerability of the indexlocalfileheaderswithinbounds function in the libclamav/unzip.c file of the ClamAV antivirus program is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failures...

LocationManager Android Unauthorized Access

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Progress Kemp LoadMaster Command Execution

The vulnerability of the load balancing device Progress Kemp LoadMaster lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

simple-file-list plugin WordPress Code Execution

The vulnerability of the simple-file-list plugin in the WordPress content management system involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

is-is-arrayish Code Execution

The vulnerability of the npm library isarrayish is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

secrets-store-csi-driver Unauthorized Access

The vulnerability of the secrets-store-csi-driver driver in the Kubernetes cluster management software is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Ninja Forms Plugin Code Execution

The vulnerability of the NFFUAJAXControllersUploads::handleUpload function in the File Uploads extension of the Ninja Forms plugin is related to the ability to upload files of a dangerous type without restrictions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

Breeze Cache Plugin Code Execution

The vulnerability of the fetchgravatarfromremote function in the Breeze Cache plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

WPvivid Backup & Migration Plugin Code Execution

The vulnerability of the opensslprivatedecrypt function in the WPvivid Backup & Migration plugin of the WordPress content management system is related to the ability to download unlimited files of a dangerous type. Exploiting this vulnerability allows an attacker, operating remotely, to execute...

GutenKit Plugin Arbitrary File Upload

The vulnerability of the installandactivatepluginfromexternal function of the GutenKit plugin – which is used for Page Builder Blocks, Patterns, and Templates in the Gutenberg Block Editor of the WordPress content management system – is related to the lack of authentication. Exploiting this...

NGINX Ingress Controller DoS

The vulnerability of the Ingress and TransportServer components of the NGINX Ingress Controller monitoring and management platform is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause service interruptions...

NGINX Ingress Controller Arbitrary Configuration Injection DoS

The vulnerability of the Ingress components and Custom Resource Definitions CRDs of the NGINX Ingress Controller monitoring and management platform is related to the lack of measures taken to neutralize special elements during the processing of string values. Exploiting this vulnerability allows ...

Camera Driver Qualcomm DoS Execution Code

The vulnerability of the Camera Driver microprogramming software in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted commands containing...

Splunk Web Deployment Server Arbitrary SPL Command Information Disclosure

The vulnerability of the Deployment Server web interface of the Splunk Web platform for operational analysis in Splunk Enterprise relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary SPL commands and disclose sensitive...

Smb Heap Buffer Overflow DoS

The vulnerability of the maybeforkscalars function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise t...

Linux NFC Digital_in_recv_sdd_res buffer overflow DoS

The vulnerability of the digitalinrecvsddres function in the net/nfc/digitaltechnology.c module of the NFC subsystem of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to influence the...

SMB Server Buffer Overflow DoS

The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

Linux structnf_queue_entry Buffer Overflow

The vulnerability of the structnfqueueentry function in the include/net/netfilter/nfqueue.h module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

VMware Directory Service Unauthorized Access

The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtual infrastructure management tool, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

FreeBSD msync Privilege Escalation

The vulnerability of the msyncMSINVALIDATE function in FreeBSD operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

FreeBSD IPV6_MSFILTER Privilege Escalation

The vulnerability of the socket parameter handler IPV6MSFILTER in FreeBSD operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

FreeBSD KTLS DoS

The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

FreeBSD Linuxulator waitid() Disclosure

The vulnerability in the implementation of the waitid system call layer of the Linuxulator kernel in FreeBSD operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security...

Local Security Authority Subsystem Service DoS

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

NTFS File System Code Execution

The vulnerability of the NTFS file system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Hyper-V Privilege Escalation

The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

File History Backup Privilege Escalation

The vulnerability of the File History backup application for the Windows operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

USB Print Driver Privilege Escalation

The vulnerability of the USB Print Driver driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux kernel tls_swCancelWorkTx function Data Compromise

The vulnerability of the tlsswCancelWorkTx function in the net/tls/tlssw.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

Graphics component Firefox Confidential Data Access

The vulnerability of the Graphics component in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

TrueConf Server Authentication Bypass Privilege Escalation

The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...

TrueConf Server Code Execution

The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Firefox Thunderbird Security Bypass

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Audio/Video Component DoS

The vulnerability of the Audio/Video component: Playback in Firefox web browser and Thunderbird email client involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Password Manager Component Firefox Confidential Data Access

The vulnerability of the Password Manager component in the Firefox web browser is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

Firefox WebAssembly XSS

JavaScript component vulnerability: Firefox’s WebAssembly browser is vulnerable due to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to access sensitive data and compromise its integrity...

Widget Component DoS

The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attacker to cause service failures...

Firefox Thunderbird DOM DoS

Vulnerability of the DOM component: The Core and HTML components of the Firefox web browser and Thunderbird email client are vulnerable due to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to cause service interruption...