Apache HTTP Server mod_vhost_alias() Code Execution

The vulnerability of the modvhostalias function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code by sending a specially crafted HTTP...

Office Online Package ONLYOFFICE Docs Path Traversal

The vulnerability of the office online package ONLYOFFICE Docs DocumentServer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ndsudo Code Execution

The vulnerability of the ndsudo component of the Netdata monitoring software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

JFrog Artifactory Privilege Escalation

The vulnerability of the JFrog Artifactory repository management platform is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

FluentRender Code Execution

The vulnerability of the FluentRender component of the logging-operator data collector module related to Fluentd involves incorrect elimination of certain elements in the output data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

kresd DNS Resolver Code Execution

The vulnerability of the kresd DNS resolver’s knot resolver component is related to incorrect configuration data input. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Elixirgrpc Algorithmic Complexity DoS

The vulnerability of the Elixirgrpc programming language’s web application development library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Qualcomm Embedded Authentication Bypass File Write

The vulnerability of embedded Qualcomm software lies in the lack of authentication for critical functions. Exploiting this vulnerability allows attackers to write arbitrary files...

Cisco License On-Prem Web Interface Account Reset Unauthorized Access

The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to perform password brute-force attacks and gain unauthoriz...

Cisco License On-Prem Web Interface Arbitrary File Write DoS

The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to deficiencies in the processing of relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files or caus...

Cisco NX-OS Python Sandbox Bypass Command Execution

The vulnerability of the built-in Python interpreter in the Cisco NX-OS operating system is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms and execute arbitrary commands...

SMB Server Network Transport Driver DoS

The vulnerability of the SMB Server Network Transport Driver srvnet.sys on Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

USB driver Windows Privilege Escalation

The vulnerability of the USB driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Storage Port Driver Privilege Escalation

The vulnerability of the Storage Port Driver driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Fax Service Windows Privilege Escalation

The vulnerability of the Fax Service in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to the exposure of information due to incompatibility. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

Google Chrome Downloads Component Data Compromise

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

Google Chrome Downloads Component Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, as well as cause service failures through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browsers is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially crafted HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browsers relates to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browsers is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of Google Chrome and Microsoft Edge browser services is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers stems from a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers stems from a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers stems from the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge stems from insufficient elimination of certain elements in the request. Exploiting this vulnerability can allow an attacker to cause a service failure through the use of a specially crafted HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to the lack of security mechanisms to protect protected information. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

DevTools Suite Protected Information Access

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying data sources. Exploiting this vulnerability could allow an attacker to gain access to protected information...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information through a specially crafted HTML page...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to the improper implementation of security features at the client-side. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Autofill DoS

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to inadequate protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially...

AI assistant Gemini Information Disclosure

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge involves exploiting a flaw related to information disclosure due to inconsistencies in the system. Exploiting this vulnerability allows an attacker to gain access to...

LUA File Virtualization Filter Driver Privilege Escalation

The vulnerability of the LUA File Virtualization Filter Driver in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Cisco Secure Workload protection Multi-cloud Data Centers Compromise Data Compromise

The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected...

Next.js Path Traversal

The vulnerability of the Next.js web application development software platform is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...