Google Chrome Downloads DoS

The vulnerability of the Downloads component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome Code Execution

The vulnerability of the Password component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Grafana Path Traversal

The vulnerability of the Grafana monitoring and observation platform is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Vim s:NetrwBookHistSave Buffer Overflow

The vulnerability of the s:NetrwBookHistSave function in the Vim text editor is related to improper elimination of separators. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Sqlalchemy Mako Path Traversal

The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Pillow Integer Overflow DoS

The vulnerability of the Pillow image processing library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Pillow Integer Overflow DoS

The vulnerability of the Pillow image processing library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PuTTY Encryption Verification Code Execution

The vulnerability of the PuTTY encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GitPython Code Execution

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

OpenBao secret encryption management system Privilege Escalation

The vulnerability of the OpenBao encryption and secret management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Gitea Privilege Escalation

The vulnerability of the mechanism for checking the scopes of OAuth2 tokens in the Gitea Git repository management system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

IEEE 802.11 Analyzer DoS

The vulnerability of the IEEE 802.11 analyzer, which is used in Wireshark for analyzing computer network traffic, relates to pointer manipulation. Exploiting this vulnerability can allow a hacker to cause a service failure...

Microsoft SharePoint Server Authentication Bypass

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of its authentication procedures. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms remotely...

sharkd DoS

The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Wireshark ROHC DoS

The vulnerability of the ROHC analyzer in Wireshark, which is responsible for analyzing network traffic, relates to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service interruptions...

Apache MINA Heap Buffer Overflow DoS

The vulnerability of the AbstractIoBuffer.resolveClass method in the Apache MINA network-oriented Java application framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

DOMPurify Code Execution

The vulnerability of the FORBIDTAGS function in the JavaScript library for secure cleaning and protection of HTML code by DOMPurify is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Vangene deltaFlow Privilege Escalation

The vulnerability of the authentication mechanism of the Vangene deltaFlow electronic document management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges...

nanoids Function Exposes Protected Information

The vulnerability of the valueOf function in the JavaScript library for generating unique string identifiers called nanoids is related to incorrect data type conversion. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by this mechanism...

React Router Redirection Phishing

The vulnerability of the React Router routing library for React applications relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks...

instrument-based library Heap Buffer Overflow DoS

The vulnerability of the instrument-based library for generating unique UUIDs is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...

Linux kernel-based firmware th1520_aon_power_update() Data Compromise

The vulnerability of the th1520aonpowerupdate function in the drivers/firmware/thead module, within the th1520-aon.c driver for Linux kernel patches, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

Linux vxlan_na_create() Heap Buffer Overflow

The vulnerability of the vxlannacreate function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

UCSI Interface Driver Heap Buffer Overflow DoS

The vulnerability of the ucsinotifycommon function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability could allow an...

Linux kernel Ethernet driver smc_special_trylock Heap Buffer Overflow

The vulnerability of the smcspecialtrylock function in the drivers/net/ethernet/smc91x.c file of the Linux kernel’s Ethernet network adapter driver is related to the violation of context restrictions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux br_nd_send() function Heap Buffer Overflow

The vulnerability of the brndsend function in the net/bridge/brarpndproxy.c module of the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Pillow Loop DoS

The vulnerability of the Pillow image processing library lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Python relenv Resource Control DoS

The vulnerability of the Python relenv tool for creating reproducible and portable environments is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Dulwich Git Path Traversal

The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...

SIMATIC CN 4100 Buffer Overflow DoS

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

sharkd DoS

The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, is related to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Microsoft Word Office Suites Buffer Overflow

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Apache Kafka NetworkClient Unauthorized Access

The vulnerability of the NetworkClient component in the Apache Kafka messaging broker is related to the disclosure of information through Server Logs. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...

Jakarta Mail Eclipse Angus Mail Data Compromise

The vulnerability of the Jakarta Mail and Eclipse Angus Mail email creation and sending libraries is related to improper processing of input data’s endings. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

Vite server.fs.deny Disclosure

The vulnerability of the server.fs.deny mechanism in the local development server of the Vite application is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

OWASP Java HTML Sanitizer Unauthorized Access Disclosure

The vulnerability of the HtmlPolicyBuilder class in the Java library for sanitizing HTML code from OWASP Java HTML Sanitizer is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorize...

14Finger digital fingerprint collection utility Code Execution

The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to generate arbitrary codes...

js-yaml Prototype Modification

The vulnerability of the YAML parsing library js-yaml is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Node.js Brace Expansion Resource Consumption DoS

The vulnerability of the brace-expansion library on the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ti-adc-read-measurement Heap Buffer Overflow DoS

The vulnerability of the tiadcreadmeasurement function in the drivers/iio/adc/ti-adc161s626.c driver for various types of embedded sensors in the Linux operating system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the usbtmcrelease function in the drivers/usb/class/usbtmc.c module of the Linux device driver framework is related to the pointer being reclaimed after its expiration. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux gadget driver Heap Buffer Overflow DoS

The vulnerability of the faudiooutepcomplete function in the drivers/usb/gadget/function/fuac1legacy.c file of the Linux operating system’s device drivers is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

NVMEM Device Driver Heap Buffer Overflow DoS

The vulnerability of the zynqmpefuseaccess function in the drivers/nvmem/zynqmpnvmem.c file of the NVMEM device driver in the Linux operating system is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel vt function Heap Buffer Overflow DoS

The vulnerability of the leavealt-screen function in the drivers/tty/vt/vt.c module of the Linux kernel virtual terminal driver framework is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel AMDxdna acceleration driver Data Compromise

The vulnerability of the functions aie2cmdlistfillnpucf, aie2cmdlistfillnpudpu, aie2cmdlistfillnpupreempt, and aie2cmdlistfillnpuelf in the driver module drivers/accel/amdxdna/aie2message.c, which is part of the Linux kernel’s acceleration devices driver, stems from buffer overflow vulnerabilitie...

fastrpc_init_create_static_process Heap Buffer Overflow DoS

The vulnerability of the fastrpcinitcreatestaticprocess function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Linux x86 kernel intel_pmuHW_config() Heap Buffer Overflow

The vulnerability of the intelpmuHWconfig function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

Linux dwc2_hsotg_udc_stop() Buffer Overflow

The vulnerability of the dwc2hsotgudcstop function in the drivers/usb/dwc2/gadget.c file of the Linux device driver framework relates to the unlocking of a locked resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux cdns3 gadget Heap Buffer Overflow

The vulnerability of the cdns3gadgetinit function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to an incorrect definition of internal states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Texas Instruments Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the cpswndosetrxmodework function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver for Texas Instruments’ Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to...