AI assistant Gemini DoS

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created...

Input component in Google DoS

The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

WebRTC DoS

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

Input component in Google DoS

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

CORS Component Confidential Data Access

The vulnerability of the CORS component in Google Chrome and Microsoft Edge relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to access confidential data through a specially created HTML page...

Font Component DoS

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Mojo web DoS

The vulnerability of the Mojo web browser components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Views Component Spear Phishing

The vulnerability of the Views component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...

Media component Google Chrome Microsoft Edge Bypass

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

Service Worker Confidential Data Access

The vulnerability of the Service Worker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

GPU components DoS

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Mojo web component DoS

The vulnerability of the Mojo web browser component in Google Chrome is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

netfilter kernel Heap Buffer Overflow DoS

The vulnerability of the decodechoice function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter kernel in the Linux operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...

NVME Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the nvmettcpbuildpduiovec function in the drivers/nvme/target/tcp.c file of the NVME kernel driver for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromi...

Extensions Component DoS

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

GitPython Repo.clone_from() Unauthorized Access

The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

GitPython Arbitrary Command Execution File Overwrite

The vulnerabilities of the functions Repo.archive, git.lsremote, Repo.itercommits, and Repo.blame in the GitPython library for interacting with Git repositories are related to the lack of data cleaning at the control level. Exploiting these vulnerabilities could allow an attacker to execute...

Grav CMS isSafeDynamicCall File Access

The vulnerability of the Blueprint::isSafeDynamicCall method in the Grav CMS system is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, create, and copy files and directories...

Grav CMS Watermark Disclosure

The vulnerability of the ImageMedium::watermark function in the Grav CMS system is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

GitPython Code Execution

The vulnerability of the Git configuration writing module in the Python library for interacting with Git repositories in GitPython is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow an attacker to execute arbitrary...

OAuth2 Software Unauthenticated Access

The vulnerability of the final point of contact for the dynamic registration mechanism of the OAuth2 software used to manage medical organizations like OpenEMR lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to gain unauthoriz...

GL.iNet GL-MT3000 Router set_upgrade() Command Execution

The vulnerability of the setupgrade function at the /cgi-bin/glc endpoint of the modem.so component of the GL.iNet GL-MT3000 router software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow an attacker to inject arbitrary commands remotely...

sql-string.js ORM Escape SQL Injection

The vulnerability of the escape function in the sql-string.js ORM library by Sequelize is related to the lack of security measures taken to protect the SQL query structure when processing TODATE and TOTIMESTAMP parameters. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Unbound DNSSEC DoS

The vulnerability of Unbound DNS server’s DNSSEC validator is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Glances Config.get_value() Privilege Escalation

The vulnerability of the Config.getvalue function in the Glances monitoring tool is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow attackers to enhance their privileges...

go-git Countable Loss DoS

The vulnerability of the go-git library is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created malicious .idx file...

OpenSSH SCP Data Compromise

The vulnerability of the SCP utility in the OpenSSH cryptographic security tool is related to improper storage of permissions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

PerformanceManager DoS

The vulnerability of the PerformanceManager component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PDFium DoS

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...

Password component compromise Data Compromise

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

FileZilla FTP Code Execution

The vulnerability of the FileZilla Client FTP client is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain full control over the system...

WebCodecs DoS

The vulnerability of the WebCodecs component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

GitPython Repo.clone_from() Code Execution

The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

nas-web.add_user Arbitrary Command Execution

The vulnerability of the nas-web.adduser function in the GL.iNet GL-MT3000 router microprogramming system is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Python cryptography Library Data Compromise

The vulnerabilities of the functions pkcs7decryptsmime, pkcs7decryptpem, and pkcs7decryptder in the Python programming language-based cryptography library are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities could allow an attacker to influence the...

Python cryptography Package DoS

The vulnerability of the buildchaininner function in the Python programming language’s cryptography library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

go-git Unvalidated Array Indexing

The vulnerability of the go-git library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...

OATHAuth Extension Unauthorized Access

The vulnerability of the OATHAuth extension for implementing the MediaWiki hypertext environment is related to insufficient protection of service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

MediaWiki Unauthorized Access

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

MediaWiki Data Compromise

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to deficiencies in the system’s controlled areas. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

WebAudio DoS

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Skia Graphic Library Confidential Data Access

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Headless mode DoS

The vulnerability of the Headless mode in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

GitPython Code Execution

The vulnerability of the checkunsafeoptions function in the Python library for interacting with Git repositories, GitPython, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

GL.iNet GL-MT3000 Router Command Injection

The vulnerability of the removeprofile function at the /cgi-bin/glc endpoint of the modem.so component of the GL.iNet GL-MT3000 router software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow an attacker to inject arbitrary commands remotely...