The vulnerability of the fromPptpUserAdd() function in the Tenda F1202 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromPptpUserAdd function in the Tenda F1202 router microprogramming system is related to the operation that goes beyond the buffer boundaries in memory when processing the parameters username and opttype. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the SVG object processing mechanism in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of the SVG object processing mechanism in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the DOM components in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the Sanitizer API of Google Chrome and Microsoft Edge browsers allows a malicious actor to execute XSS attacks.

The vulnerability of the Sanitizer API on Google Chrome and Microsoft Edge browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Persistent Cache component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the Persistent Cache component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security measures remotely...

The vulnerability of the Speech component in Google Chrome and Microsoft Edge browsers allows attackers to carry out spoofing attacks.

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.

The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Request Header Handler component of the ASGI framework in web development for Starlette allows attackers to circumvent existing security restrictions.

The vulnerability of the Request Header Handler component in the Starlette framework for web development is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the arp_create() function in the net/ipv4/arp.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to cause a service failure.

The vulnerability of the arpcreate function in the net/ipv4/arp.c module of the Linux kernel’s IPv4 protocol implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on macOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Font component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to reading beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the IKEv2 protocol implementation in the PAN-OS operating system allows a perpetrator to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the IKEv2 protocol implementation in the PAN-OS operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, execute arbitrary code, or cause service failures...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to bypass the sandboxing protection mechanisms.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...

The vulnerability of the Popup Blocker extension in Google Chrome and Microsoft Edge browsers allows a hacker to bypass existing security mechanisms.

The vulnerability of the Popup Blocker extension in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security measures remotely...

Vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components, allowing attackers to execute arbitrary code

The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the user interface of WebUI for Google Chrome and Microsoft Edge allows a hacker to bypass existing security mechanisms.

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

The vulnerability of the NTFS reparse point mechanism in Samba software, which allows a hacker to modify arbitrary files

The vulnerability of the NTFS reparse point mechanism in Samba software is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...

The vulnerability of Google Chrome and Microsoft Edge web browsers on iOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome and Microsoft Edge web browsers on iOS operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.

The vulnerability of the Trend Micro Apex One antivirus software agent is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Google Chrome and Microsoft Edge mobile browsers on Android operating systems allows attackers to perform cross-site scripting attacks.

The vulnerability of Google Chrome and Microsoft Edge web browsers on Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform cross-site scripting attacks...

The vulnerability of the Open WebUI web interface, related to deficiencies in the authentication process, allows attackers to circumvent existing security restrictions.

The vulnerability of the Open WebUI web interface, based on artificial intelligence, is related to deficiencies in the authentication process when processing the bypassfilter parameter for endpoints like /openai/chat/completions and /ollama/api/chat. Exploiting this vulnerability allows a malicio...

The vulnerability of the Cross-Origin-Opener-Policy (COOP) function in Google Chrome and Microsoft Edge allows a perpetrator to bypass existing security mechanisms.

The vulnerability of the Cross-Origin-Opener-Policy COOP function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...

The vulnerability of the GPO group policy management component of the Samba software, which allows a hacker to circumvent existing security restrictions

The vulnerability of the GPO group policy management component of the Samba software is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to read and write arbitrary files.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files remotely...

The vulnerability in the net/bpf/test_run.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/bpf/testrun.c module of the Linux operating system is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the NTFS file system in Windows operating systems, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.

The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the microprogrammed network device products WildFire WF-500 and WildFire WF-500-B lies in improper external control of file names or file paths, allowing an intruder to gain access to read, modify, or delete files.

The vulnerability of the microprogrammed network device products WildFire WF-500 and WildFire WF-500-B lies in improper external control of the file name or file path. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to files...

The vulnerability of the bpf_prog_test_run_xdp() function in the net/bpf/test_run.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the bpfprogtestrunxdp function in the net/bpf/testrun.c module, which is part of the networking functions in the Linux kernel, relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the fromSafeEmailFilter() function in the Tenda F1202 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the from SafeEmailFilter function in the Tenda F1202 router software is related to the execution of an operation outside the buffer in memory when processing the page parameter. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause...

The vulnerability of the XKMS (XML Key Management Specification) service in the Apache CXF web service framework allows a hacker to gain unauthorized access to protected information.

The vulnerability of the XKMS XML Key Management Specification service in the Apache CXF web service framework is related to the failure to take measures to eliminate special elements in LDAP requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized...

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge browsers allows a hacker to bypass existing security mechanisms.

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass existing security measures remotely...

The vulnerability of the RoundCube Webmail client, related to the lack of protective measures for the website structure, allows attackers to execute SSRF attacks and disclose the protected information.

The vulnerability of the RoundCube Webmail email client is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack and disclose sensitive information...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WINS-server software Samba, which allows a hacker to trigger a service failure

The vulnerability of the WINS-server software Samba is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.

The vulnerability of the Trend Micro Apex One antivirus software agent is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the formAccept() function in the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to inject arbitrary commands.

The vulnerability of the formAccept function in the microprogramming software for EDIMAX BR-6478AC routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

The vulnerability of the formRadiust() function in the microprogramming software for wireless signal amplifiers of Edimax EW-7438RPn allows a hacker to execute arbitrary code.

The vulnerability of the formRadius function in the microprogramming software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the formWpsProxyEnable() function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formWpsProxyEnable function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Nginx UI server’s user interface lies in the lack of origin verification in WebSockets, allowing attackers to disclose confidential information.

The vulnerability of the Nginx UI server’s user interface lies in the lack of origin verification in WebSockets. Exploiting this vulnerability allows an attacker to disclose confidential information remotely...

The vulnerability of the container management system and the virtual machine manager Incus, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of measures taken to protect the structure of web pages, allows a violator to execute arbitrary code.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the aiohttp HTTP client, related to incorrect processing of highly compressed input data, allows attackers to cause service failures.

The vulnerability of the aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the package manager for Kubernetes Helm, related to incorrect path name restrictions for restricted access directories, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the package manager for Kubernetes Helm is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...

The vulnerability of the _has_sneaky_javascript() function in the lxml_html_clean library for the Python programming language allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the hassneakyjavascript function in the lxmlhtmlclean library, written in the Python programming language, is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

The vulnerability of the formStats() function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formStats function in the microprogramming software of the wireless signal amplifiers Edimax EW-7438RPn is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the stainfo() function in the microprogramming software of Edimax BR-6675nD wireless signal amplifiers allows a hacker to inject arbitrary commands.

The vulnerability of the stainfo function in the microprogramming software of Edimax BR-6675nD wireless signal amplifiers is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability could allow a malicious actor to inject arbitrary...

The vulnerability of the formLicence() function in the microprogramming software for wireless signal amplifiers from Edimax, allows a intruder to execute arbitrary code.

The vulnerability of the formLicence function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...