MediaInfoLib File Parse Data Compromise

The vulnerability of the MediaInfoLib::FileOgg::DataParse function in the MediaInfoLib/Source/MediaInfo/FileAnalyze.cpp library, which is used to process Ogg-formatted files, is related to buffer overflows in dynamic memory during the processing of specially crafted Ogg files. Exploitation of thi...

ZenLib BitStream_LE Get Function

The vulnerability of the ZenLib::BitStreamLE::Get function in the ZenLib/Source/ZenLib/BitStreamLE.h header file of the MediaInfo reading library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ZenLib BitStream_LE Heap Buffer Overflow DoS

The vulnerability of the ZenLib::BitStreamLE::Get function in the ZenLib/Source/ZenLib/BitStreamLE.h header file of the MediaInfo reading library is related to dependencies that are undefined for each implementation type. Exploiting this vulnerability could allow an attacker to cause a service...

Oracle WebLogic Server Console Component Data Access

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data...

Linux kernel Memory Management Buffer Overflow DoS

The vulnerability of the damondestroyscheme function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem is related to improper memory release „memory leak“. Exploiting this vulnerability can allow an attacker to cause a system failure...

kernel/trace/rv/rv.c Heap Buffer Overflow DoS

The vulnerability of the enabledmonitorsstart function in the kernel/trace/rv/rv.c module, which is part of the Linux kernel’s tracing support, relates to the use of a wrong type of resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel DRI Kernel DoS

The vulnerabilities of the functions msmiommupagetablepreallocallocate and msmiommupagetableprealloccleanup in the driver module drivers/gpu/drm/msm/msmiommu.c of the Direct Rendering Infrastructure DRI kernel of the Linux operating system are related to the passing of pointers. Exploiting these...

Linux kernel serial port DMA callback

The vulnerability of the pl011dmarxcallback function in the drivers/tty/serial/amba-pl011.c file of the console TTY driver in the Linux kernel’s serial port module is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an...

FreeRDP RDP Client DoS

The vulnerability of the freerdpclientrdpfileapplytoSettings function in the RDP client FreeRDP is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted .rdp file...

D-Link DNS-320 DoS

The vulnerability of the URL processor in the web interface of the D-Link DNS-320 network storage microprogramming system is related to errors in access control when processing the File parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions...

D-Link DNS-320 Uploadify.php DoS

The vulnerability of the /mydlink/multi Uploadify.php component of the D-Link DNS-320 network storage software is related to errors in access control when processing the Fildata parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...

dhcpcd parse_option() DoS

The vulnerability of the parseoption function in the if-options.c file of the DHCP server dhcpcd is related to the pointer dereferencing. Exploiting this vulnerability could allow a attacker to trigger a service denial...

Oracle VM VirtualBox VMSVGA Unauthorized Access

The vulnerability of the VMSVGA device component of the Oracle VM VirtualBox software lies in errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

Microsoft Office Integer Overflow RCE

The vulnerability of the Microsoft Office package is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Linux MPTCP pm_del_add_timer Heap Buffer Overflow DoS

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Mellanox Ethernet driver Heap Buffer Overflow

The vulnerability of the mlx5irqalloc function in the drivers/net/ethernet/mellanox/mlx5/core/pciirq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...

Linux virtio_net_hdr_tnl_from_skb Heap Buffer Overflow DoS

The vulnerability of the virtionethdrtnlfromskb function in the include/linux/virtionet.h header of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

EROFS Kernel Module Heap Buffer Overflow DoS

The vulnerability of the zerofsmapsanitycheck function in the fs/erofs/zmap.c file of the EROFS file system Enhanced ReadOnly File System in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failur...

Open vSwitch validate_push_nsh() function Data Compromise

The vulnerability of the validatepushnsh function in the netopenvswitch/flownetlink.c module, which is part of the Open vSwitch router support in Linux operating systems, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the devlratenodesdestroy function in the net/devlink/rate.c module, which is part of the Linux kernel’s networking functions, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Btrfs Block Group Data Compromise

The vulnerabilities of the functions btrfs.markbg.unused and btrfs.create.pending.block.groups in the fs/btrfs/block-group.c file of the Linux kernel’s file system are related to the reallocation of previously freed memory due to errors in link counters during updates. Exploiting these...

Apache Camel IrcProducer Data Compromise

The vulnerability of the IrcProducer class in the camel-irc component of the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality and integrity of th...

SPDY Framework DoS

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols related to Netty is related to the uncontrolled distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CRdpPipeGfxPlugin Heap Buffer Overflow Privilege Escalation

The vulnerability of the CRdpPipeGfxPlugin component in the system DLL file rdpcorets.dll of the Remote Desktop Services RDS service on Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their...

Linux kernel symlink repair Unauthorized Access

The vulnerability of the xrepsymlinksalvageInline function in the fs/xfs/scrub/symlinkrepair.c file of the Linux kernel file system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Online Store Code Execution

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

Online Store Output Encoding Arbitrary Code

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to improper coding or escape sequences in output data. Exploiting these vulnerabilities can allow a remote attacker to execute...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

Online Store Input Validation Privilege Escalation

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to enhance their privileges remotely...

ColdFusion Path Traversal

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ColdFusion Privilege Escalation

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

ColdFusion SQL Injection Code Execution

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ColdFusion Path Traversal Unauthorized Access

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ColdFusion Authentication Code Execution

The vulnerability of the ColdFusion software platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

siman.exe Code Execution

The vulnerability of the siman.exe executable file of Rockwell Automation Arena’s discrete event simulation and automation software is related to the execution of operations beyond the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker ...

FactoryTalk Directory Database Directory Access Privilege Escalation

The vulnerability of the FactoryTalk Directory database in the FactoryTalk Services Platform is related to deficiencies in the authentication process when processing JWT algorithms. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain unauthorized access to...

FactoryTalk DataMosaix Private Cloud Code Execution

The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform and its production process optimization capabilities is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

Mozilla Firefox WebAssembly Disclosure

JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to an incorrect pointer dereferencing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...

R7-Officer document editor Code Execution

The vulnerability of the R7-Officer corporate server’s document editor is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...

Wazuh wazuh-analysisd DoS

The vulnerability of the wazuh-analysisd module of the security monitoring and threat detection platform Wazuh is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Content Credentials SDK Insufficient Validation

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

camel-pqc Apache Camel Component Code Execution

The vulnerability of the camel-pqc component in the Apache Camel Java framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Keras TorchModuleWrapper Code Execution

The vulnerability of the TorchModuleWrapper.fromconfig function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

DHCP Server Service Windows Code Execution

The vulnerability of the DHCP Server Service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Redirected Drive Buffering System Windows Privilege Escalation

The vulnerability of the Redirected Drive Buffering System RDBS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

DWM Core Library Disclosure

The vulnerability of the DWM Core Library in Windows operating systems is related to writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Microsoft Office Excel 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Excel 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...