The vulnerability of Tenda AC7 microprogrammed software, related to the disclosure of information during data transmission, allows a hacker to disclose the protected information.

The vulnerability of Tenda AC7 microprogramming software relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the dissect_openflow_bundle_prop_v6() function of the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectopenflowbundlepropv6 function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the XRDP server, related to improper checking of integrity values, allows a hacker to perform a “man-in-the-middle” attack.

The vulnerability of the XRDP server is related to improper checking of integrity values. Exploiting this vulnerability allows a remote attacker to perform a “man-in-the-middle” attack...

The vulnerability of the DNN CMS system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the DNN CMS system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack...

The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager allows a intruder to gain unauthorized access to protected information.

The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager centralized system management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by...

The vulnerability in the web interface for managing Tenda AC7 router micro-program software allows a attacker to perform a CSRF attack.

The vulnerability in the web interface for managing Tenda AC7 router microprogramming software is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

The vulnerability of corporate email for VK WorkMail, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of corporate email for VK WorkMail is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Module._load() function in the built-in module of the vm2 package manager NPM allows a hacker to execute arbitrary code.

The vulnerability of the Module.load function in the vm2 library’s npm package manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Microsoft Exchange Server servers stems from the lack of protective measures for website structures, allowing attackers to carry out spear-phishing attacks.

The vulnerability of Microsoft Exchange Server servers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

The vulnerability of the Apache Tomcat application server, related to deficiencies in HTTP request processing, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the Apache Tomcat application server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...

The vulnerability of the Runtime component of Google Chrome allows a perpetrator to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Runtime component is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the MediaRecording component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the MediaRecording component in Google Chrome browser relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within the browser’s sandbox, using a specially created HTML page...

The vulnerability of the Cookies component of the Google Chrome browser allows a violator to enhance their privileges.

The vulnerability of the Google Chrome browser’s Cookies component is related to the reliance on cookies without verifying their authenticity and integrity. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

The vulnerability in the Google Chrome web browser for iOS operating systems allows a hacker to increase their privileges.

The vulnerability in the Google Chrome web browser for iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

The vulnerability of the exec2 task driver for Nomad, related to the incorrect definition of symbolic links before accessing files, allows a malicious actor to gain access to and read/write arbitrary files.

The vulnerability of the exec2 driver for Nomad is related to the incorrect definition of symbolic links before accessing files. Exploiting this vulnerability allows an attacker to gain access to and read/write arbitrary files...

Vulnerability of the Networking component: DNS browsers like Mozilla Firefox and the email client Thunderbird, which allow attackers to affect the accessibility of protected information.

The vulnerability of the Networking component: DNS browsers like Mozilla Firefox and the email client Thunderbird are vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information...

Vulnerability of the Audio/Video component: The playback feature in Mozilla Firefox browsers and the Thunderbird email client allows attackers to compromise the accessibility of protected information.

The vulnerability of the Audio/Video component: The playback functions of Mozilla Firefox browsers and the Thunderbird email client are related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the WebGPU component in Mozilla Firefox browsers and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the WebGPU component in Mozilla Firefox browsers and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the ngx_http_proxy_v2_module in NGINX open-source web servers allows attackers to compromise the integrity of protected information.

The vulnerability of the ngxhttpproxyv2module module in NGINX Open Source web servers is related to a coding error. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of the protected information...

The vulnerability of the DCP-ETSI protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, allows attackers to cause service interruptions.

The vulnerability of the DCP-ETSI protocol analyzer, which is part of the Wireshark network traffic analyzer, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the ASN.1 PER protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows attackers to induce service failures.

The vulnerability of the ASN.1 PER protocol analyzer and the Wireshark network traffic analyzer is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the TLS protocol analyzer and the network traffic analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the TLS protocol analyzer and the network traffic analyzer in Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a attacker to cause a service failure...

The vulnerability of the N8n automation platform, related to bypassing authentication using a user-controlled key, allows attackers to disclose protected information.

The vulnerability of the N8n automation platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to disclose protected information by sending a specially crafted request with the projectId parameter...

The vulnerability of the MCP OAuth component of the automation platform for N8n processes allows a hacker to redirect a user to any arbitrary URL address.

The vulnerability of the MCP OAuth component of the automation platform for N8n processes is related to the redirection of the URL to an unreliable website during the processing of the /mcp-oauth/register endpoint. Exploiting this vulnerability could allow a malicious actor to redirect users to a...

The vulnerability of the XRDP server, related to buffer overflows in dynamic memory, allows a hacker to execute arbitrary code.

The vulnerability of the XRDP server is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the XRDP server, related to deficiencies in access control, allows a perpetrator to elevate their privileges to the root level and execute arbitrary code.

The vulnerability of the XRDP server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level and execute arbitrary code...

The vulnerability of the Nginx UI server’s user interface relates to synchronization errors when using a shared resource. This allows attackers to cause service failures or execute arbitrary code.

The vulnerability of the Nginx UI server’s user interface is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary commands.

The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the final point of the application software interface/api/v1/build_public_tmp/{flow_id}/flow, which is used for creating and deploying agents and processes in Langflow. This allows a perpetrator to execute arbitrary code.

The vulnerability of the endpoint of the application programming interface/api/v1/buildpublictmp/flowid/flow for creating and deploying Langflow agents and processes is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to execu...

The vulnerability of the WebRTC component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC component in Google Chrome relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within the browser’s sandbox, using a specially created HTML page...

The vulnerability of the WebCodecs component in the Google Chrome web browser, which allows a hacker to disclose protected information

The vulnerability of the WebCodecs component in the Google Chrome web browser relates to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created HTML page...

Vulnerability of the Audio/Video component: The playback feature in Mozilla Firefox browsers and Thunderbird email client allows attackers to trigger a service failure.

The vulnerability of the Audio/Video component: The playback functions of Mozilla Firefox browsers and the Thunderbird email client are vulnerable to a resource consumption issue that is not controlled. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Vulnerability of the WebRTC component: The networking features of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of WebRTC component: The networking functions of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality,...

The vulnerability of the NSS component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to gain unauthorized access to protected information.

The vulnerability of the NSS component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

The vulnerability of the DCP-ETSI protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the DCP-ETSI protocol analyzer, a tool for analyzing computer network traffic with Wireshark, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the mbim_dissect_tlv_ie_list() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the mbimdissecttlvielist function in the Wireshark computer network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Next.js software platform for creating web applications stems from the use of an algorithm that does not meet security requirements for hash functions. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Next.js web application development software platform is related to the use of an algorithm that does not meet security requirements for hash functions. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerabilities of the ngx_http_scgi_module and ngx_http_uwsgi_module modules in NGINX Plus and NGINX Open Source web servers allow a attacker to perform a “man-in-the-middle” attack.

The vulnerability of the ngxhttpscgimodule and ngxhttpuwsgimodule modules in NGINX Plus and NGINX Open Source web servers is related to uncontrolled memory consumption. Exploiting this vulnerability can allow a remote attacker to perform a “man-in-the-middle” attack...

The vulnerability of the NPM packet manager’s vm2 library allows attackers to bypass the sandbox’s security mechanisms.

The vulnerability of the NPM package manager’s vm2 library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to bypass the sandbox’s security mechanisms...

The vulnerability of the VoIP gateway software Telecom MG, related to deficiencies in authentication procedures, allows a perpetrator to bypass session authentication and reconfigure the gateway’s configuration.

The vulnerability of the VoIP gateway software of Telecom MG is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass session authentication checks and reconfigure the gateway settings...

The vulnerability of the Oracle Database Node component of the N8n automation platform allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the Oracle Database Node component of the N8n automation platform relates to the lack of measures taken to protect the SQL query structure during the processing of the LIMIT field. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code a...

The vulnerability of the Python Task Runner module of the N8n automation platform allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the Python Task Runner module of the N8n automation platform relates to improper code generation management. Exploiting this vulnerability allows a remote attacker to bypass the sandbox’s security mechanisms and execute arbitrary code...

The vulnerability of the Cast component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Cast component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript Engine component in Mozilla Firefox browsers and the Thunderbird email client allows attackers to compromise the confidentiality of protected information.

The vulnerability of the JavaScript Engine component in Mozilla Firefox browsers and the Thunderbird email client is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of protected information...

The vulnerability of the ngx_http_ssl_module module in NGINX Plus and NGINX Open Source web servers allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the ngxhttpsslmodule module in NGINX Plus and NGINX Open Source web servers is related to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and accessibility of protected information...

The vulnerability of the SDP protocol analyzer in Wireshark allows a hacker to induce a service failure.

The vulnerability of the SDP protocol analyzer in Wireshark’s computer network traffic analysis tool is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Nginx UI server’s user interface allows a perpetrator to execute arbitrary code.

The vulnerability of the Nginx UI server’s user interface is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...