Firefox Thunderbird DoS

The vulnerability of the postMessage component in the Firefox web browser and the Thunderbird email client is related to the。 Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

WebAssembly DoS

The vulnerability of the WebAssembly component in the Firefox web browser and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Cookies Component Firefox Thunderbird DoS

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client is related to the reliance on cookies without any checks for their authenticity and integrity. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Playback Component Firefox Thunderbird Data Compromise

The vulnerability of the Playback component in the Firefox web browser and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

WebExtensions Component Firefox Thunderbird Data Compromise

The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client involves bypassing authentication processes through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Web Speech Component Firefox Thunderbird

The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

Graphics component WebGPU Firefox Thunderbird Confidential Data Access

The vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kernel posix-cpu-timers Heap Buffer Overflow Privilege Escalation

The vulnerability of the systimerdelete function in the kernel/time/posix-cpu-timers.c file of Linux operating systems is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability can allow an attacker to enhance their privileges and disclose...

Linux STP DoS

The vulnerability of the STP protocol implementation in the Linux kernel’s net/bridge subsystem lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Sneeit Framework Code Execution

The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

trx_addons Plugin Arbitrary File Upload

The vulnerability of the trxaddons plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to load any files remotely...

Ladybird LibJS Code Execution

The vulnerability of the npm library for web development, LibJS, in the Ladybird web browser, is related to synchronization errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JS file...

acfe_module_form_front.render Plugin Code Execution

Vulnerability of the prepareform function in the acfemoduleformfront.render method of the Advanced Custom Fields plugin: This vulnerability is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

BerqWP Plugin RCE

The vulnerability of the api/storejavascriptcache.php file of the BerqWP plugin is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

NGINX Agent config_dirs Unauthorized Access

The vulnerability of the configdirs directive in the NGINX Agent and the NGINX Instance Manager automation platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to read and write arbitrary...

Camera Driver Qualcomm System DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries during the processing of Flash commands. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Camera Driver Qualcomm DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted JPEG commands...

Linux SMB Oplock Buffer Overflow DoS

The vulnerability of the smbgrantoplock function in the fs/smb/server/oplock.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...

Broadcom Linux Wireless Driver

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c file of the Broadcom wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

Linux kernel __xfrm_state_delete Heap Buffer Overflow DoS

The vulnerability of the xfrmstatedelete function in the net/xfrm/xfrmstate.c module, which is part of the Linux kernel’s networking functions, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel create_space_info Btrfs Buffer Overflow

The vulnerability of the createspaceinfo function in the fs/btrfs/space-info.c module of the Linux kernel is related to a bug involving the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Bluetooth SMP smp_cmdPairingReq Buffer Overflow

The vulnerability of the smpcmdPairingReq function in the net/bluetooth/smp.c module of the Linux operating system is related to insufficient security checks for protected connections. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Syslog Server Code Execution

The vulnerability of the Syslog Server server used in managing the virtual infrastructure of VMware vCenter Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

dhclient Code Execution Root

The vulnerability of the dhclient component in FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

FreeBSD Message Handler Code Execution

The vulnerability of the Message Handler component in FreeBSD operating systems is related to the lack of proper checking of the length of user data before it is copied to the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

FreeBSD ioctl Privilege Escalation

The vulnerability of the ioctl request handler CONSHISTORY in FreeBSD operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

FreeBSD Kernel Heap Buffer Overflow DoS

The vulnerability of the dspmmapsingle function in the operating system kernels of FreeBSD is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

FreeBSD Kernel unlinkat funlinkat Data Compromise

The vulnerability of the unlinkat and funlinkat system calls in FreeBSD operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Firefox Thunderbird Buffer Overflow

The vulnerability of Firefox browser and Thunderbird email client lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Firefox ESR Buffer Overflow DoS

The vulnerability in browsers Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Kernel Information Disclosure

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Windows Server Update Service Network Change

The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...

Microsoft Dynamics NAV Code Execution

The vulnerability of the integrated business management system Microsoft Dynamics NAV is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Windows Media Component Code Execution

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SMB Protocol Driver Code Execution

The vulnerability of the SMB protocol driver, Server Network Transport Driver srvnet.sys, in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

FreeBSD SCTP Chunk Parameter Parser DoS

The vulnerability of the SCTP Chunk Parameter Parser component in the operating system kernel of FreeBSD is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

SJCL cryptographic library unauthorized access

The vulnerability of the sjcl.ecc.basicKey.publicKey function in the SJCL Stanford JavaScript Crypto Library is related to the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

FreeBSD tcp_rack.ko Privilege Escalation

The vulnerability of the tcprack.ko module in FreeBSD operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Graphics component WebGPU Firefox Thunderbird DoS

The vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

WPBookit Image Upload Code Execution

The vulnerability of the imageUploadHandle function in the WPBookit plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Termix Server Access Control Unauthorized Access

The vulnerability of the Termix server management software is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

LocationManager Android Unauthorized Access

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

07FLYCMS CSRF

The vulnerability of the 07FLYCMS content management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

Cisco Integrated Management Controller Command Execution Privilege Escalation

The vulnerability of the Web interface for managing Cisco Integrated Management Controllers involves insufficient validation of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and elevate their privileges to the root level...

NSS responder DoS

The vulnerability of the sssnssprotocolparseaddr function in the NSS responder component of the access control service for remote directories and the SSHD authentication mechanism is related to the issue of the operation being executed outside of the buffer. Exploiting this vulnerability could...

Cisco IOS XE Data Compromise

The vulnerability of Cisco IOS XE operating systems is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Cisco Catalyst SD-WAN Access Control

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...