The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the redirection of URLs to unreliable websites. This allows attackers to redirect users to arbitrary URL addresses.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

The vulnerability of the phy_config_inband() function in the drivers/net/phy/phy.c file of the Linux physical layer network driver kernel module allows a hacker to cause a service failure.

The vulnerability of the phyconfiginband function in the drivers/net/phy/phy.c file of the Linux physical layer network driver is related to mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the amdgpu_atom_execute_table_locked() function in the drivers/gpu/drm/amd/amdgpu/atom.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuatomexecutetablelocked function in the drivers/gpu/drm/amd/amdgpu/atom.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacke...

The vulnerability of the `convertToValidJSONString` function in the software platform for creating user interfaces based on language models (LLM) called Flowise allows a perpetrator to execute arbitrary code.

The vulnerability of the convertToValidJSONString function in the software platform for creating user interfaces based on language models LLM called Flowise is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of PDF viewing and editing programs such as Acrobat DC and Acrobat Reader DC, particularly in versions like Acrobat 2024, stems from errors in verifying cryptographic signatures. This allows attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, and Acrobat 2024 are related to errors in verifying the cryptographic signature. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge stems from the use of an object that does not invoke a destructor. Exploiting this vulnerability could allow a malicious actor to cause a service failure by installing a malicious extension...

The vulnerability of the Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows attackers to enhance their privileges.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Zyxel network device microprogramming software, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of Zyxel network device microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the LDAP Server component of the FortiSandbox threat detection and mitigation system allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP Server component of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted reques...

The vulnerability of the pythonic_tool_parser.py script from the library for working with large language models (LLMs), vLLM, allows a perpetrator to trigger a service failure.

The vulnerability of the pythonictoolparser.py script, a library for working with large language models LLMs, is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Fortinet FortiWeb network firewalls, related to buffer overflow in the stack, allows attackers to bypass the stack and ASLR protections and execute arbitrary code.

The vulnerability of Fortinet FortiWeb web applications’ network firewalls is related to buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to bypass the stack and ASLR protections and execute arbitrary code using specially crafted HTTP requests...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

The vulnerability of the v1/fetch-links interface of the software platform for creating user interfaces based on Language Models (LLMs) like Flowise allows a attacker to perform an SSRF attack.

The vulnerability of the v1/fetch-links interface of the software platform for creating user interfaces based on Language Models LLMs from Flowise is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF...

The vulnerability of the xrx200_alloc_buf() function in the drivers/net/ethernet/lantiq_xrx200.c file of the Linux kernel’s network adapter driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xrx200allocbuf function in the drivers/net/ethernet/lantiqxrx200.c module of the Linux Ethernet network adapter driver is related to the unrestricted and unregulated distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the...

The vulnerability of the get_nodes() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getnodes function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the usbremove_hcd() function in the drivers/usb/core/hcd.c file of the Linux operating system’s USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbremovehcd function in the drivers/usb/core/hcd.c file of the Linux operating system’s USB device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of the mcp_smbus_write() function in the drivers/hid/hid-mcp2221.c module of the user interface subsystem driver for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mcpsmbuswrite function in the drivers/hid/hid-mcp2221.c module of the Linux kernel’s input device subsystem driver relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the dx_probe() function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the panfrost_ioctl_create_bo() function in the drivers/gpu/drm/panfrost/panfrost_drv.c driver for the Direct Rendering Infrastructure (DRI) component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panfrostioctlcreatebo function in the drivers/gpu/drm/panfrost/panfrostdrv.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker...

The vulnerability in the `drivers/isdn/hardware/mISDN/hfcpci.c` module related to mISDN hardware devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/isdn/hardware/mISDN/hfcpci.c module, related to mISDN hardware support in the Linux operating system, is associated with incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mwifiexhandle_uap_rx_forward() function in the drivers/net/wireless/marvell/mwifiex/uap_txrx.c file of the Marvell wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mwifiexhandleuaprxforward function in the drivers/net/wireless/marvell/mwifiex/uaptxrx.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...

The vulnerability of the analytical platform CISA Thorium, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the CISA Thorium analytical platform, related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the CISA Thorium analytical platform lies in its incorrect session duration, which allows attackers to bypass existing security mechanisms.

The vulnerability of the CISA Thorium analytical platform is related to an incorrect session duration. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the PowerVR graphics driver in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the PowerVR graphics driver in Google Chrome and Microsoft Edge is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows attackers to bypass the sandboxing protection mechanisms.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, stems from errors in the certificate validation process. These errors allow attackers to gain unauthorized access to protected information and perform MITM (Man-In-The-Middle) attacks.

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for security event monitoring and analysis, is related to errors in the certificate validation process. Exploiting this vulnerability ca...

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, stems from insufficient restrictions on authentication attempts. This allows a malicious actor to circumvent existing security restrictions.

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of requests at the server side. This allows attackers to circumvent security restrictions.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow a malicious actor to bypass security...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of input data. This allows attackers to bypass existing security mechanisms.

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to bypass existing security mechanisms...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of Flowise’s software platform for creating user interfaces based on language models (LLMs) lies in the lack of authentication for a critical function, allowing attackers to execute arbitrary commands.

The vulnerability of the software platform for creating user interfaces based on language models LLM in Flowise is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the FreeBSD operating system’s kernel, which allows a hacker to gain access to the file system

The vulnerability of FreeBSD operating systems lies in the insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to gain access to the file system...

The vulnerability of the `ksmbd_smb2_check_message()` function in the `fs/smb/server/smb2misc.c` module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c module, which is part of the SMB server support in Linux operating systems, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerabilities of the functions drm_sched_entity_kill_jobs_cb() and drm_sched_entity_kill_jobs() in the drivers/gpu/drm/scheduler/sched_entity.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allow a malicious actor to cause a service failure.

The vulnerabilities of the functions drmschedentitykilljobscb and drmschedentitykilljobs in the drivers/gpu/drm/scheduler/schedentity.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel are related to improper memory release mechanisms memory leaks. Exploiting these...

The vulnerabilities of the functions __msc_buffer_win_free() and msc_buffer_get_page() in the driver/hwtracing/intel_th/msu.c module of the Linux kernel’s hardware tracing driver allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions mscbufferwinfree and mscbuffergetpage in the drivers/hwtracing/intelth/msu.c module of the Linux kernel’s hardware tracing driver is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the jbd2_journal_dirtymetadata() function in the fs/jbd2/transaction.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jbd2journaldirtymetadata function in the fs/jbd2/transaction.c module of the Linux kernel file system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the bpf_timer CancelAndFree() function in the kernel/bpf/helpers.c module, which supports the BPF interpreter for the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the bpftimer CancelAndFree function in the kernel/bpf/helpers.c file, which is part of the Linux operating system’s BPF interpreter support, stems from the lack of a check on the returned value. Exploiting this vulnerability could allow an attacker to trigger a service failur...

The vulnerability of the get_stubs_size() function in the arch/powerpc/kernel/module_64.c module, which is part of the PowerPC platform support for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getstubssize function in the arch/powerpc/kernel/module64.c module, which is part of the PowerPC kernel support for the Linux operating system, involves the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an...

The vulnerability of the smc_clc_send_confirm_accept() function in the net/smc/smc_clc.c module of the CLC-handshaking TCP socket subsystem of the SMC subsystem in the Linux operating system allows a intruder to cause a service failure.

The vulnerability of the smcclcsendconfirmaccept function in the net/smc/smcclc.c module of the CLC-handshaking TCP socket subsystem of the Linux operating system’s SMC kernel is related to the assignment of pointers due to an incorrect update of a reused resource. Exploiting this vulnerability c...

The vulnerability of the ravb_suspend() function in the drivers/net/ethernet/renesas/ravb_main.c file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a service failure.

The vulnerability of the ravbsuspend function in the drivers/net/ethernet/renesas/ravbmain.c file of the Linux kernel’s Ethernet adapter support driver is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smb2_set_ea() function in the fs/smb/server/smb2pdu.c module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smb2setea function in the fs/smb/server/smb2pdu.c module of the SMB server software in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an...

The vulnerability of the software for centralized device management of Fortinet’s FortiManager and FortiManager Cloud, as well as the security event monitoring and analysis tools Fortinet’s FortiAnalyzer and FortiAnalyzer Cloud, stems from the use of uncontrolled format strings, allowing a perpetrator to execute arbitrary code.

The vulnerability of the software tools for centralized device management of Fortinet’s FortiManager and FortiManager Cloud, as well as the security event monitoring and analysis tools Fortinet’s FortiAnalyzer and FortiAnalyzer Cloud, is related to the use of uncontrolled format strings. Exploiti...

The vulnerabilities of the functions ublk CancelCmd() and ublk_uringCmdCancelFn() in the drivers/block/ublk_drv.c module of the Linux kernel’s block devices driver allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions ublk CancelCmd and ublkuringCmdCancelFn in the drivers/block/ublkdrv.c module of the Linux kernel’s block devices driver is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the microprogramming software for Fortinet FortiSwitchAXFixed devices arises from copying buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability of Fortinet FortiSwitchAXFixed microprogrammed software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted LLDP packet...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the WebAssembly module of Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...