NVIDIA Virtual GPU Manager Guest driver compromise Data Compromise

The vulnerability of the NVIDIA Virtual GPU Manager and the Guest driver for NVIDIA Virtual GPUs is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux SCSI Driver Heap Buffer Overflow DoS

The vulnerability of the qla24xxabortiocbtimeout function in the drivers/scsi/qla2xxx/qlainit.c driver for SCSI device drivers in the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux macio_add_one_device Heap Buffer Overflow DoS

The vulnerability of the macioaddonedevice function in the drivers/macintosh/macioasic.c module of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

libssh2 Heap Buffer Overflow DoS

The vulnerability of the libssh2publickeylistFetch function in the libssh2 library is related to the use of uninitialized resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

nghttp2 Component Data Compromise

The vulnerability of the nghttpx component in the nghttp2 library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

7-Zip Data Protection Breach

The vulnerability of 7-Zip refers to a flaw in the data protection mechanism implemented by Mark of the Web MOTW. Exploiting this vulnerability allows attackers to bypass existing security measures and perform spear-phishing attacks...

libnetutil/netutil.cc Heap Buffer Overflow DoS

The vulnerability of the ipv6getdataprimitive function in the libnetutil/netutil.cc library, a networking scanning tool for Nmap, is related to a countable loss of significance. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UEFI Secure Boot Windows Code Execution

The vulnerability of the UEFI Secure Boot security mechanism in Windows operating systems is related to a component that cannot be updated. Exploiting this vulnerability can allow attackers to bypass security restrictions and execute arbitrary code...

cros_ec_ishtp_remove Heap Buffer Overflow DoS

The vulnerability of the crosecishtpremove function in the drivers/platform/chrome/crosecishtp.c module of the Chrome OS device driver support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

GitLab Authentication Bypass Info Disclosure

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Active Storage Code Execution

The vulnerability of the Active Storage component in the Ruby on Rails programming framework is related to insufficient checking of the intentions by the recipient of the broadcast message. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Chrome PreviewTab Bypass Security

The vulnerability of the PreviewTab component in Google Chrome and Microsoft Edge is related to deficiencies in the data source confirmation mechanism. Exploiting this vulnerability can allow an attacker to bypass security measures through a specially created HTML page...

SystemJS compiler Code Execution

The vulnerability of the code transformation module in the SystemJS compiler, which is used for writing JavaScript code with Babel, is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dell PowerFlex Manager Authentication Bypass

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack are related to errors in the authentication process. Exploiting these vulnerabilities can allow unauthorized actors to compromise t...

Dell PowerFlex Manager Information Disclosure

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack involve insecure storage of confidential information. Exploiting these vulnerabilities can allow attackers to gain unauthorized...

BrowserBot Software Arbitrary Command Execution

The vulnerability of the BrowserBot software for analyzing Cisco ThousandEyes Enterprise Agent relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Fastify Framework Security Bypass

The vulnerability of the Fastify framework, a Node.js software platform, is related to improper validation of the specified data type during input processing. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

Teamcenter Product Lifecycle Management System Unauthorized Access

The vulnerability of the Teamcenter product lifecycle management system lies in the use of strictly encrypted inventory data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel voltage regulator driver DoS

The vulnerability of the regulatordevlookup function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulators driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

RapidIO driver Heap Buffer Overflow DoS

The vulnerability of the mportcdevopen function in the drivers/rapidio/devices/riomportcdev.c file of the RapidIO driver for the Linux operating system is related to errors during the update of the pointer counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ext4 File System Heap Buffer Overflow DoS

The vulnerability of the ext4xattr inodecreate function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service...

Linux kernel get_core_throt_cnt() Function Heap Buffer Overflow DoS

The vulnerability of the getcorethrotcnt function in the tools/power/x86/turbostat/turbostat.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to access protected information or cause service failures...

Linux kernel Virtio Net Buffer Overflow DoS

The vulnerability of the virtnetfreezedown and virtnetrestoreup functions in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected...

Linux kernel BPF Purge Effective Progs

The vulnerability of the purgeeffectiveprogs function in the kernel/bpf/cgroup.c module, which is part of the BPF interpreter support for the Linux operating system, relates to the execution of a loop without sufficient restrictions on its execution count. Exploiting this vulnerability could allo...

Google Chrome Updater Sandbox Bypass

The vulnerability of the Updater component in the Google Chrome browser for MacOS operating systems is due to a race condition. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism by using a specially created HTML page...

NETAMS WNAM User Management Authentication Bypass

The vulnerability of NETAMS WNAM wireless network user management software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to the system’s web interface with administrator privilege...

NETAMS WNAM user management Data Compromise

The vulnerability of NETAMS WNAM user management software lies in the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Suricata DoS

The vulnerability of the NFS intrusion detection and prevention system Suricata depends on the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

SAML-based NetScaler ADC Controller DoS

The vulnerability of the SAML authentication mechanism for NetScaler ADC formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a...

Lua script interpreter Heap Buffer Overflow DoS

The vulnerability of the checkstackGC function in the Lua script interpreter is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Linux gs_usb_receive_bulk_callback Heap Buffer Overflow DoS

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c module of the Linux network device driver framework is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...

Duo Workflows Unauthorized Access

The vulnerability of the Duo Workflows software tool, a git-based programming platform for collaborative code development in GitLab EE/CE, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

Libxml2 xmlHTMLPrintFileContext Disclosure

The vulnerability of the xmlHTMLPrintFileContext function in the xmllint component of the Libxml2 library is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose confidential information or gain elevated privileges...

Simcenter Femap Buffer Overflow

The vulnerability of the pre-processing processor Simcenter Femap is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dell PowerFlex Manager URL Redirection Phishing

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack lies in the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker to carry out phishin...

Dell PowerFlex Manager Storage Data Compromise

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack involve insecure storage of confidential information. Exploiting these vulnerabilities can allow attackers to gain unauthorized...

SIMATIC CN 4100 DoS

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux alphabetic device driver module Heap Buffer Overflow DoS

The vulnerability of the checkacpitpm2 function in the drivers/char/tpm/tpmtis.c file of the Linux character device driver for TPM-based devices is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

mcb-probe Heap Buffer Overflow DoS

The vulnerability of the mcbprobe function in the drivers/mcb/mcb-core.c file of the MEN Chameleon Bus driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow a attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the deadendfunction function in the tools/objtool/check.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Performance Monitoring Driver Heap Buffer Overflow DoS

The vulnerability of the dmc620pmuinit function in the drivers/perf/armdmc620pmu.c module of the Linux kernel’s performance monitoring driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Atheros Wireless Driver Buffer Overflow DoS

The vulnerability of the wilwritefilewmi function in the drivers/net/wireless/ath/wil6210/debugfs.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system involves the exposure of confidential information. Exploiting this vulnerability could allow an attacker to gain...

Linux driver Max9286 Heap Buffer Overflow DoS

The vulnerability of the functions max9286init and max9286probe in the driver module “drivers/media/i2c/max9286.c” of the Linux operating system’s multimedia device support driver is related to state management errors. Exploiting this vulnerability can allow an attacker to access protected...

Linux dm-Data Compromise Buffer Overflow

The vulnerability of the dmintegritydtr function in the drivers/md/dm-integrity.c file of the multi-device RAID and LVM driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PKI Vault Disclosure Confidential Information

The vulnerability of the PKI Vault platform, which is used for archiving corporate information, in HashiCorp Vault Community Edition and Vault Enterprise, stems from insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose...

VPU driver Heap Buffer Overflow DoS

The vulnerability of the VPUIOCXOPENINSTANCE and vpuputinst functions in the VPU operating system driver of Android is related to the use of memory after it is freed, as a result of retrieving the driver instance from an array and resetting the reference counter before closing it. Exploiting this...

NETAMS WNAM user management software Command Injection

The vulnerability of NETAMS WNAM user management software lies in the lack of measures taken to neutralize special elements used in the expression language. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the server remotely...

Suricata Uncontrolled Reachable Assertion DoS

The vulnerability of the Suricata intrusion detection and prevention system is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Suricata Resource Exhaustion DoS

The vulnerability of the Suricata intrusion detection and prevention system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...