Maven Package Registry Bypass

The vulnerability of the Maven package registry on the Git-based software development platform, used for collaborative code development on GitLab EE/CE, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing securit...

D-Link DCS-935L Wireless HD Camera Sub_400E40 Function Arbitrary Command Execution

The vulnerability of the sub400E40 function in the setconf.cgi script of the D-Link DCS-935L wireless HD camera software is related to the failure to eliminate special elements during the processing of the UID parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

ViewTransitions Component Code Execution

The vulnerability of the ViewTransitions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through the created HTML page...

Password component Data Compromise

The vulnerability of the Password component in Microsoft Edge and Google Chrome relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

protobufjs Prototype Manipulation DoS

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome Microsoft Edge Code Execution

The vulnerability of Google Chrome and Microsoft Edge browser-based services relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

GitLab CI/CD Unauthorized Access

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Next.js DoS

The vulnerability of the Next.js software platform for creating web applications is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Dawn Component Unauthorized Access

The vulnerability of the Dawn component in the Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information through a specially created HTML page...

Graphics Text DoS

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper handling of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Google Chrome Font Component Code Execution

The vulnerability of the Font component in Google Chrome’s Linux operating system browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

Protocol Buffers Decoder DoS

The vulnerability of the decoder in the Protocol Buffers-based library related to Protocol Buffers Protobuf protobufjs is associated with an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome WebView Information Disclosure

The vulnerability of the WebView component in Google Chrome’s Android operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information through a specially created HTML page...

Network component Google Chrome Information Disclosure

The vulnerability of the Network component in Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential information through a specially created HTML page...

protobufjs Uncontrolled Recursion Information Disclosure

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Cacti auth_login_redirect() Phishing

The vulnerability of the authloginredirect function in the Cacti network monitoring software is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to carry out phishing attacks remotely...

Cacti Path Traversal Phishing

The vulnerability of the Cacti network monitoring software is related to an incorrect limitation on the path name to the directory when processing the formatfile parameter. Exploiting this vulnerability allows a remote attacker to perform phishing attacks...

Dell Automation Platform Auth Bypass Privilege Escalation

The vulnerability of the Dell Automation Platform is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

pgAdmin 4 Command Injection

The vulnerability of the pgAdmin 4 database management tool exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

FileBackedSessionManager Code Execution

The vulnerability of the FileBackedSessionManager mechanism in the pgAdmin 4 database management tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Chrome Remote Desktop RCE

The vulnerability of the Chrome Remote Desktop remote administration tool in Google Chrome browsers on macOS operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Faraday HTTP Request SSRF

The vulnerability of the buildexclusiveurl method in the Faraday HTTP request processing library for the Ruby programming language is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...

Google Base Sandbox Bypass Chrome Windows OS Bypass

The vulnerability of Google Base database, a browser-based system by Google, and the Google Chrome browser, as well as the Windows operating system, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism through a...

AI assistant Gemini Unauthorized Access

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome of the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

Google Chrome WebGPU Data Compromise

The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

Linux kernel virtio_gpu_plane_prepare_fb Heap Buffer Overflow DoS

The vulnerability of the virtiogpuplanepreparefb function in the drivers/gpu/drm/virtio/virtgpuplane.c file of the Linux kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service...

FinOps tool Microsoft Cost Management Information Disclosure

The vulnerability of the FinOps tool for analysis, forecasting, budget limiting, and resource cost optimization in Microsoft Cost Management is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Linux DRI Heap Buffer Overflow DoS

The vulnerability of the dpuplanevirtualatomiccheck function in the drivers/gpu/drm/msm/disp/dpu1/dpuplane.c file, a part of the driver for supporting Direct Rendering Infrastructure DRI in the Linux operating system, is related to the assignment of the NULL pointer. Exploiting this vulnerability...

crypto_aegis128_aesni_process_crypt Aegis128 DoS

The vulnerabilities of the functions cryptoaegis128aesniprocesscrypt and cryptoaegis128aesnisetauthsize in the arch/x86/crypto/aegis128-aesni-glue.c module are related to the lack of code validation during function calls. Exploiting these vulnerabilities can allow an attacker to cause a service...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsioscheduletimeout function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux’s kernel involves executing a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow a attacker to cause a service failure...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

TOTOLINK A3300R Router setSyslogCfg() Command Execution

The vulnerability of the setSyslogCfg function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the provided parameter. Exploiting this vulnerability allows...

Media component Sandbox Bypass

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to bypass the sandboxing protection mechanisms...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to memory corruption beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

ANGLE Library Disclosure DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

Password component Bypass Security Restrictions

The vulnerability of the Password component in browsers Google Chrome and Microsoft Edge is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

WebAppInstalls Component Code Execution

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Chromecast components sandbox bypass

The vulnerability of Chromecast browsers in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms...

Extensions Component Bypass Security Restrictions

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by downloading the malicious extension...

Airflow FTP Provider Disclosure

The vulnerability of the FTPSHook.get Conn function of the Airflow FTP Provider lies in the transmission of data in an open manner. Exploiting this vulnerability allows a malicious actor to disclose sensitive information...

Teamcenter Product Lifecycle Management Code Execution

The vulnerability of the Teamcenter product lifecycle management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

SIPROTEC Relay Protection Random Values

The vulnerability of SIPROTEC 5 relay protection, automation, and control devices is related to the limited number of possible random values. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to the protected information...

GitLab Reverse DNS Unauthorized Access

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development on GitLab EE/CE is related to the dependence of critical operations on the reverse DNS solution. Exploiting this vulnerability can allow a malicious actor to ga...

GitLab EE Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GitLab EE Unauthorized Access

The vulnerability of the software interface of a Git-based software platform for collaborative code development on GitLab EE is related to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an intruder, operating remotely, to gain...

GitLab Privilege Escalation

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

GitHub Copilot Command-Line Code Execution

The vulnerability of the GitHub Copilot command-line interface is related to incorrect behavior. Exploiting this vulnerability can allow an attacker to execute arbitrary code...