98239 matches found
libheif Heap Buffer Overflow DoS
The vulnerability of the HeifPixelImage::overlay function in the file format decoder and encoder of the libheif library is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
MinIO OIDC Privilege Escalation
The vulnerability of the OIDC server of MinIO is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...
Glances XML-RPC Data Compromise
The vulnerability of the XML-RPC server used by the Glances monitoring tool is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...
STS AssumeRoleWithLDAPIdentity Unauthorized Access
The vulnerability of the endpoint of the STS Security Token Service, which manages MinIO object storage, is related to inconsistencies in response to incoming requests. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
MediaWiki Unauthorized Access
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
MediaWiki Unauthorized Access
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
MediaWiki Unauthorized Access
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
MediaWiki Data Compromise
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to deficiencies in the system’s controlled areas. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
MinIO extractMetadataFromMime DoS
The vulnerability of the extractMetadataFromMime function in the MinIO storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted X-Minio-Replication- headers...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Views Component DoS
The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
SVG Component DoS
The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Endpoint Manager client program Code Execution Full Control
The vulnerability of the Endpoint Manager client program and the Detection Agent for the UEM system’s centralized management, monitoring, and security solutions, such as LANSCOPE Endpoint Manager On-Premise Edition, is related to insufficient verification of the communication channel source...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
WTF web browsers DoS
The vulnerability of the WTF web browsers Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
USB Component DoS
The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
sql-string.js ORM Escape SQL Injection
The vulnerability of the escape function in the sql-string.js ORM library by Sequelize is related to the lack of security measures taken to protect the SQL query structure when processing TODATE and TOTIMESTAMP parameters. Exploiting this vulnerability could allow an attacker to execute arbitrary...
GitPython Code Execution
The vulnerability of the Git configuration writing module in the Python library for interacting with Git repositories in GitPython is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow an attacker to execute arbitrary...
FreeRDP RDP DoS
The vulnerability of the freereaderstatesa and freereaderstatesw functions in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a remote attacker to cause service failure...
Markdown Preview Extension File Helper Code Execution
The vulnerability of the file opening helper function in the Markdown Preview extension of the Visual Studio Code editor is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability may allow an attacker operating remotely to execute arbitrary code...
FFmpeg RDP Decoder Heap Buffer Overflow DoS
The vulnerability of the TSMF decoder in FFmpeg’s RDP client, FreeRDP, relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
FreeRDP rail_server_handle_messages RCE
The vulnerability of the railserverhandlemessages function in the channels/rail/server/railmain.c file of the RDP client FreeRDP is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
ONLYOFFICE Desktop Editors Code Execution
The vulnerability of the ONLYOFFICE Desktop Editors office package lies in the lack of validation during the processing of incoming requests. Exploiting this vulnerability allows an attacker to execute arbitrary code...
node-XMLHttpRequest Certificate Validation DoS
The vulnerability of the node-XMLHttpRequest library for web requests is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service failures...
FreeRDP Glyph Cache Buffer Overflow DoS
The vulnerabilities of the updateprocessglyphfragments and glyphcachefragmentput functions in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP involve reading beyond the permitted range of memory. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...
FreeRDP RDP Server DoS
The vulnerability of the rdpeiserverhandlemessages function in the channels/rdpei/server/rdpeimain.c file of the RDP client FreeRDP is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures...
FreeRDP update_message_WindowIcon Memory Corruption DoS
The vulnerability of the updatemessageWindowIcon function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause memory corruption and service failure...
Langflow agent Function Bypass
The vulnerability of the getflowbyidorendpointname function in the Langflow agent and workflow creation/execution tools relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions using an...
jmespath.rb Memory Leak DoS
The vulnerability of the library for querying and filtering JSON data, jmespath.rb, is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker who operates remotely to cause service failures...
TZInfo Path Traversal DoS
The vulnerability of the TZInfo time zone database is related to deficiencies in path name limitation for accessing the catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Zoom Workplace Video Conference Input Validation
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...
AngularJS Prototype Attribute Uncontrolled Data Compromise
The vulnerability of the JavaScript framework AngularJS is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...
FreeRDP http_response_recv_body() DoS
The vulnerability of the httpresponserecvbody function in the libfreerdp/core/gateway/http.c file of the RDP client FreeRDP is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...
FreeRDP http_proxy_connect() RCE
The vulnerability of the httpproxyconnect function in the RDP client FreeRDP is related to the lack of handling for CRLF sequences in HTTP headers when processing the variable ServerHostname. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
SiteIsolation Component DoS
The vulnerability of Google Chrome’s SiteIsolation component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Google Chrome Codecs Code Execution
The vulnerability of Google Chrome’s Codecs component is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome XML Code Execution
The vulnerability of the Google Chrome XML browser component is related to errors in handling http requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome GPU Code Execution
The vulnerability of Google Chrome’s GPU component is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome V8 Engine Code Execution
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome DoS
The vulnerability of Google Chrome’s user interface is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Google Chrome Media Code Execution
The vulnerability of the Google Chrome browser’s Media component is related to writing beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Google Chrome Media Code Execution
The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Google Chrome Downloads Code Execution
The vulnerability of the Downloads component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Google Chrome Font Component Code Execution
The vulnerability of Google Chrome’s Font component is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
shouldBypassProxy.js Module Disclosure
The vulnerability of the shouldBypassProxy.js library from axios is related to incorrect validation of data entered by users. Exploiting this vulnerability can allow an attacker to disclose protected information...
axios Prototype Modification
The vulnerability of the axios library is related to uncontrolled changes in the attributes of the object’s prototype. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...
FreeRDP Buffer Overflow DoS
The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
lib/helpers/toFormData.js axios Form Issue
The vulnerability of the lib/helpers/toFormData.js module from the axios library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause service failures...