Adobe Animate Auth Bypass RCE

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Media Foundation Code Execution

The vulnerability of the Media Foundation component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SyncFabric Privilege Escalation

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Services is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Microsoft Office Buffer Overflow Info Disclosure

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information by sending a specially created malicious file...

HTTP.sys Driver Disclosure Sensitive Information

The vulnerability of the HTTP.sys driver on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Microsoft Message Queuing Privilege Escalation

The vulnerability of the Microsoft Message Queuing MSMQ queue service on Windows operating systems is related to integer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges...

USB Hub Driver Windows Privilege Escalation

The vulnerability of the USB Hub Driver for Windows operating systems is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to gain increased privileges...

Netty Decompression Bypass DoS

The vulnerability of the decompression mechanism used by frameworks for developing network applications, servers, and protocol clients related to Netty involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CouchbaseProducer Component Data Access

The vulnerability of the CouchbaseProducer class in the camel-couchbase component of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

libzypp metadata processing Code Execution

The vulnerability of the file metadata processing mechanism in the repomd.xml repository file of the libzypp library is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

FRRouting Buffer Overflow DoS

The vulnerability of the FRRouting software implementation for Unix-like systems lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CUPS Heap Buffer Overflow DoS

The vulnerability of the ppdCreateFromIPP function in the CUPS printing server is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

NATS Java DefaultHeaderFilterStrategy SSRF

The vulnerability of the DefaultHeaderFilterStrategy class in the NATS Java framework, Apache Camel, is related to insufficient validation of input data when processing parameters such as inFilter, inFilterPattern, and inFilterStartsWith. Exploiting this vulnerability could allow an attacker to...

Linux kernel tls_do_encryption Buffer Overflow DoS

The vulnerability of the tlsdoencryption function in the net/tls/tlssw.c component of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the net/core/filter.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

DHCP Server Windows Code Execution

The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Office Memory Disclosure

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...

camel-docling Apache Camel Data Compromise

The vulnerability of the camel-docling component in the Apache Camel framework is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information from a remote location...

WinRAR RAR5 Executable Code

The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows SMB Privilege Escalation

The vulnerability of the SMB protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

aiven-extras Extension RCE

The vulnerability of the aiven-extras extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to elevate their privileges to superuser and execute arbitrary code...

Resilient File System Code Execution

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Apache HTTP Server mod_proxy_html DoS

The vulnerability of the modproxyhtml module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Microsoft Excel Spreadsheet Editor Information Disclosure

The vulnerability of Microsoft Excel spreadsheet editors involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Apache HTTP Server Buffer Overflow DoS

The vulnerability of the Apache HTTP Server is related to a violation of the buffer limit. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

NVIDIA DALI Deserialization RCE

The vulnerability of the library for acceleration of data loading and preprocessing in NVIDIA DALI is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Micrometer Library DoS

The vulnerability of the Micrometer library in the Spring Boot web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted gRPC requests...

VMware Monitoring XSS

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware Telco Cloud Platform, a virtualization platform, is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

VMware Monitoring XSS

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for website structures. Exploiting this vulnerability allows ...

CPython Webbrowser Command Execution

The vulnerability of the webbrowser module in the CPython interpreter is related to the lack of measures taken to protect data at the operating level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

libcurl Unauthorized Access

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

NGINX JavaScript Code Execution

The vulnerability of the ngxhttpjsmodule module in the NGINX JavaScript njs interpreter is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

WebRTC Data Compromise

Vulnerability of WebRTC technology implementation: The networking of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relies on copying buffers without checking the size of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

Postfix Extended State DoS

The vulnerability of extended state codes in the Postfix mail server is related to a single shift error. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PowerDNS Recursor DoS

The vulnerability of the PowerDNS Recursor DNS server is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the sidxboxread function in the src/isomedia/boxcodebase.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Windows SMB Information Disclosure

The vulnerability of the SMB network protocol implementation in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a perpetrator to disclose sensitive information that is protected by security measures...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

HttpClientCodec Network Data Compromise

The vulnerability of the HttpClientCodec component in the networking application development framework, used by servers and clients that utilize the Netty protocol, is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the...

Assimp Buffer Overflow

The vulnerability of the Open Asset Import Library Assimp, a library for importing 3D models, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service interruptions...

Python base64 decode Data Compromise

The vulnerability of the base64.b64decode function in the Python programming language interpreter CPython is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

Linux IPv6 DoS

The vulnerability of the net/ipv6/ip6output.c component in the Linux operating system is related to errors in processing parameter lengths. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel bond_xmit_broadcast Buffer Overflow DoS

The vulnerability of the bondxmitbroadcast function in the drivers/net/bonding/bondmain.c file of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Open WebUI AI-based web interface SSRF

The vulnerability of the processpictureurl function in the backend/openwebui/utils/oauth.py file of the Open WebUI artificial intelligence-based web interface is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to perform an SSRF...

TOTOLINK NR1800X Form_Logout() Code Execution

The vulnerability of the FormLogout function in the /formLogout.htm file of the TOTOLINK NR1800X router microprogramming system is related to the operation of writing data outside the buffer in memory when processing the Host parameter. Exploiting this vulnerability allows an attacker to execute...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

SonicWall SMA SRF

The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

BitLocker Bypass

The vulnerability of the BitLocker component of the Windows operating system is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...