Util-linux Symbolic Link Access

The vulnerability of the Util-linux command-line utility package relates to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Linux KVM Shadow MMU Privilege Escalation

The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...

nltk.pathsec SSRF

The vulnerability of the validatenetworkurl function in the nltk.pathsec component of the NLTK library, a software library for symbolic and statistical processing of natural language, is related to insufficient validation of requests on the server side. Exploiting this vulnerability may allow a...

Linux kernel Heap Buffer Overflow Privilege Escalation

The vulnerability of the sctpprocessasconfparam function in the net/sctp/smmakechunk.c module of the Linux kernel is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level...

Tenda CH22 Router Command Execution

The vulnerability of the formCertListInfo function in the /goform/CertListInfo file of the Tenda CH22 router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

GNU Binutils Buffer Overflow DoS

The vulnerability of the GNU Binutils development tool lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to trigger a system failure using a malicious file...

Python-cryptography Elliptic Curve Private Key Disclosure

The vulnerabilities of the functions EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey, and loadpempublickey in the Python-cryptography cryptographic library are related to insufficient validation of data authenticity. Exploiting these vulnerabilities...

PyOpenSSL OpenSSL Buffer Overflow DoS

The vulnerability of the library for accessing functions of the cryptographic library OpenSSL PyOpenSSL is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Python Lib/html/parser Heap Buffer Overflow DoS

The vulnerability of the Lib/html/parser.py component of the Python interpreter is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through the creation of...

BusyBox strip_unsafe_prefix() DoS

The vulnerability of the stripunsafeprefix function in the UNIX command-line utility set of BusyBox is related to external control via a name or file path. Exploiting this vulnerability could allow an attacker to cause a system failure...

pam_passkey_child_read_data() DoS

The vulnerability of the pampasskeychildreaddata function in the src/responder/pam/pamsrvpasskey.c file of the access control service for remote directories and the SSSD authentication mechanism is related to a buffer overflow. Exploiting this vulnerability could allow an attacker to cause a...

DedeCMS Setup Code Execution

The vulnerability of the 4Setup function in the DedeCMS content management system’s install/index.php script is related to improper external manipulation of file names or file paths. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Python interpreter Path Traversal

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

FreeBSD KTLS DoS

The vulnerability of the KTLS subsystem in the kernel of the FreeBSD operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

FreeBSD compat32 subsystem Disclosure Protected Information

The vulnerability of the compat32 compatibility layer in the Linuxulator kernel of FreeBSD operating systems is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these layers...

Firefox Thunderbird Buffer Overflow

The vulnerability of Firefox browser and Thunderbird email client lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Local Security Authority Subsystem Service DoS

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Windows Server Update Service Network Change

The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...

.NET Resource Exhaustion DoS

The vulnerability of the .NET software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Microsoft Dynamics NAV Code Execution

The vulnerability of the integrated business management system Microsoft Dynamics NAV is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Network driver Windows Server Code Execution

The vulnerability of the Windows Server operating system’s network driver is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

File History Backup Privilege Escalation

The vulnerability of the File History backup application for the Windows operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

PT MaxPatrol Privilege Bypass

The vulnerability of the PT MaxPatrol 10 security control system is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity and confidentiality of the protected data...

Audio/Video Component DoS

The vulnerability of the Audio/Video component: Playback in Firefox web browser and Thunderbird email client involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Password Manager Component Firefox Confidential Data Access

The vulnerability of the Password Manager component in the Firefox web browser is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

Firefox WebAssembly XSS

JavaScript component vulnerability: Firefox’s WebAssembly browser is vulnerable due to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to access sensitive data and compromise its integrity...

Firefox Heap Buffer Overflow DoS

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Firefox Thunderbird DoS

The vulnerability of the postMessage component in the Firefox web browser and the Thunderbird email client is related to the。 Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

WebAssembly DoS

The vulnerability of the WebAssembly component in the Firefox web browser and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Protection component Confidential Data Access

The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Firefox Privilege Management DoS

The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Firefox Thunderbird Security Bypass

The vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...

Graphics component WebGPU Firefox Thunderbird Confidential Data Access

The vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

WebRTC Audio Video DoS

The vulnerability of the WebRTC component: The Audio/Video features in the Firefox web browser and the Thunderbird email client are related to insecure privilege management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel posix-cpu-timers Heap Buffer Overflow Privilege Escalation

The vulnerability of the systimerdelete function in the kernel/time/posix-cpu-timers.c file of Linux operating systems is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability can allow an attacker to enhance their privileges and disclose...

Containous Traefik Sensitive Information Disclosure

The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, is related to HTTP request processing flaws. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Kubernetes Gateway API Provider Data Compromise

The vulnerabilities in the files pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go of the Kubernetes Gateway API reverse proxy server Containous Traefik are related to the use of resources with similar identifiers. Exploiting these vulnerabilities allows a...

Traefik BasicAuth CheckPassword() Unauthenticated Access

The vulnerability of the CheckPassword function in the pkg file, located in the middlewares/auth/basicauth.go section of the Traefik BasicAuth intermediate software, is related to vulnerabilities in the authentication process. Exploiting this vulnerability could allow an attacker, operating...

Linux STP DoS

The vulnerability of the STP protocol implementation in the Linux kernel’s net/bridge subsystem lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

LocationManager Android Unauthorized Access

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

HttpObjectDecoder Decoder DoS

The vulnerability of the HttpObjectDecoder decoder, a framework for developing network applications, servers, and clients using the Netty protocol, is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Sneeit Framework Code Execution

The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

trx_addons Plugin Arbitrary File Upload

The vulnerability of the trxaddons plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to load any files remotely...

is-is-arrayish Code Execution

The vulnerability of the npm library isarrayish is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

secrets-store-csi-driver Unauthorized Access

The vulnerability of the secrets-store-csi-driver driver in the Kubernetes cluster management software is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

07FLYCMS CSRF

The vulnerability of the 07FLYCMS content management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

WPvivid Backup & Migration Plugin Code Execution

The vulnerability of the opensslprivatedecrypt function in the WPvivid Backup & Migration plugin of the WordPress content management system is related to the ability to download unlimited files of a dangerous type. Exploiting this vulnerability allows an attacker, operating remotely, to execute...

NGINX Agent config_dirs Unauthorized Access

The vulnerability of the configdirs directive in the NGINX Agent and the NGINX Instance Manager automation platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to read and write arbitrary...

NGINX Ingress Controller Arbitrary Configuration Injection DoS

The vulnerability of the Ingress components and Custom Resource Definitions CRDs of the NGINX Ingress Controller monitoring and management platform is related to the lack of measures taken to neutralize special elements during the processing of string values. Exploiting this vulnerability allows ...