Microsoft Office Memory Corruption Exploit

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Google Chrome Directory DoS

The vulnerability of the Google Chrome browser’s directory service is related to insufficient control over the resource during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome DevTools RCE

The vulnerability of Google Chrome’s DevTools component is related to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Use-After-Free

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WebShare Component DoS

The vulnerability of the WebShare component of the Google Chrome browser is related to insufficient resource management during its existence. Exploiting this vulnerability could allow a hacker to cause a service failure...

Mojo library Code Execution

The vulnerability of the Mojo library in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome browsers is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

pgjdbc Unlimited Resource Allocation DoS

The vulnerability of the JDBC driver pgjdbc is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

libtiff Integer Overflow DoS

The vulnerability of the libtiff library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unbound DNS Server Heap Buffer Overflow DoS

The vulnerability of the Unbound DNS server relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Portainer Authentication Bypass

The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...

libde265 Resource Exhaustion DoS

The vulnerability of the h.265 Libde265 implementation is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Dulwich Git Uncontrolled Resource Consumption DoS

The vulnerability of the Python library for working with Git repositories in Dulwich is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ImageMagick MNG Encoder Code Execution

The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Microsoft SharePoint Server Structure Protection Failure

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Wireshark DoS

The vulnerability of the HTTP protocol analyzer used by Wireshark, a tool for analyzing computer network traffic, relates to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Microsoft Office Memory Read Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

GitPython Config Writer Code Execution

The vulnerability of the configwriter method in the Python library for interacting with Git repositories in GitPython is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

DOMPurify sanitize Code Execution

The vulnerability of the DOMPurify.sanitize function in the JavaScript library for safe cleaning and protection of HTML code is related to the lack of protective measures for website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

G3413CTRBlockCipher File Disclosure

The vulnerability of the G3413CTRBlockCipher file in the Java Bouncy Castle cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Bouncy Castle BCPKIX Bypass

The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library is related to the use of the outdated SHA-1 cryptographic algorithm. Exploiting this vulnerability allows a remote attacker to bypass existing security measures...

Microsoft Office Microsoft 365 Apps for Enterprise Information Disclosure

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...

JDBC driver Heap Buffer Overflow DoS

The vulnerability of the userOverridesAsString method in the JDBC driver handling library in c3p0 is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created Java serializable objects and instances of...

JavaScript Serialization Uncontrolled Resource Consumption DoS

The vulnerability of the library for serializing JavaScript objects into a string format is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the tpacketsnd function in the net/packet/afpacket.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux DRI Heap Buffer Overflow DoS

The vulnerability in the drivers/gpu/drm/i915/i915perf.c file of the Direct Rendering Infrastructure DRI driver of the Linux operating system is related to a data format agreement violation. Exploiting this vulnerability can allow an attacker to access protected information or cause service...

Linux kernel buildid_show() function

The vulnerability of the buildidshow function in the drivers/xen/privcmd.c module of the Linux kernel device driver library is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Texas Instruments Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the cpswndosetrxmodework function in the drivers/net/ethernet/ti/cpswnew.c module of the Ethernet network adapter driver for Texas Instruments’ Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

amdgpu_userq_get_doorbell_index Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqgetdoorbellindex function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the execution of operations outside of memory buffers. Exploiti...

Microsoft Office Integer Overflow Information Disclosure

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose protected information...

Windows App Store Privilege Escalation

The vulnerability of the Windows App Store application store for Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CI/CD Pipeline Configuration Alteration

The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform relates to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow an attacker to remotely alter the CI/CD configuration...

GitLab Workhorse HTTP Request Handler RCE

The vulnerability of GitLab Workhorse’s HTTP request handler, a software platform based on git for collaborative code development in GitLab CE/EE, relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to compromise the...

Git configuration processor branch modification

The vulnerability of the configuration processor for protected branches in the git-based software platform, which is used for collaborative code development in GitLab CE/EE, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...

cJSON Heap Buffer Overflow DoS

The vulnerability of the cJSONCompare function in the cJSON.c library for working with JSON objects in C language is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

cJSON Utils Heap Buffer Overflow

The vulnerability of the applypatch function in the cJSONUtils.c component of the C language JSON object handling library is related to an incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

Portainer Unprotected Registration Data Access

The vulnerability of the Portainer container management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

WebML Component Code Execution

The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Code Execution

The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome FileSystem Code Execution

The vulnerability of Google Chrome’s FileSystem component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome DoS

The vulnerability of Google Chrome’s DataTransfer interface is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Google Chrome Tab Groups Code Execution

The vulnerability of Google Chrome’s Tab Groups component is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Extensions Code Execution

The vulnerability of the Google Chrome browser’s Extensions component relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Downloads Code Execution

The vulnerability of the Downloads component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Downloads DoS

The vulnerability of the Downloads component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome Code Execution

The vulnerability of the Password component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Grafana Path Traversal

The vulnerability of the Grafana monitoring and observation platform is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Vim s:NetrwBookHistSave Buffer Overflow

The vulnerability of the s:NetrwBookHistSave function in the Vim text editor is related to improper elimination of separators. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Sqlalchemy Mako Path Traversal

The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Pillow Integer Overflow DoS

The vulnerability of the Pillow image processing library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...