Supply to Order Workbench Unauthorized Access

The vulnerability of the Supply to Order Workbench component, a tool for creating and assembling orders within the Oracle Configure to Order system—a business automation solution from Oracle E-Business Suite—is related to deficiencies in access control. Exploiting this vulnerability could allow a...

OpenSearch Security Plugin Privilege Escalation

The vulnerability of the OpenSearch software security plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

TimescaleDB Export Module Privilege Escalation

The vulnerability of the export module of the TimescaleDB application programming interface for the Glances monitoring tool is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges or execut...

pgAdmin 4 Execute SQL Query Code Execution

The vulnerability of the executesqlquery function in the pgAdmin 4 database management tool’s AI assistant involves a lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker to gain access to modify data or execute arbitrary code...

ColdFusion Unrestricted File Execution

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Rack Request Bypass

The vulnerability of the Rack::Request component in the Ruby-based Rack web server module interface is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Linux Kernel epremove() Code Execution

The vulnerability of the epremove function in Linux operating system kernels relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

EPSON L14150 RAW-printing Service DoS

The vulnerability of the RAW-printing function of the Microprogramming Software for the EPSON L14150 multifunctional device lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the device...

Enterprise Infrastructure Security Unauthenticated Access DoS

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures usi...

OpenSearch FLS Unauthorized Access

The vulnerability of the FLS module in the OpenSearch software package is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

OpenSearch TLS Certificate Validation

The vulnerability of the TLS certificate validation module in the OpenSearch software package is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

OpenSearch DLS Unauthorized Access

The vulnerability of the DLS component in the OpenSearch software package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Gitea SSH Server Data Compromise

The vulnerability of the SSH server of the Git repository management system Gitea is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected informatio...

pgAdmin 4 Code Execution

The vulnerability of the closesqleditorsession and checktransactionstatus functions in the pgAdmin 4 database management tool is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

SandboxJS createFunction Code Execution

The vulnerability of the createFunction function in the executorUtils.ts file of the SandboxJS library is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Python PandasAI SQL Injection File Read

The vulnerability of the Python PandasAI library is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow an attacker operating remotely to gain read access to arbitrary files...

Go MIME Component DoS

The vulnerability of the Go programming language’s MIME component is related to its algorithmic complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using a specially created MIME header...

Oracle HR Intelligence Internal Operations Full Control

The vulnerability of the Internal Operations component of the Oracle HR Intelligence system, which is used for collecting and analyzing employee data, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain full control over the application using...

Netty HTTP Traffic Spoofing

The vulnerability of the HTTP traffic processing component of the framework used for developing network applications, servers, and Netty protocol clients is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...

Core Component Full Control

The vulnerability of the Core component of the Oracle Enterprise Command Center Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP network protocol...

Linux smc_clc_prfx_match6_rcu Heap Buffer Overflow DoS

The vulnerability of the smcclcprfxmatch6rcu function in the net/smc/smcclc.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

ClamAV FSG File Processing DoS

The vulnerability of the FSG-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions by sending a specially...

NoMachine nxchmod.sh Privilege Escalation

The vulnerability of the nxchmod.sh component of the NoMachine remote desktop access system is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux kernel deflate_compress() Heap Buffer Overflow DoS

The vulnerability of the deflatecompress function in the crypto/deflate.c module of the Linux kernel’s cryptographic subsystem is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

drivers/gpu/drm/amd/amdkfd/kfd_int_process_v10.c Heap

The vulnerability of the eventinterruptwqv10 function in the drivers/gpu/drm/amd/amdkfd/kfdintprocessv10.c driver, a driver for supporting Direct Rendering Infrastructure DRI in AMD graphics cards for Linux operating systems, is related to improper control of resource identifiers “resource...

Trust Protection Foundation Key Management Data Compromise

The vulnerability of the Trust Protection Foundation’s key management and certificate management mechanisms is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

Linux kernel smaps_hugetlb_range Heap Buffer Overflow DoS

The vulnerability of the smapshugetlbrange function in the fs/proc/taskmmu.c module of the Linux kernel’s file system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the msmioctlgeminfosetmetadata function in the drivers/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failur...

Linux kernel Memory Management Buffer Overflow DoS

The vulnerability of the movenormalpmd and movenormalpud functions in the mm/mremap.c module of the Linux kernel’s memory management subsystem is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

ClamAV ALZ File Processing DoS

The vulnerability of the ALZ-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failure by sending a specially crafted fi...

ClamAV InstallShield DoS

The vulnerability of the InstallShield file processing mechanism used by the ClamAV antivirus software is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions by sending a specially crafted...

ClamAV DMG DoS

The vulnerability of the DMG-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions by sending a specially...

Direct Rendering Infrastructure AMD GPU alloc_event_waiters Heap Buffer Overflow DoS

The vulnerability of the alloceventwaiters function in the drivers/gpu/drm/amd/amdkfd/kfdevents.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability could allow an attacker t...

Linux DRI Kernel Heap Buffer Overflow DoS

The vulnerability of the xemigrateaccessmemory function in the drivers/gpu/drm/xe/xemigrate.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service...

Linux DRI Kernel Heap Buffer Overflow DoS

The vulnerability of the xemigrateaccessmemory function in the drivers/gpu/drm/xe/xemigrate.c module of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker t...

VMware Fusion Setuid Privilege Escalation

The vulnerability of the SETUID file in VMware Fusion is related to state management errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfssubpagesetwriteback function in the fs/btrfs/subpage.c file of the btrfs file system in Linux kernels involves an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

io_uring/memmap.c Synchronous I/O DoS

The vulnerability of the ioregionallocatepages function in the iouring/memmap.c module, a component of the Linux kernel’s asynchronous I/O interface, involves the allocation of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise th...

NetComm NF20MESH Unauthorized Access

The vulnerability of the web interface for managing micro-program software on NetComm NF20MESH routers is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ClamAV PESpin File Processing DoS

The vulnerability of the PESpin-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...

Linux kernel multimedia device Heap Buffer Overflow DoS

The vulnerability of the ticsi2rxbufferqueue function in the drivers/media/platform/ti/j721e-csi2rx/j721e-csi2rx.c driver module of the Linux multimedia device support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ulpiregister function in the drivers/usb/common/ulpi.c module of the Linux kernel involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

amdgpu_device_suspend Heap Buffer Overflow DoS

The vulnerability of the amdgpudevicesuspend function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c driver, which is part of the DRI support module for AMD GPU cores in Linux operating systems, leads to a mutual locking condition. Exploiting this vulnerability can allow an attacker to cause a...

Btrfs File System Heap Buffer Overflow DoS

The vulnerability of the grabextentbuffer function in the fs/btrfs/extentio.c module of the btrfs file system support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Adobe Campaign Classic Auth Bypass RCE

The vulnerability of the Adobe Campaign Classic software platform for managing marketing campaigns is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

ClamAV PE-file Processing DoS

The vulnerability of the PE-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...

ClamAV 7z File Processing DoS

The vulnerability of the 7z-file processing mechanism of the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...

Mellanox Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the mlx5hwsbwcmatcherMoveAllComplex function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/bwccomplex.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could...

Cisco Catalyst Center Path Traversal Unauthorized Access

The vulnerability of the Cisco Catalyst Center formerly Cisco DNA Center network infrastructure management system is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Direct Rendering Infrastructure AMD GPU Heap Buffer Overflow DoS

The vulnerability of the dcgetdetbuffersizefromstate function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an...