LUA File Virtualization Filter Driver Privilege Escalation

The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

Linux kernel Resource Control DoS

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

OpenBao System Data Compromise

The vulnerability in the vault/namespacestore.go file of the OpenBao encryption and secret management system is related to improper inter-bordering of critical data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

gf_filter_pid_resolve_file_template_ex Heap Buffer Overflow DoS

The vulnerability of the gffilterpidresolvefiletemplateex function on the multimedia platform GPAC is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

HttpClientCodec Network Data Compromise

The vulnerability of the HttpClientCodec component in the networking application development framework, used by servers and clients that utilize the Netty protocol, is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the...

Assimp Buffer Overflow

The vulnerability of the Open Asset Import Library Assimp, a library for importing 3D models, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service interruptions...

.NET Microsoft Visual Studio Deserialization RCE

The vulnerability of .NET and Microsoft Visual Studio software platforms is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ImageMagick Unauthorized Access

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

libcurl Unauthorized Access

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

LibRaw Heap Buffer Overflow DoS

The vulnerability of the nikonloadpaddedpackedraw function in the src/decoders/decoderslibraw.cpp file, which is part of the LibRaw image processing library, relates to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing the loadflags and rawwidt...

NGINX JavaScript Code Execution

The vulnerability of the ngxhttpjsmodule module in the NGINX JavaScript njs interpreter is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

PowerDNS Recursor DoS

The vulnerability of the PowerDNS Recursor DNS server is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the sidxboxread function in the src/isomedia/boxcodebase.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Active Directory Federation Services Spear Phishing

The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Excel Spreadsheet Editor Heap Overflow

The vulnerability of Microsoft Excel spreadsheet editors involves reading data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...

Linux kernel Resource Leak DoS

The vulnerability of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

Active Directory Domain Services Code Execution

The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

LockOutRealm Component Apache Tomcat Bypass

The vulnerability of the LockOutRealm component in the Apache Tomcat application server is related to deficiencies in the mechanism for handling register-dependent data. Exploiting this vulnerability allows a malicious actor to bypass existing security measures remotely...

Apache HTTP Server mod_proxy_html DoS

The vulnerability of the modproxyhtml module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Django Length Mismatch DoS

The vulnerability of the Django web application framework is related to improper handling of length parameter mismatches. Exploiting this vulnerability can allow an attacker to cause service failures...

ZTE MU5250 Wi-Fi Router Information Disclosure

The vulnerability of ZTE MU5250 Wi-Fi router microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

Netty DefaultHttpRequest DefaultFullHttpRequest HTTP Request Smuggling

The vulnerability of the DefaultHttpRequest and DefaultFullHttpRequest classes in the Netty framework for developing network applications, servers, and client protocols is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTT...

PHP-FPM XSS

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...

OLIMPOX SQL Injection Unauthorized Access

The vulnerability of the software for the training and control system “OLIMPOX” is related to insufficient elimination of special elements during the formation of SQL queries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the databas...

TRENDnet TEW-821DAP SSI Sub_41EC14 Heap Buffer Overflow

The vulnerability of the sub41EC14 function in the ssi service of TRENDnet TEW-821DAP wireless access points is related to the execution of an operation outside the buffer in memory when processing the nslookuptarget parameter. Exploiting this vulnerability allows a remote attacker to execute...

Ollama Open WebUI Unauthorized Access

The vulnerability of Ollama’s AI-based web interface, Open WebUI, is related to the lack of authentication during the processing of endpoints like /api/generate, /api/embed, /api/embeddings, and /api/show. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to...

GPAC SVG Parse DoS

The vulnerability of the svgparsestrings and gfsvgparseattribute functions on the GPAC multimedia platform is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

server daemon incusd in DoS

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the handling of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures...

server daemon incusd in DoS

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the handling of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures...

server daemon incusd in DoS

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

RDP Client contains_dotdot() Path Traversal

The vulnerability of the contains.dot function in the RDP client FreeRDP is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to read and write arbitrary files remotely...

tr.Next() Container DoS

The vulnerability of the tr.Next method in container management systems and the Incus virtual machine manager is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

HTML RDiscount Buffer Overflow DoS

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Undertow Unlimited Resource Distribution DoS

The vulnerability of the Undertow web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

TRENDnet TEW-635BRM Router Code Execution

The vulnerability of the ipoatest function in the IPoA WAN Connection Setup component of TRENDnet TEW-635BRM software for routers exposes the system to attack. This vulnerability arises from the lack of measures taken to neutralize specific elements in the output data. Exploiting this vulnerabili...

Open WebUI Authentication Bypass

The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to and modify data...

ZTE ZXHN H8102E H168N H167A H199A H288A H198A H

The vulnerability of the post.parsedata function in ZTE ZXHN H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q routers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious...

Incus SSRF

The vulnerability of the server daemon incus in the container management and virtual machine manager system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack...

GPAC multimedia Heap Buffer Overflow DoS

The vulnerability of the svginprocess function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Moby Container Isolation Synchronization File Read Write

The vulnerability of the Moby container isolation system creation software is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability allows an attacker to read and write arbitrary files...

Lxml etree.iterparse() XML File Read

The vulnerability of the etree.iterparse and ETCompatXMLParser functions in the Lxml library for processing XML and HTML markup is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to read arbitrary files...

HTML RDiscount Buffer Overflow DoS

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux futex_key_to_node_opt Heap Buffer Overflow DoS

The vulnerability of the futexkeytonodeopt function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda CH22 Router Code Execution

The vulnerability of the formCertListInfo function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

TRENDnet TEW-635BRM Start HTTPD Code Execution

The vulnerability of the starthttpd function of the Web Service component of TRENDnet TEW-635BRM software lies in the issue where the operation exceeds the buffer boundaries in memory when processing the devicename parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

NATS Messaging System Authentication Bypass Privilege Escalation

The vulnerability of the NATS messaging system server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain increased privileges...

client OVN in the

The vulnerability of the client OVN in the container management system and the Incus virtual machine manager is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

GPAC multimedia Platform DoS

The vulnerability of the txtinprocesstexml function on the GPAC multimedia platform is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...