The vulnerability of Google Chrome’s Picture In Picture technology, which allows a perpetrator to compromise the integrity of protected information

The vulnerability of Google Chrome’s Picture In Picture technology is related to an improper limitation on the visual layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information through a specially created HTML page...

The vulnerability of the Extensions component of the Google Chrome browser allows a hacker to replace the user interface.

The vulnerability of the Google Chrome browser’s Extensions component is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

The vulnerability of the Google Chrome browser’s Navigation function, which allows a hacker to circumvent navigation restrictions

The vulnerability of Google Chrome’s Navigation function is related to improper authorization. Exploiting this vulnerability allows a malicious actor to circumvent navigation restrictions by using a specially created HTML page...

The vulnerability of Google Chrome’s DevTools component allows a hacker to bypass security restrictions.

The vulnerability of Google Chrome’s DevTools component is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions using a specially crafted HTML page...

The vulnerability of the hinic_get_stats64() function in the drivers/net/ethernet/huawei/hinic/hinic_main.c file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.

The vulnerability of the hinicgetstats64 function in the drivers/net/ethernet/huawei/hinic/hinicmain.c file of the Linux kernel’s Ethernet network adapter driver is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __rvu_flr_handler() function in the drivers/net/ethernet/marvell/octeontx2/af/rvu.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rvuflrhandler function in the drivers/net/ethernet/marvell/octeontx2/af/rvu.c file of the Ethernet network adapter driver for the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the usbPutHCD() function in the drivers/usb/host/xhci-mtk.c module of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the usbPutHCD function in the drivers/usb/host/xhci-mtk.c module of the Linux operating system is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rb_end_commit() function in the Linux operating system’s kernel allows a attacker to compromise the accessibility of protected information.

The vulnerability of the rbendcommit function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the ext4_writepages() function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4writepages function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Vmware Workstation hypervisor, related to writing beyond the buffer boundaries of memory, allows an attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of Vmware Workstation hypervisor is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the Java framework for securing industrial applications using Spring Security allows attackers to escalate their privileges.

The vulnerability of the Java framework for securing industrial applications using Spring Security involves bypassing authentication through phising techniques. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

The vulnerability of the WebAppInstalls component in the Google Chrome browser allows a hacker to replace the user interface.

The vulnerability of the WebAppInstalls component in Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

The vulnerabilities of the functions psp_hdcp_initialize() and psp_dtm_initialize() in the driver drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allow a malicious actor to cause a service failure.

The vulnerabilities of the functions psphdcpinitialize and pspdtminitialize in the driver drivers/gpu/drm/amd/amdgpu/amdgpupsp.c of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system are related to improper initialization. Exploiting these vulnerabiliti...

The vulnerability of the __dev_queue_xmit() function in the net/core/filter.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the devqueuexmit function in the net/core/filter.c module of the Linux operating system is related to improper handling of length parameters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the function `serial8250_unregister_port()` of the `drivers/tty/serial/8250/8250_core.c` file, a driver for console TTY support on the serial port of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the serial8250unregisterport function in the driver/tty/serial/8250/8250core.c file of the console support driver for the serial port in the Linux kernel is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could...

The vulnerability of Google Chrome’s Skia graphic library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of Google Chrome, related to deficiencies in access control, allows attackers to circumvent security restrictions.

The vulnerability of Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions using a specially crafted HTML page...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain unauthorized access to protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of Google Chrome, related to deficiencies in access control, allows attackers to circumvent navigation restrictions.

The vulnerability of Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass navigation restrictions by using a specially crafted HTML page...

The vulnerability of the fsl_qspi_probe() function in the drivers/spi/spi-fsl-qspi.c file of the Linux kernel’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the fslqspiprobe function in the drivers/spi/spi-fsl-qspi.c file of the Linux kernel’s SPI device driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Omnicomm Online monitoring and control service lies in its ability to disclose information, allowing a violator to expose the protected information.

The vulnerability of the Omnicomm Online monitoring and control service is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of VMware Fusion and Vmware Workstation lies in the insufficient restrictions on network connections for certain endpoints, which allows attackers to interrupt or intercept network connections of other guest virtual machines.

The vulnerability of VMware Fusion and Vmware Workstation lies in the insufficient restrictions on network connections for specified endpoints. Exploiting this vulnerability allows a malicious actor to interrupt or intercept network connections to other guest virtual machines remotely...

The vulnerability of the Resource Timing application programming interface of Google Chrome allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Resource Timing application programming interface in Google Chrome browsers is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information throu...

The vulnerability of Google Chrome, related to deficiencies in access control, allows attackers to circumvent navigation restrictions.

The vulnerability of Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass navigation restrictions by using a specially crafted HTML page...

The vulnerability of Google Chrome’s Picture In Picture technology, which allows a perpetrator to compromise the integrity of protected information

The vulnerability of Google Chrome’s Picture In Picture technology is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information through a specially created HTML page...

The vulnerabilities of the functions mptcpDestroyCommon() and mptcpDestroy() in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP protocol implementation allow a attacker to cause a service failure.

The vulnerability of the mptcpDestroyCommon and mptcpDestroy functions in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise storage platforms, related to information disclosure during data transmission, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the exposure of data during transmission. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

Vulnerability of Cryptographic Services in Windows operating systems, allowing attackers to enhance their privileges

The vulnerability of Cryptographic Services in Windows operating systems is related to the insecure storage of confidential information. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Edge browser (based on Chromium) relates to information representation errors in the user interface, which allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge based on Chromium is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

Vulnerability of Microsoft Office packages and 365 Apps for Enterprise, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to the incorrect definition of symbolic links during access to files. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the window manager for desktop window managers in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Desktop Window Manager DWM on Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the mongo-c-driver library, related to copying buffers without checking the size of the input data, allows a hacker to trigger a service failure.

The vulnerability of the mongo-c-driver library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the golang-x-net package in the Golang programming language arises from executing a loop with an unreachable exit condition, allowing an attacker to cause a service failure.

The vulnerability of the golang-x-net package in the Golang programming language is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Webmin control panel in hosting systems arises from the lack of measures taken to neutralize special elements used in the operating system’s command line. This allows attackers to execute arbitrary commands.

The vulnerability of the Webmin control panel involves a lack of measures to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the MOL2 File Handler component of the Open Babel software for converting chemical substance formats allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Open Babel software for converting chemical substance file formats is related to the issue of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the ClumpletReader::getClumpletSize() function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the ClumpletReader::getClumpletSize function in the Firebird database management system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the protobuf data serialization library lies in insufficient validation of input data, which allows attackers to trigger service failures.

The vulnerability of the protobuf data serialization library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the zip.vim plugin for the Vim text editor, which allows a hacker to execute arbitrary commands.

The vulnerability of the zip.vim plugin for the Vim text editor is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a perpetrator to execute arbitrary commands...

The vulnerability of the Microsoft Component Object Model (COM) in Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Microsoft Component Object Model COM in Windows operating systems is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the control flow analyzer for C language files like Cflow allows attackers to trigger a service failure due to improper cleaning or releasing of resources.

The vulnerability of the control flow analyzer for C language files related to incorrect cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the UNIX command-line utility set, BusyBox, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.

The vulnerability of the UNIX command-line utility BusyBox is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of the JavaScript file taskjobs.js in the GLPI system’s scheduling, incident, and computer equipment inventory management module allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript file taskjobs.js in the GLPI system for managing requests, incidents, and inventory of computer equipment is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the configuration management system and remote execution of operations, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of configuration management systems and remote execution of operations like Salt is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the universal monitoring system Zabbix, related to deficiencies in the authentication mechanism, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the xdr_datum function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the xdrdatum function in the Firebird database management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the memory management block for IOMMU operations in AMD’s microprogramming software for processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to lack of access control mechanisms. Exploiting this vulnerability can allow attackers to disclose protected information...