The vulnerability of the KILL_CLIENT command in the PostgreSQL PgBouncer connection pool’s software allows a hacker to trigger a service failure.

The vulnerability of the KILLCLIENT command in the PostgreSQL PgBouncer connection pool software is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the strlcat() function in PostgreSQL PgBouncer software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the strlcat function in PostgreSQL PgBouncer software-related connectivity libraries is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...

The vulnerability of the Storport Miniport Driver for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Storport Miniport Driver for Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the GetAlertData() function on the security monitoring and threat detection platform Wazuh allows a malicious actor to trigger a service failure.

The vulnerability of the GetAlertData function on the security monitoring and threat detection platform Wazuh is related to a violation of the buffer’s initial limit. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to induce a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the SubtableUnicodesCache::create() function in the src/hb-ot-cmap-table.hh file of the HarfBuzz text conversion library allows a hacker to trigger a service failure.

The vulnerability of the SubtableUnicodesCache::create function in the src/hb-ot-cmap-table.hh file of the HarfBuzz text conversion library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the nextstate() function in the gpsd/packet.c component of the GPS tracking daemon allows a intruder to cause a service failure.

The vulnerability of the nextstate function in the gpsd/packet.c component of the GPS tracking daemon is related to a numerical loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, allow attackers to gain access to confidential data and compromise its integrity.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, are related to insufficient input data validation. Exploiting these vulnerabilities can allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the WebCodecs component in the Google Chrome web browser, which allows a hacker to trigger a service failure

The vulnerability of the WebCodecs component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Mattermost instant messaging application, related to access control errors, allows a hacker to execute arbitrary code.

The vulnerability of the Mattermost instant messaging application is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems involves a lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

#Exploitation of the Navigation function in Google Chrome browsers, allowing attackers to induce a service failure

The vulnerability of the Navigation function in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Telnet Client command-line tool for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Telnet Client command-line tool for Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of the Dawn web browser component in Google Chrome, which allows a hacker to trigger a service failure

The vulnerability of the Dawn web browser component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Ceph storage system allows a attacker to gain access to confidential data or cause service failures.

The vulnerability of the Ceph storage system is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to confidential data or cause service failures...

The vulnerability of the library that accesses HTTP servers via LibSoup allows a perpetrator to gain access to confidential data or cause service failures.

The vulnerability of the LibSoup library for HTTP servers is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to gain access to confidential data or cause service failures...

The vulnerability of the Cisco IOS XE operating system’s loader allows a hacker to execute arbitrary code.

The vulnerability of the Cisco IOS XE operating system loader is related to a violation of the initial buffer boundary. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Dawn component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Dawn component in the Google Chrome browser arises due to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a hacker to bypass existing security mechanisms.

The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the Mattermost instant messaging application, related to incorrect validation of the specified data type, allows a hacker to trigger a service failure.

The vulnerability of the Mattermost instant messaging application is related to improper validation of the specified data type. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the LibreOffice office software package, related to writing beyond the buffer limit, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the LibreOffice office software package is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `load_from_url_async` function in the library for working with large language models (LLMs) like vLLM allows attackers to perform SSRF attacks.

The vulnerability of the loadfromurlasync function in the library for working with large language models LLMs like vLLM is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...

The vulnerability of the formWifiApScan() function in the microprogramming software for Tenda AC6 allows a hacker to execute arbitrary code.

The vulnerability of the formWifiApScan function in the Tenda AC6 router’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the fromSetWirelessRepeat() function in the Tenda AC10U router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetWirelessRepeat function in the Tenda AC10U router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to errors in privilege management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their uncontrolled resource consumption, which allows attackers to cause service interruptions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service interruptions remotel...

The vulnerability of the H.266 codec parser library in the GStreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the H.266 codec parser library in the GStreamer multimedia framework is related to insufficient checking of user data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the IMG_xpm.c component of the image loading library, part of the SDL_image library, allows a hacker to cause a system failure.

The vulnerability of the IMGxpm.c component in the image loading library, part of the SDLimage library, is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created XPM image...

The vulnerability of the ungetc() function in the BDAT/CHUNKING component of the email server Exim, which allows a hacker to execute arbitrary code.

The vulnerability of the ungetc function in the BDAT/CHUNKING component of the email server Exim relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

The vulnerability of Google Chrome’s DevTools component, which allows a hacker to escalate their privileges

The vulnerability of Google Chrome’s DevTools component is related to a data protection mechanism flaw. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

The vulnerability of the Mattermost instant messaging application, related to incorrect validation of the specified data type, allows a hacker to trigger a service failure.

The vulnerability of the Mattermost instant messaging application is related to improper validation of the specified data type. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Mattermost instant messaging application, related to access control errors, allows a malicious user to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows a hacker to gain access to and upload arbitrary files.

The vulnerability of the Mattermost instant messaging application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to and upload arbitrary files...

The vulnerability of the Mattermost instant messaging application, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the `ProgramData\iTop VPN\Downloader\vpn6` component’s `DLL Handler` of the free iTop VPN software allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the “ProgramData\iTop VPN\Downloader\vpn6” directory’s DLL Handler component in the free iTop VPN software is related to an uncontrolled search path element. Exploiting this vulnerability could allow a hacker to gain increased privileges and cause service interruptions...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write code beyond the buffer boundaries, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the software for centralized identity management systems like FreeIPA allows a perpetrator to gain access to confidential data.

The vulnerability of the FreeIPA identity management software is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a perpetrator to gain access to confidential data...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow an attacker to execute arbitrary...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root...

The vulnerability of the Cisco IoT Field Network Director software interface allows a hacker to escalate their privileges.

The vulnerability of the Cisco IoT Field Network Director software interface is related to exceptions handling deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the Chromoting component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Chromoting component in Google Chrome’s browser is related to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the REST API interface of the H2O machine learning platform allows a perpetrator to execute arbitrary code.

The vulnerability of the REST API interface of the H2O machine learning platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Mattermost instant messaging application, related to uncontrolled resource consumption, allows a hacker to redirect users to any arbitrary URL address.

The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to redirect users to an arbitrary URL address...

The software for email security from SonicWall has a vulnerability related to incorrect input validation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of SonicWall Email Security’s email security software lies in the improper validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the implementation of the SSL VPN micro-programming software for network interfaces of SONICWALL series SMA 1000 allows a intruder to gain unauthorized access to protected information.

The vulnerability of the implementation of the SSL VPN micro-programming software for network interfaces of the SMA 1000 series, SONICWALL, is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain...

The vulnerability of the Wazuh security monitoring and threat detection platform lies in its insufficient limit on authentication attempts, which allows attackers to compromise privacy and integrity.

The vulnerability of the Wazuh security monitoring and threat detection platform lies in the insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...