protobufjs Prototype Manipulation DoS

The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Protobufjs Code Execution

The vulnerability of the JavaScript function in the Protocol Buffers Protobuf library, called protobufjs, is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

GitLab CI/CD Unauthorized Access

The vulnerability of the software interface of the CI/CD subsystem of the Git-based software platform for collaborative code development in GitLab EE/CE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

ANGLE Library Sandbox Bypass

The vulnerability of the ANGLE library in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

WebShare Component Sandbox Bypass

The vulnerability of the WebShare component in the Google Chrome browser on Android operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...

Adobe SDK DNG Buffer Overflow Info Disclosure

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in the ability to read data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose confidential information...

Google Chrome Autofill Sandbox Bypass

The vulnerability of Google Chrome’s Autofill function relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

Portainer customTemplateFile XSS

The vulnerability of the Portainer container management platform’s customTemplateFile function is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Graphics Text DoS

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper handling of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Protocol Buffers Decoder DoS

The vulnerability of the decoder in the Protocol Buffers-based library related to Protocol Buffers Protobuf protobufjs is associated with an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome Font Component Code Execution

The vulnerability of the Font component in Google Chrome’s Linux operating system browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

Protocol Buffers toObject Code Execution

The vulnerability of the toObject function in the Protocol Buffers library, which is used for working with Protocol Buffers, is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Next.js beforeInteractive() Code Execution

The vulnerability of the beforeInteractive function in the Next.js web application development software platform is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux sctp_sched_prio_free_sid DoS

The vulnerability of the sctpschedpriofreesid function in Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Cacti Cryptographic Signature Code Execution

The vulnerability of the Cacti network monitoring software is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Dell Automation Platform Auth Bypass Privilege Escalation

The vulnerability of the Dell Automation Platform is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Google Base Sandbox Bypass Chrome Windows OS Bypass

The vulnerability of Google Base database, a browser-based system by Google, and the Google Chrome browser, as well as the Windows operating system, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism through a...

AI assistant Gemini Unauthorized Access

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome of the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

S/MIME Protocol Unauthorized Access

The vulnerability of the S/MIME protocol implementation in software for quick display and access to information about clients in Znuny is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acce...

Google Chrome WebGPU Data Compromise

The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

Linux kernel virtio_gpu_plane_prepare_fb Heap Buffer Overflow DoS

The vulnerability of the virtiogpuplanepreparefb function in the drivers/gpu/drm/virtio/virtgpuplane.c file of the Linux kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service...

Linux DRI Heap Buffer Overflow DoS

The vulnerability of the dpuplanevirtualatomiccheck function in the drivers/gpu/drm/msm/disp/dpu1/dpuplane.c file, a part of the driver for supporting Direct Rendering Infrastructure DRI in the Linux operating system, is related to the assignment of the NULL pointer. Exploiting this vulnerability...

crypto_aegis128_aesni_process_crypt Aegis128 DoS

The vulnerabilities of the functions cryptoaegis128aesniprocesscrypt and cryptoaegis128aesnisetauthsize in the arch/x86/crypto/aegis128-aesni-glue.c module are related to the lack of code validation during function calls. Exploiting these vulnerabilities can allow an attacker to cause a service...

drivers/gpu/drm/amd/display/dc/dce/dce_clock_source.c Heap

The vulnerability of the getpixelclkfrequency100hz function in the drivers/gpu/drm/amd/display/dc/dce/dceclocksource.c driver, which supports Direct Rendering Infrastructure DRI in Linux kernel, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsioscheduletimeout function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux’s kernel involves executing a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow a attacker to cause a service failure...

Google Chrome Skia DoS

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Password Manager Unauthorized Access

The vulnerability of Google Chrome’s Password Manager component is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

ColdFusion Privilege Escalation

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to increase their privileges...

TOTOLINK A3300R Router setWiFiBasicCfg Command Execution

The vulnerability of the setWiFiBasicCfg function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the lack of measures taken to neutralize special elements during the processing of the rxRate parameter. Exploiting this vulnerability could...

Cast Component Code Execution

The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Input component in Google Security Bypass

The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

WebRTC Code Execution

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

Google Chrome Microsoft Edge Bypass

The vulnerability of Google Chrome and Microsoft Edge browser services is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

Google Chrome Microsoft Edge Sandbox Bypass

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

PKI Vault Disclosure Confidential Information

The vulnerability of the PKI Vault platform, which is used for archiving corporate information, in HashiCorp Vault Community Edition and Vault Enterprise, stems from insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose...

Google Chrome Updater Sandbox Bypass

The vulnerability of the Updater component in the Google Chrome browser for MacOS operating systems is due to a race condition. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

NETAMS WNAM user management software Command Injection

The vulnerability of NETAMS WNAM user management software lies in the lack of measures taken to neutralize special elements used in the expression language. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the server remotely...

NETAMS WNAM user management software Session Interception

The vulnerability of NETAMS WNAM user management software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to remotely intercept a session and gain control of another user’s control interface...

SAML-based NetScaler ADC Controller DoS

The vulnerability of the SAML authentication mechanism for NetScaler ADC formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a...

Suricata Resource Exhaustion DoS

The vulnerability of the Suricata intrusion detection and prevention system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

libssh2 Heap Buffer Overflow DoS

The vulnerability of the libssh2publickeylistFetch function in the libssh2 library is related to the use of uninitialized resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

nghttp2 Component Data Compromise

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Linux kernel networking function Heap Buffer Overflow DoS

The vulnerability of the monhandleauthdone function in the net/ceph/monclient.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Splunk Enterprise Access Control Data Compromise

The vulnerability of the Splunk Enterprise platform for operational analysis is related to access control errors, which allow attackers to compromise the integrity of the protected information...

Splunk Enterprise Data Compromise

The vulnerability of the Splunk Enterprise platform for operational analysis is related to improper handling of data with Unicode encoding. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Grafana OpenFeature DoS

The vulnerability of the OpenFeature function on the Grafana monitoring and observation platform relates to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Libxml2 xmlHTMLPrintFileContext Disclosure

The vulnerability of the xmlHTMLPrintFileContext function in the xmllint component of the Libxml2 library is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose confidential information or gain elevated privileges...

Active Storage Code Execution

The vulnerability of the Active Storage component in the Ruby on Rails programming framework is related to insufficient checking of the intentions by the recipient of the broadcast message. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Chrome PreviewTab Bypass Security

The vulnerability of the PreviewTab component in Google Chrome and Microsoft Edge is related to deficiencies in the data source confirmation mechanism. Exploiting this vulnerability can allow an attacker to bypass security measures through a specially created HTML page...