GnuTLS Buffer Overflow Info Disclosure

The vulnerability of the GnuTLS cryptographic library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

LibRaw Heap Buffer Overflow DoS

The vulnerability of the nikonloadpaddedpackedraw function in the src/decoders/decoderslibraw.cpp file, which is part of the LibRaw image processing library, relates to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing the loadflags and rawwidt...

Python pip Code Execution

The vulnerability of the Python programming language’s pip module is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

NTFS File System Code Execution

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

LUA File Virtualization Filter Driver Privilege Escalation

The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

Linux kernel Resource Control DoS

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Resource Leak DoS

The vulnerability of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

.NET Microsoft Visual Studio Deserialization RCE

The vulnerability of .NET and Microsoft Visual Studio software platforms is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

TRENDnet TEW-635BRM Router Code Execution

The vulnerability of the ipoatest function in the IPoA WAN Connection Setup component of TRENDnet TEW-635BRM software for routers exposes the system to attack. This vulnerability arises from the lack of measures taken to neutralize specific elements in the output data. Exploiting this vulnerabili...

TRENDnet TEW-821DAP SSI Sub_41EC14 Heap Buffer Overflow

The vulnerability of the sub41EC14 function in the ssi service of TRENDnet TEW-821DAP wireless access points is related to the execution of an operation outside the buffer in memory when processing the nslookuptarget parameter. Exploiting this vulnerability allows a remote attacker to execute...

Lxml etree.iterparse() XML File Read

The vulnerability of the etree.iterparse and ETCompatXMLParser functions in the Lxml library for processing XML and HTML markup is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to read arbitrary files...

TRENDnet TEW-635BRM Start HTTPD Code Execution

The vulnerability of the starthttpd function of the Web Service component of TRENDnet TEW-635BRM software lies in the issue where the operation exceeds the buffer boundaries in memory when processing the devicename parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

NATS Messaging System Authentication Bypass Privilege Escalation

The vulnerability of the NATS messaging system server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain increased privileges...

Open WebUI Authentication Bypass

The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to and modify data...

server daemon incusd in DoS

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Moby Container Isolation Synchronization File Read Write

The vulnerability of the Moby container isolation system creation software is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability allows an attacker to read and write arbitrary files...

OLIMPOX SQL Injection Unauthorized Access

The vulnerability of the software for the training and control system “OLIMPOX” is related to insufficient elimination of special elements during the formation of SQL queries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the databas...

PHP-FPM XSS

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...

Incus SSRF

The vulnerability of the server daemon incus in the container management and virtual machine manager system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack...

server daemon incusd in DoS

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the handling of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GPAC multimedia Heap Buffer Overflow DoS

The vulnerability of the svginprocess function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Moby Container Isolation Privilege Escalation

The vulnerability of the Moby containerization system’s software lies in an uncontrolled element of the search process when unpacking xz or gzip compressed archives. Exploiting this vulnerability can allow a perpetrator to enhance their privileges and execute arbitrary code...

tr.Next() Container DoS

The vulnerability of the tr.Next method in container management systems and the Incus virtual machine manager is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

HTML RDiscount Buffer Overflow DoS

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Undertow Unlimited Resource Distribution DoS

The vulnerability of the Undertow web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux futex_key_to_node_opt Heap Buffer Overflow DoS

The vulnerability of the futexkeytonodeopt function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda CH22 Router Code Execution

The vulnerability of the formCertListInfo function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

ZTE MU5250 Wi-Fi Router Information Disclosure

The vulnerability of ZTE MU5250 Wi-Fi router microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

Ollama Open WebUI Unauthorized Access

The vulnerability of Ollama’s AI-based web interface, Open WebUI, is related to the lack of authentication during the processing of endpoints like /api/generate, /api/embed, /api/embeddings, and /api/show. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to...

ZTE ZXHN H8102E H168N H167A H199A H288A H198A H

The vulnerability of the post.parsedata function in ZTE ZXHN H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q routers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious...

GPAC SVG Parse DoS

The vulnerability of the svgparsestrings and gfsvgparseattribute functions on the GPAC multimedia platform is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

server daemon incusd in DoS

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the handling of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures...

client OVN in the

The vulnerability of the client OVN in the container management system and the Incus virtual machine manager is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

RDP Client contains_dotdot() Path Traversal

The vulnerability of the contains.dot function in the RDP client FreeRDP is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to read and write arbitrary files remotely...

GPAC multimedia Platform DoS

The vulnerability of the txtinprocesstexml function on the GPAC multimedia platform is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Netty DefaultHttpRequest DefaultFullHttpRequest HTTP Request Smuggling

The vulnerability of the DefaultHttpRequest and DefaultFullHttpRequest classes in the Netty framework for developing network applications, servers, and client protocols is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTT...

HTML RDiscount Buffer Overflow DoS

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Django Session Cookie Unauthorized Access

The vulnerability of the Django web application framework relates to the ability to send session cookies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Open WebUI innerHTML XSS

The vulnerability of the innerHTML component in the Open WebUI-based web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript code...

aiohttp Application add_domain function DoS

The vulnerability of the Application.adddomain function in the HTTP client of aiohttp is related to the use of duplicate headers due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

TOTOLINK A8000RU CGI Handler Command Execution

The vulnerability of the CsteSystem function in the /cgi-bin/cstecgi.cgi file, belonging to the CGI Handler component of the TOTOLINK A8000RU router’s software, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execu...

extract-zip Symbolic Link RCE

The vulnerability of the npm library extract-zip’s mechanism for handling symbolic links is related to errors in link processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

DBS Etherwatch DoS

The vulnerability of the DBS Etherwatch file-sharing server and the Wireshark traffic analyzer involves the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Juniper Networks Management Daemon DoS

The vulnerability of the Management Daemon MGD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

CMS 1С-Битрикс Content Editor Buffer Overflow

Уязвимость модуля «Редактор для контент-менеджеров» системы управления содержимым сайтов CMS 1С-Битрикс: Управление сайтом связана с неполной очисткой временных или вспомогательных ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

aiohttp HTTP client Directory Disclosure

The vulnerability of the aiohttp HTTP client is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by the system...

Linux t7xx_port EnumMsgHandler() function Heap Buffer Overflow DoS

The vulnerability of the t7xxport EnumMsgHandler function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...

Linux qdisc_peek_dequeued DoS

The vulnerability of the qdiscpeekdequeued function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Trusted Execution Environment Buffer Overflow DoS

The vulnerability of the teeshmregisteruserbuf function in the drivers/tee/teeshm.c module of the Linux kernel’s trusted execution environment is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...