Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the search function in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

Media component Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

WebApp Component UI Replacement

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

MHTML Component Unauthorized Access

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

SOGo Contact Search Code Execution

The vulnerability of the contact search component in the SOGo collaborative work software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information...

Docker Plugin System Data Compromise

The vulnerability of Docker’s plugin-based container creation system, Moby Docker Engine, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

golang-x-image DoS

The vulnerability of the golang-x-image package, a programming language, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker to cause service failures...

OpenCapsule Function UEFI 7-Zip

The vulnerability of the OpenCapsule function in UEFI capsule file parsers and 7-Zip archivers is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

7-Zip UEFI Dependency Parser Heap Buffer Overflow DoS

The vulnerability of the ParseDependencyExpression function in the 7-Zip UEFI dependency parser involves reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to cause system failures...

7-Zip Handler GetSecurity Function Information Disclosure

The vulnerability of the CHandler::GetSecurity function, a handler for WIM archives of the 7-Zip archive tool, is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause service failures or disclose confidential information...

SquashFS File Processor Heap Buffer Overflow DoS

The vulnerability of the ReadBlock function in the SquashFS file compressor and 7-Zip archive creator relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

Next.js Authentication Bypass

The vulnerability of the Next.js web application development software platform relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Email Template XSS Webmin

The vulnerability of the email template description field in the state module of the Webmin hosting control panel is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Linux kernel aa_replace_profiles Buffer Overflow

The vulnerability of the aareplaceprofiles function in the Linux operating system’s kernel is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

FortiSandbox Authentication Bypass RCE

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

Progress MOVEit Automation Authentication Bypass

The vulnerability of the Progress MOVEit Automation software for automating work processes is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and gain increased privileges...

Qualcomm QSC Code Execution

The vulnerability of the microprogramming software in the Qualcomm QSC family is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm integrated circuit Privilege Escalation

The vulnerability of Qualcomm’s integrated circuit-based microprogramming software relates to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...

Qualcomm Authentication Bypass

The vulnerability of embedded Qualcomm software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

GitHub Enterprise Server Disclosure

The vulnerability of the final download point of the corporate version of the GitHub Enterprise Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Mozilla Firefox Preview Phishing

The vulnerability of the preview interface for Mozilla Firefox links is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers, operating remotely, to carry out phishing attacks...

LibreChat OAuth Unauthorized Access

The vulnerability of the OAuth protocol implementation of the artificial intelligence-based LibreChat platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Agent Zero get_abs_path File Read

The vulnerability of the getabspath function in the framework used to create AI agents like Agent Zero is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files...

Flask-AppBuilder ConfigurationHandler Redirect

The vulnerability of the Flask-AppBuilder web development framework lies in the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to remotely redirect users to arbitrary URL addresses by manipulating the Host header in HTTP requests...

Cast Component Unauthorized Access

The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

DevTools Component UI Replacement

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface using a specially created Chrome extension...

Cast Component Bypass Security Restrictions

The vulnerability of the Cast component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions through a specially created HTML page...

FedCM Component Unauthorized Access

The vulnerability of the FedCM component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

SiteIsolation Component Bypass Security Restrictions

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

Preload Function Unauthorized Access

The vulnerability of the Preload function in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

Media component UI Replacement

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

Navigation Section Bypass

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security measures remotely...

Navigation Section Bypass

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures through a specially created HTML page, operating remotely...

TabGroups Component UI Replacement

The vulnerability of the TabGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to replace the user’s interface...

Google Chrome MHTML Code Execution

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

DevTools Component Sandbox Bypass

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms...

GPU components unauthorized access

The vulnerability of the GPU components in Google Chrome and Microsoft Edge is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

Reading Mode Sandbox Bypass

The vulnerability of the Reading Mode in Microsoft Edge and Google Chrome browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to bypass the sandbox’s security mechanisms...

Next.js Interpretation Conflict

The vulnerability of the Next.js web application development software platform is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

Next.js Unreliable Data DoS

The vulnerability of the Next.js web application development platform lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Mattermost CSRF

The vulnerability of the Mattermost instant messaging application is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to perform a CSRF attack remotely...

WebDialer SSRF

The vulnerability of the WebDialer service in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a maliciou...

Android FacAtFunction Arbitrary Command Execution

The vulnerability of the FacAtFunction function in Android mobile devices from Samsung is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

at_distributor Component Arbitrary Command Execution

The vulnerability of the atdistributor component in Android mobile devices from Samsung relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

PuTTY ssh_rsakex_freekey Heap Buffer Overflow DoS

The vulnerability of the sshrsakexfreekey function in the PuTTY cryptographic protection tool is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

PuTTY Telnet Spoofing

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

EDIMAX BR-6478AC Router Form StaDrvSetup Command Injection

The vulnerability of the formStaDrvSetup function in the /goform/formStaDrvSetup file of the EDIMAX BR-6478AC router’s microprogramming software is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability could allow a remote attacker ...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the scosockconnect function in Linux operating systems is related to a race condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux net/ipv6/ip6_tunnel.c Heap Buffer Overflow DoS

The vulnerability of the ip4ip6err function in the net/ipv6/ip6tunnel.c module of the Linux kernel is related to buffer out-of-buffer writing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Linux xfsattr3_node_inactive Heap Buffer Overflow DoS

The vulnerability of the xfsattr3nodeinactive function in the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...