RF4CE Protocol DoS

The vulnerability of the RF4CE protocol discoverer and the Wireshark network traffic analyzer involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Node.js follow-redirects Information Disclosure

The vulnerability in Node.js’ follow-redirects module is related to the exposure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Addressable URI library DoS

The vulnerability of the URI library’s implementation is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Rack Uncontrolled Resource Consumption DoS

The vulnerability of the modular interface between web servers and Rack web applications is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

usbhs_remove() DoS

The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c file of the Linux device driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

lib/precompiler.js DoS

The vulnerability of the lib/precompiler.js component, which is part of the Handlebars template creation tool, is related to the lack of security measures for handling web page structures. Exploiting this vulnerability could allow an attacker to cause service failures...

lib/handlebars/runtime.js Heap Buffer Overflow DoS

The vulnerability of the resolvePartial and invokePartial functions in the lib/handlebars/runtime.js component, which is used for creating Handlebars templates, is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the xhcifreevirtdevice function in the drivers/usb/host/xhci-mem.c module of the Linux device driver framework is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Direct Rendering Infrastructure Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the msmdrmuninit function in the driver/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI kernel driver of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

GITHUB Kubernetes Rancher Unauthorized Access

The vulnerability of the GitHub authentication provider for Kubernetes Rancher software management systems is related to flaws in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Gitea SSRF

The vulnerability of the HostMatchList.checkIP method in the Git repository management system Gitea is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

UTT HiPER 1250GW DoS

The vulnerability of the /goform/ConfigWirelessBase5g file of the Web Endpoint component of the microprogramming software for routers UTT HiPER 1250GW is related to the escape of operations from the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause service...

tls-crypt-v2 Check Session Buffer Overflow Privilege Escalation

The vulnerability of the checksessionbufnotused function in the tls-crypt-v2 software of OpenVPN allows for the use of memory after it is freed. Exploiting this vulnerability could enable a remote attacker to cause a service failure or execute arbitrary code...

Cisco Identity Services Engine Authentication Bypass

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device are related to deficiencies in the authentication process. Exploiting this vulnerability could allow a maliciou...

OpenBSD sppp_pap_input() function Heap Buffer Overflow

The vulnerability of the sppppapinput function in the ifspppsubr.c script of the OpenBSD operating system is related to deficiencies in the mechanism for restricting the amount of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

Cisco Crosswork Network Controller Command Execution

The vulnerability of the web-based interface for controlling the Cisco Crosswork Network Controller CNC is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Oracle Complex Maintenance RCE

The vulnerability of the Production component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems related to Oracle E-Business Suite applications is related to deficiencies in access control. Exploiting this vulnerability cou...

Oracle Receivables Internal Operations Component Full Control

The vulnerability of the Internal Operations component of the “from order to payment” automation module in Oracle Receivables, a business automation system from Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating...

Business Logic Infrastructure Security Full Control

The vulnerability of the Business Logic Infrastructure Security component of the JD Edwards EnterpriseOne Tools system for resource management involves insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using th...

OpenSearch DoS

The vulnerability of the OpenSearch software package is related to insufficient protection of service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

ColdFusion Unrestricted File Execution

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ColdFusion Path Traversal

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

ColdFusion Path Traversal

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ColdFusion Insufficient Validation File Read

The vulnerability of the ColdFusion software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

ColdFusion Path Traversal

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Urllib3 HTTP Response Processing Flow DoS

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Urllib3 HTTPConnection Unauthenticated Access

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Google Chrome Bookmark Synchronization XSS

The vulnerability of the Google Chrome browser’s bookmark synchronization function is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary scripts or HTML code through a specially created HTML page...

Mattermost Path Traversal Unauthorized Access

The vulnerability of the Mattermost instant messaging application is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Mattermost Auth Bypass

The vulnerability of the Mattermost instant messaging application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

Mattermost CSRF

The vulnerability of the Mattermost instant messaging application is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

Mattermost Data Protection Bypass

The vulnerability of the Mattermost instant messaging application is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

NVIDIA deep learning experiment management library neutralization Data Compromise

The vulnerability of the NVIDIA Deep Learning Experiment Management Library relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Go crypto/x509 DoS

The vulnerability of the Go programming language’s crypto/x509 component is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

net/textproto Code Execution

The vulnerability of the net/textproto component in the Go programming language is related to incorrect processing of output data for registration logs. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NetScaler ADC Buffer Overflow DoS

The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...

NetScaler ADC Buffer Overflow DoS

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

NetScaler ADC File Path Access

The vulnerability of NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway access control systems is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Eclipse Wakaama CoAP Block1 DoS

The vulnerability of the CoAP Block1 handler in the open-source implementation of the LightWeight Machine-to-Machine LwM2M protocol, Eclipse Wakaama, involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux DRM msd_hdmi_modeset_init Heap Buffer Overflow DoS

The vulnerability of the msmhdmimodesetinit function in the drivers/gpu/drm/msm/hdmi/hdmi.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...

Linux F2FS Trace Function Use-After-Free

The vulnerability of the do Tracef2fsunlinkenter function in the include/trace/events/f2fs.h module of the Linux operating system is related to data processing errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service failure...

vmwgfx Heap Buffer Overflow DoS

The vulnerability of the vmwkmscursorsnoop function in the drivers/gpu/drm/vmwgfx/vmwgfxkms.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a...

Linux Source Routing Header Handler Buffer Overflow

The vulnerability of the ipv6rplsrhrcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow a remote attacker to compromise t...

KVM Heap Buffer Overflow DoS

The vulnerability of the setupvmgexitscratch function in the KVM subsystem of Linux operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco ISE Policy Management Platform Path Traversal

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to an incorrect limit on the path name to the directory. Exploiting this vulnerability could allow a...

NVIDIA GEN3C Pickle Code Execution

The vulnerability of the pickle.loads function in NVIDIA’s GEN3C video neural network model for creating realistic videos is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Supply to Order Workbench Unauthorized Access

The vulnerability of the Supply to Order Workbench component, a tool for creating and assembling orders within the Oracle Configure to Order system—a business automation solution from Oracle E-Business Suite—is related to deficiencies in access control. Exploiting this vulnerability could allow a...

OpenSearch Security Plugin Privilege Escalation

The vulnerability of the OpenSearch software security plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

TimescaleDB Export Module Privilege Escalation

The vulnerability of the export module of the TimescaleDB application programming interface for the Glances monitoring tool is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges or execut...