GitLab EE Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GitLab EE Unauthorized Access

The vulnerability of the software interface of a Git-based software platform for collaborative code development on GitLab EE is related to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an intruder, operating remotely, to gain...

GitLab Privilege Escalation

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

GitHub Copilot Command-Line Code Execution

The vulnerability of the GitHub Copilot command-line interface is related to incorrect behavior. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SAP BusinessObjects Business Intelligence Platform Unauthorized Access

The vulnerability of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by clicking on...

SAP Business Objects Business Intelligence Platform Information Disclosure

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the disclosure of information through continuous Cookie files. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Protobufjs Code Execution

The vulnerability of the JavaScript function in the Protocol Buffers Protobuf library, called protobufjs, is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

WebShare Component Sandbox Bypass

The vulnerability of the WebShare component in the Google Chrome browser on Android operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...

Adobe SDK DNG Buffer Overflow Info Disclosure

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in the ability to read data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose confidential information...

Portainer customTemplateFile XSS

The vulnerability of the Portainer container management platform’s customTemplateFile function is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

protobufjs Decoder Bypass

The vulnerability of the UTF-8 decoder in the Protocol Buffers Protobuf protobufjs library is related to incorrect handling of Unicode characters. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...

Google Chrome iOS Memory Use After Free

The vulnerability of Google Chrome browser on iOS operating systems relates to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

Cacti Unserinse RCE

The vulnerability of the cactiunserialize function in the managers.php file of the Cacti monitoring software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

pgAdmin 4 Function Check Access Permission Data Compromise

The vulnerability of the checkaccesspermission function in the pgAdmin 4 database management tool is related to deficiencies in the mechanism for handling symbolic links. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of the protected...

pgAdmin 4 Maintenance Tool Code Execution

The vulnerability of the Maintenance Tool component in the pgAdmin 4 database management tool is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Chrome Media Sandbox Bypass

The vulnerability of the Media component in Google Chrome’s Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...

Google Chrome Password Manager UI Replacement

The vulnerability of Google Chrome’s Password Manager component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

Google Chrome Payments Component Spear Phishing

The vulnerability of Google Chrome’s Payments component on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spearishing attacks...

Linux kernel Direct Rendering Buffer Overflow DoS

The vulnerability of the dcallowidleoptimizationsinternal function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Linux kernel’s Direct Rendering Infrastructure driver is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a...

Linux kernel Network Device Driver Heap Buffer Overflow DoS

The vulnerability of the lapbethgetx25dev function in the drivers/net/wan/lapbether.c module of the Linux kernel network device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

F2FS File System Heap Buffer Overflow DoS

The vulnerability of the decvalidnodecount function in the fs/f2fs/f2fs.h module of the F2FS file system support for Linux operating systems is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Google Chrome Password Manager Unauthorized Access

The vulnerability of Google Chrome’s Password Manager component is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

Google Chrome Skia Unauthorized Access

The vulnerability of Google Chrome’s Skia graphics library is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information through a specially created HTML page...

Tenda F456 httpd fromSafeUrlFilter Heap Buffer Overflow DoS

The vulnerability of the fromSafeUrlFilter function in the httpd daemon of the microprogramming-based router software Tenda F456 is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a...

Tenda F456 httpd fromPPTPUserSetting Code Execution

The vulnerability of the fromPPTPUserSetting function in the Tenda F456 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the delno parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

ColdFusion Privilege Escalation

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to increase their privileges...

Codecs Sandbox Bypass

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge stems from a situation involving a race. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms by using a specially created HTML page...

ANGLE Library Sandbox Bypass

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

Dawn Sandbox Bypass

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...

WebRTC Code Execution

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

ANGLE Library Sandbox Bypass

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...

PDF components Code Execution

The vulnerability of Google Chrome and Microsoft Edge browsers’ PDF components relates to the possibility of using memory after decompression. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created PDF file...

Google Chrome Microsoft Edge Bypass

The vulnerability of Google Chrome and Microsoft Edge browser services is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

Cast Streaming Component Code Execution

The vulnerability of the Cast Streaming component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NETAMS WNAM user management software Session Interception

The vulnerability of NETAMS WNAM user management software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to remotely intercept a session and gain control of another user’s control interface...

Cisco ThousandEyes Virtual Appliance SSL Certificate Processing Arbitrary Command Execution

The vulnerability of the SSL certificate processing function in the virtual machine for deploying the command-line interface of Cisco ThousandEyes Virtual Appliance software for network analysis involves the failure to take measures to neutralize special elements. Exploiting this vulnerability...

Zyxel GS1200 series Switch Authentication Bypass Information Disclosure

The vulnerability of Zyxel GS1200 series microprogrammed software devices is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted HTTP request...

Grafana OpenFeature DoS

The vulnerability of the OpenFeature function on the Grafana monitoring and observation platform relates to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Webex Meetings XSS

The vulnerability of Cisco Webex Meetings software’s web interface is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

NVIDIA Virtual GPU Guest Driver Data Compromise

The vulnerability of NVIDIA Virtual GPU’s guest driver components is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

NVIDIA Virtual GPU Manager Data Compromise

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Texas Instruments Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the netcpndostartxmit function in the drivers/net/ethernet/ti/netcpcore.c file of the Ethernet network adapter driver from Texas Instruments’ Linux kernel lies in the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause ...

Linux IOMMU Kernel Driver DoS

The vulnerability of the functions sidomaininit and initdmars in the drivers/iommu/intel/iommu.c file of the Linux operating system’s IOMMU driver module is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux USB Audio Heap Buffer Overflow DoS

The vulnerability of the syncepsetparams function in the sound/usb/endpoint.c module related to Linux’s USB audio device support is associated with a memory leak memory corruption. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel fs/binfmt_misc.c Check Special Flags Use-After-Free

The vulnerability of the checkspecialflags function in the fs/binfmtmisc.c file of the Linux kernel file system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

Linux kernel Start Power Clamp

The vulnerability of the startpowerclamp function in the drivers/thermal/intel/intelpowerclamp.c file of the Linux kernel temperature control driver is related to improper elimination of certain elements in the data sent to the client. Exploiting this vulnerability could allow an attacker to caus...

Linux kernel BPF __htab_map_lookup_and_delete_batch Heap Buffer Overflow DoS

The vulnerability of the htabmaplookupanddeletebatch function in the kernel/bpf/hashtab.c module, which is part of the Linux kernel’s BPF support, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause servic...

NILFS2 File System Heap Buffer Overflow DoS

The vulnerability of the nilfsvalidsb function in the fs/nilfs2/thenilfs.c file of the NILFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected information or cause servic...

Grafana Unencrypted Credentials

The vulnerability of the Grafana monitoring and observation platform is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...