The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or trigger a denial-of-service attack.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome and Microsoft Edge browser password managers allows attackers to bypass security restrictions.

The vulnerability of Google Chrome and Microsoft Edge browser password managers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Teamcenter product lifecycle management system, related to insufficient protection of the website structure, allows a hacker to execute arbitrary code.

The vulnerability of the Teamcenter product lifecycle management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE allows a perpetrator to gain unauthorized access to read, create, and delete data.

The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read,...

The vulnerability of the programming platform’s analytics panel based on Git, which is used for collaborative code development in GitLab EE, allows a perpetrator to execute arbitrary code.

The vulnerability of the programming platform’s analytics panel based on Git for collaborative code development in GitLab EE is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Rapid Diffs mechanism in the Git-based software platform for collaborative code development in GitLab EE/CE allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Rapid Diffs mechanism in the Git-based software platform for collaborative code development in GitLab EE/CE relates to the absence of authentication. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access to protected information...

The vulnerability of the OData service of the SAP S/4HANA software platform allows attackers to compromise the integrity of the protected information.

The vulnerability of the OData service of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the Splunk MCP Server application for data processing and analysis lies in the insufficient protection of registration data, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Splunk MCP Server data processing and analysis application is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `cache_fuse_add_dirent_to_cache()` function in the `fs/fuse/readdir.c` module of the Linux operating system allows a hacker to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the cachefuseadddirenttocache function in the fs/fuse/readdir.c module of the Linux operating system is related to the execution of operations outside the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gai...

The vulnerability of the App Router module in the Next.js software development platform allows attackers to disclose sensitive information that should be protected.

The vulnerability of the App Router module in the Next.js software development platform is related to the improper processing of syntaxically incorrect structures. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

The vulnerability of the Network component in Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome browser’s Network component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Dawn component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Dawn component in the Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the decoder in the Protocol Buffers library allows a attacker to cause a service failure.

The vulnerability of the decoder in the Protocol Buffers-based library related to Protocol Buffers Protobuf protobufjs is associated with an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the toObject() function in the Protocol Buffers library allows a attacker to execute arbitrary code.

The vulnerability of the toObject function in the Protocol Buffers library, which is used for working with Protocol Buffers, is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Cacti network monitoring software lies in errors during the verification of the cryptographic signature, allowing a hacker to execute arbitrary code.

The vulnerability of the Cacti network monitoring software is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the FileBackedSessionManager mechanism in the pgAdmin 4 database management tool allows a hacker to execute arbitrary code.

The vulnerability of the FileBackedSessionManager mechanism in the pgAdmin 4 database management tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the password blocking mechanism (MAX_LOGIN_ATTEMPS) in the pgAdmin 4 database management tool allows a malicious user to gain unauthorized access to protected information. [source-iocs-preserved const=MAX_LOGIN_ATTEMPTS]

The vulnerability of the password blocking mechanism MAXLOGINATTEMPS of the pgAdmin 4 database management tool is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of the `build_exclusive_url` method in the Faraday HTTP request processing library for the Ruby programming language allows a attacker to perform an SSRF attack.

The vulnerability of the buildexclusiveurl method in the Faraday HTTP request processing library for the Ruby programming language is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass existing security restrictions.

The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

The vulnerability of the `virtio_gpu_plane_prepare_fb()` function in the Linux kernel’s drivers/gpu/drm/virtio/virtgpu_plane.c file allows a hacker to cause a service failure.

The vulnerability of the virtiogpuplanepreparefb function in the drivers/gpu/drm/virtio/virtgpuplane.c file of the Linux kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the lapbeth_get_x25_dev() function in the drivers/net/wan/lapbether.c module of the Linux kernel network device driver allows a hacker to cause a service failure.

The vulnerability of the lapbethgetx25dev function in the drivers/net/wan/lapbether.c module of the Linux kernel network device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fromSafeUrlFilter() function in the httpd daemon of the microprogramming-based router software Tenda F456 allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSafeUrlFilter function in the httpd daemon of the microprogramming-based router software Tenda F456 is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a...

The vulnerability of the setIptvCfg() function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setIptvCfg function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the vlanPriLan3 parameter. Exploiting this vulnerability allow...

The vulnerability of the Cast component in browsers such as Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows attackers to expose protected information or cause service interruptions.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the Input component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the Printing component in Google Chrome and Microsoft Edge browsers allows attackers to bypass the sandboxing protection mechanisms.

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

The vulnerability of the Cast Streaming component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Cast Streaming component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

iOS-MacOS (Positives) (No. 1 from 2026.07.02 09:03:30)

...

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the importExternalTexture method in the Web page rendering module of the Safari browser for iOS operating systems, iPadOS, and macOS allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the importExternalTexture method in the WebPageRendering module of the WebKit browser engine for Safari operating systems, iPadOS, and macOS is related to deficiencies in the mechanism for verifying data sources when processing web content. Exploiting this vulnerability can...

The vulnerability of the SAP S/4HANA software platform, related to the lack of authorization, allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the library for working with the Protocol Buffers protocol (Protobuf) protobufjs lies in the uncontrolled modification of object prototype attributes, allowing attackers to increase their privileges.

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the sctp_sched_prio_free_sid() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the sctpschedpriofreesid function in Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Cacti network monitoring software lies in the incorrect path name limitation, which allows attackers to carry out phishing attacks.

The vulnerability of the Cacti network monitoring software is related to an incorrect limitation on the path name to the directory when processing the formatfile parameter. Exploiting this vulnerability allows a remote attacker to perform phishing attacks...

The vulnerabilities of the Browser Tree and Explain Visualizer modules in the pgAdmin 4 database management tool allow attackers to execute arbitrary JavaScript code.

The vulnerability of the Browser Tree and the Explain Visualizer modules in the pgAdmin 4 database management tool exists due to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code...

The vulnerability of the graphics processor in Google Chrome browsers on Windows operating systems, which allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the graphics processor in Google Chrome browsers on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing protection mechanisms by using a specially created HTML page...

The vulnerability of Google Chrome’s graphics processor allows a hacker to gain access to confidential information.

The vulnerability of Google Chrome’s graphics processor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential information through a specially created HTML page...

The vulnerability of Google Chrome’s Password Manager component allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s Password Manager component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

The vulnerability of Google Chrome’s WebGPU component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

The vulnerability of Azure Synapse analytics services, related to errors in privilege management, allows attackers to escalate their privileges.

The vulnerability of Azure Synapse cloud analytics service is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the f2fs_io_schedule_timeout() function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux kernel allows a attacker to trigger a service failure.

The vulnerability of the f2fsioscheduletimeout function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux’s kernel involves executing a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the Pixel platform’s module for handling client data in Altcraft, related to the insufficient measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Pixel platform’s client data handling module, Altcraft, is related to the lack of adequate measures to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of Google Chrome’s Skia graphic library allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the cloud platform for creating and deploying intelligent chatbots with the Azure AI Bot Service, related to authentication procedures’ deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Azure AI Bot Service, a cloud platform for creating and deploying intelligent chatbots, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges remotely...

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to increase their privileges...