NGINX Agent config_dirs Unauthorized Access

The vulnerability of the configdirs directive in the NGINX Agent and the NGINX Instance Manager automation platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to read and write arbitrary...

NGINX Ingress Controller Arbitrary Configuration Injection DoS

The vulnerability of the Ingress components and Custom Resource Definitions CRDs of the NGINX Ingress Controller monitoring and management platform is related to the lack of measures taken to neutralize special elements during the processing of string values. Exploiting this vulnerability allows ...

Camera Driver Qualcomm DoS Execution Code

The vulnerability of the Camera Driver microprogramming system in Qualcomm’s embedded chips relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by sending specially crafted JPEG commands...

Splunk Enterprise REST API Disclosure

The vulnerability of the REST API implementation of the Splunk Enterprise platform for operational analysis is related to insufficient protection of sensitive data when the |rest command is executed. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sendi...

Splunk Web Deployment Server Arbitrary SPL Command Information Disclosure

The vulnerability of the Deployment Server web interface of the Splunk Web platform for operational analysis in Splunk Enterprise relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary SPL commands and disclose sensitive...

Google Chrome GPU DoS

The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux SMB Oplock Buffer Overflow DoS

The vulnerability of the smbgrantoplock function in the fs/smb/server/oplock.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Smb Heap Buffer Overflow DoS

The vulnerability of the maybeforkscalars function in the fs/smb/server/smb2pdu.c module of the Smb subsystem in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise t...

Linux Ceph Auth Buffer Overflow

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and accessibility of...

Linux kernel create_space_info Btrfs Buffer Overflow

The vulnerability of the createspaceinfo function in the fs/btrfs/space-info.c module of the Linux kernel is related to a bug involving the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux structnf_queue_entry Buffer Overflow

The vulnerability of the structnfqueueentry function in the include/net/netfilter/nfqueue.h module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

VMware Directory Service Unauthorized Access

The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtual infrastructure management tool, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

FreeBSD BOOTP File Handler Code Execution

The vulnerability of the BOOTP File Handler component in the FreeBSD operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

FreeBSD Message Handler Code Execution

The vulnerability of the Message Handler component in FreeBSD operating systems is related to the lack of proper checking of the length of user data before it is copied to the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

FreeBSD ioctl Privilege Escalation

The vulnerability of the ioctl request handler CONSHISTORY in FreeBSD operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

FreeBSD Linuxulator Privilege Escalation

The vulnerability of the Linuxulator component in the kernel of FreeBSD operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux kernel tls_swCancelWorkTx function Data Compromise

The vulnerability of the tlsswCancelWorkTx function in the net/tls/tlssw.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

Graphics component Firefox Confidential Data Access

The vulnerability of the Graphics component in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Graphics component WebGPU Firefox Thunderbird DoS

The vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

TrueConf Server Authentication Bypass Privilege Escalation

The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...

TrueConf Server Code Execution

The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Graphics component WebGPU Firefox Thunderbird Confidential Data Access

Vulnerability of the Graphics component: WebGPU in the Firefox web browser and Thunderbird email client involves reading data from buffer areas beyond the allowed limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Firefox Thunderbird Security Bypass

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Widget Component DoS

The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attacker to cause service failures...

Firefox Thunderbird DOM DoS

Vulnerability of the DOM component: The Core and HTML components of the Firefox web browser and Thunderbird email client are vulnerable due to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to cause service interruption...

Linux net/packet/af_packet.c DoS

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Cookies Component Firefox Thunderbird DoS

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client is related to the reliance on cookies without any checks for their authenticity and integrity. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Cookies Component Firefox Thunderbird DoS

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Playback Component Firefox Thunderbird Data Compromise

The vulnerability of the Playback component in the Firefox web browser and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

WebExtensions Component Firefox Thunderbird Data Compromise

The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client involves bypassing authentication processes through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Web Speech Component Firefox Thunderbird

The vulnerability of the Web Speech component in the Firefox web browser and the Thunderbird email client involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

Firefox Popup Blocker Thunderbird Data Compromise

The vulnerability of the Popup Blocker component in the Firefox web browser and Thunderbird email client is related to the false representation of critical information to the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

IP Protection Component Firefox Thunderbird Confidential Data Access

The vulnerability of the IP Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Firefox Thunderbird Security Bypass

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...

Networking component: The JAR

Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird are vulnerable due to a lack of source verification mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Metabase SQL Injection

The vulnerability of the application software interface for password reset, data visualization, and report creation in the Metabase tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

Traefik nameAndService() Unauthenticated Access Disclosure

The vulnerability of the nameAndService function in the pkg/provider/kubernetes/crd/kuberneteshttp.go file, which is part of the integration provider for Kubernetes’ CRD reverse proxy server Containous Traefik, is related to insufficient spatial partitioning. Exploiting this vulnerability could...

ClamAV scanfd() Unauthenticated Access

The vulnerability of the scanfd function in the clamd/scanner.c file of the ClamAV antivirus program is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

LocationManager Android Unauthorized Access

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Pillow ImageFilter RankFilter Filter

The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Progress Kemp LoadMaster Command Execution

The vulnerability of the load balancing device Progress Kemp LoadMaster lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

simple-file-list plugin WordPress Code Execution

The vulnerability of the simple-file-list plugin in the WordPress content management system involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Ladybird LibJS Code Execution

The vulnerability of the npm library for web development, LibJS, in the Ladybird web browser, is related to synchronization errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JS file...

acfe_module_form_front.render Plugin Code Execution

Vulnerability of the prepareform function in the acfemoduleformfront.render method of the Advanced Custom Fields plugin: This vulnerability is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

WPBookit Image Upload Code Execution

The vulnerability of the imageUploadHandle function in the WPBookit plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Ninja Forms Plugin Code Execution

The vulnerability of the NFFUAJAXControllersUploads::handleUpload function in the File Uploads extension of the Ninja Forms plugin is related to the ability to upload files of a dangerous type without restrictions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

Breeze Cache Plugin Code Execution

The vulnerability of the fetchgravatarfromremote function in the Breeze Cache plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...