NoMachine nxchmod.sh Privilege Escalation

The vulnerability of the nxchmod.sh component of the NoMachine remote desktop access system is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to increase their privileges...

Protocol Buffers toObject Code Execution

The vulnerability of the toObject function in the Protocol Buffers library, which is used for working with Protocol Buffers, is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DevTools Security Bypass

The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

SAP S/4HANA OData Service Data Compromise

The vulnerability of the OData service of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

Apple operating systems Buffer Overflow DoS

The vulnerability of Apple operating systems, including macOS Sequoia, macOS Tahoe, and iOS, is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome Information Disclosure

The vulnerability of the Google Chrome browser’s graphics processor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential information through a specially created HTML page...

SAP S/4HANA Authorization Bypass

The vulnerability of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

drivers/gpu/drm/amd/display/dc/dce/dce_clock_source.c Heap

The vulnerability of the getpixelclkfrequency100hz function in the drivers/gpu/drm/amd/display/dc/dce/dceclocksource.c driver, which supports Direct Rendering Infrastructure DRI in Linux kernel, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an...

Cacti Cryptographic Signature Code Execution

The vulnerability of the Cacti network monitoring software is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Linux sctp_sched_prio_free_sid DoS

The vulnerability of the sctpschedpriofreesid function in Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Fuse readdir Cache Dirent Function Heap Buffer Overflow DoS

The vulnerability of the cachefuseadddirenttocache function in the fs/fuse/readdir.c module of the Linux operating system is related to the execution of operations outside the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gai...

NVIDIA Graphics Driver Use-After-Free

The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

mod_offlinequiz Moodle Command Execution

The vulnerability of the modofflinequiz plugin in the virtual learning environment Moodle is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands...

KACO Blueplanet GridSave Storage Systems Insecure Cryptographic Key Unauthorized Access

The vulnerability of KACO Blueplanet GridSave energy storage systems lies in the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to the protected information...

GitLab Rapid Diffs Unauthorized Access

The vulnerability of the Rapid Diffs mechanism in the Git-based software platform for collaborative code development in GitLab EE/CE relates to the absence of authentication. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access to protected information...

Safari iOS macOS Web page rendering importExternalTexture Bypass Access

The vulnerability of the importExternalTexture method in the WebPageRendering module of the WebKit browser engine for Safari operating systems, iPadOS, and macOS is related to deficiencies in the mechanism for verifying data sources when processing web content. Exploiting this vulnerability can...

Splunk MCP Server Data Compromise

The vulnerability of the Splunk MCP Server data processing and analysis application is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

protobufjs Prototype Modification Privilege Escalation

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

ANGLE Library Sandbox Bypass

The vulnerability of the ANGLE library in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

Network component Google Chrome Data Compromise

The vulnerability of the Google Chrome browser’s Network component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Google Chrome Autofill Sandbox Bypass

The vulnerability of Google Chrome’s Autofill function relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

Google Chrome iOS Memory Use After Free

The vulnerability of Google Chrome browser on iOS operating systems relates to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

Cacti session_regenerate_id Unauthorized Action

The vulnerability of the sessionregenerateid function in the Cacti network monitoring tool is related to improper session management. Exploiting this vulnerability could allow an attacker to perform unauthorized actions on behalf of another user remotely...

GFX Graphics Code Execution

The vulnerability of the GFX graphics subsystem in Google Chrome browsers and Linux operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

pgAdmin 4 MAX_LOGIN_ATTEMPTS Unauthorized Access

The vulnerability of the password blocking mechanism MAXLOGINATTEMPS of the pgAdmin 4 database management tool is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

pgAdmin 4 Plugin Arbitrary JavaScript Execution

The vulnerability of the Browser Tree and the Explain Visualizer modules in the pgAdmin 4 database management tool exists due to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code...

Google Chrome Graphics Processor Sandbox Bypass

The vulnerability of the graphics processor in Google Chrome browsers on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing protection mechanisms by using a specially created HTML page...

Znuny Generic Interface Data Compromise

The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

S/MIME Protocol Unauthorized Access

The vulnerability of the S/MIME protocol implementation in software for quick display and access to information about clients in Znuny is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acce...

Infinispan DoS

The vulnerability of the Infinispan distributed data management component in the Red Hat JBoss Data Grid is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Azure Synapse analytics Privilege Escalation

The vulnerability of Azure Synapse cloud analytics service is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Azure AI Bot Service Authentication Privilege Escalation

The vulnerability of the Azure AI Bot Service, a cloud platform for creating and deploying intelligent chatbots, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges remotely...

Linux kernel DoS

The vulnerability of the functions ad7173setsyscalibmode, ad7173getsyscalibmode, and ad7173writesyscalib in the drivers/iio/adc/ad7173.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Pixel platform XSS

The vulnerability of the Pixel platform’s client data handling module, Altcraft, is related to the lack of adequate measures to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Retail Software SAP Customer Checkout Information Disclosure

The vulnerability of SAP Customer Checkout software for retail sales is related to the storage of information in an open manner. Exploiting this vulnerability could allow a perpetrator to compromise the confidentiality and integrity of the protected information...

Google Chrome Skia DoS

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Tenda F456 httpd Code Execution

The vulnerability of the fromPptpUserAdd function in the httpd daemon of the microprogrammed routing device Tenda F456 is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failur...

Tenda F456 fromVirtualSer() Code Execution

The vulnerability of the fromVirtualSer function in the Tenda F456 router microprogramming software involves executing an operation outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially...

httpd fromAdvSetWan Code Execution

The vulnerability of the fromAdvSetWan function in the httpd daemon’s microprogramming-based router software Tenda F456 is related to the issue of the operation going beyond the buffer in memory when processing parameters like wanmode and PPPOepassword. Exploiting this vulnerability allows a remo...

TOTOLINK A3300R Router setWiFiBasicCfg Command Execution

The vulnerability of the setWiFiBasicCfg function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the lack of measures taken to neutralize special elements during the processing of the rxRate parameter. Exploiting this vulnerability could...

TOTOLINK A3300R Router setIptvCfg() Command Execution

The vulnerability of the setIptvCfg function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the vlanPriLan3 parameter. Exploiting this vulnerability allow...

Cast Component Code Execution

The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DevTools Suite UXSS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute XSS attacks using a specially created HTML page...

Input component in Google Security Bypass

The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

WebRTC Code Execution

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

Google Chrome Microsoft Edge Sandbox Bypass

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

Google Chrome Microsoft Edge Password Manager Bypass

The vulnerability of Google Chrome and Microsoft Edge browser password managers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

iOS-MacOS (Positives) (No. 1 from 2026.07.02 09:03:30)

...

GitLab EE Code Execution

The vulnerability of the programming platform’s analytics panel based on Git for collaborative code development in GitLab EE is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

GitLab EE Unauthorized Access

The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read,...