Linux kernel Heap Buffer Overflow DoS

The vulnerability of the sockdef-readable function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux net/bluetooth/mgmt.c DoS

The vulnerability in the net/bluetooth/mgmt.c module of the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

Linux kernel add_adev() DoS

The vulnerability of the addadev function in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ChromeDriver Code Execution

The vulnerability of the ChromeDriver component for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...

WebRTC Code Execution

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

WebCodecs Interface Unauthorized Access

The vulnerability of the WebCodecs interface in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Reading Mode Code Execution

The vulnerability of the Reading Mode in Google Chrome and Microsoft Edge browsers relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow attackers to disclose sensitive information remotely...

Updater service Privilege Escalation

The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges using the malicious file...

Media components Google Chrome Microsoft Edge Bypass Security Restrictions

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

Companion Component Privilege Escalation

The vulnerability of the Companion browser components in Google Chrome and Microsoft Edge is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

WebRTC Code Execution

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Dawn Component Unauthorized Access

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Microsoft Edge Sandbox Bypass

The vulnerability of the graphics processing units in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

DataTransfer Interface Access Modification

The vulnerability of the DataTransfer interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to and modify data...

Codecs Component Unauthorized Access

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information from a remote location...

WebAudio Component Code Execution

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Dialog Component Spear Phishing

The vulnerability of the Dialog component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

ogs_sbi_xact_add() DoS

The vulnerability of the ogssbixactadd function, a component of the NR/LTE Open5GS mobile network creation and management tool, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause service interruptions...

NR/LTE Open5GS Parser DoS

The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Updater service Privilege Escalation

The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ShortcutService System Service Re-record Files

The vulnerability of the ShortcutService system service in Android mobile devices from Samsung is related to an incorrect path limitation for accessing the directory. Exploiting this vulnerability could allow a attacker to re-record or create arbitrary files...

NR/LTE Open5GS Parser DoS

The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

handle_scp_info() DoS

The vulnerability of the handlescpinfo function, a tool for creating and managing NR/LTE Open5GS mobile networks, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...

nghttp2-server Heap Buffer Overflow DoS

The vulnerability of the ogspoolidcalloc function in the library /lib/sbi/nghttp2-server.c, which is used for creating and managing mobile networks like NR/LTE Open5GS, is related to improper cleanup or release of resources. Exploiting this vulnerability could allow a malicious actor to cause...

Google Chrome Microsoft Edge Spoofing

The vulnerability of the SSL Secure Sockets Layer protocol implementation in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created HTML page...

Linux network interface driver Heap Buffer Overflow DoS

The vulnerability of the emacdispatchskbzc function in the network interface driver icssg-prueth of the Linux operating system is related to incorrect initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

NR/LTE Open5GS Handle AMF Info DoS

The vulnerability of the handleamfinfo function, a component of the NR/LTE Open5GS mobile network creation and management tool, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PuTTY ECDSA DoS

The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Android loadSafeLabel() Privilege Escalation

The vulnerability of the loadSafeLabel function in Android operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

ForgetDeviceDialogFragment Java Privilege Escalation

The vulnerability of the getAppLabel method in the ForgetDeviceDialogFragment.java class of Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android Shared.java getCallingPackageName Privilege Escalation

The vulnerability of the getCallingPackageName method in the Shared.java class of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

Android KeyguardViewMediator Disclosure

The vulnerability in the KeyguardViewMediator.java class of Android operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the system’s security measures...

Android handleBondStateChanged Disclosure

The vulnerability of the handleBondStateChanged method in the AdapterService.java class of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by security measures...

Yandex SpeechKit CMS Authentication Bypass

Vulnerability of the “Yandex SpeechKit” module in the Content Management System CMS of 1C-Bitrix: Website management is associated with the absence of authentication for critical functions. Exploiting this vulnerability may allow a malicious actor to compromise the confidentiality, integrity, and...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Firebird Database Information Disclosure

The vulnerability of the client library of the Firebird database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to cause a data leak...

LibSoup Heap Buffer Overflow DoS

The vulnerability of the soupbodyinputstreamreadchunked function in the LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures, execute a cache poisoning attack, or gain unauthorized...

Grafana Authentication Bypass

The vulnerability of the Grafana monitoring and observation platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

TRENDnet TEW-432BRP Router Arbitrary Command Execution

The vulnerability of the formSetRoute function in the /goform/formSetRoute file of the TRENDnet TEW-432BRP router microprogramming system is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

Apex One NT Listener Privilege Escalation

The vulnerability of the Apex One NT Listener antivirus software is related to a data source verification error. Exploiting this vulnerability can allow attackers to increase their privileges...

Trend Micro Apex One Code Execution

The vulnerability of the management console of the Trend Micro Apex One antivirus software is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Framework Component Privilege Escalation

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Apache HTTP Server DoS

The vulnerability of the HTTP/2 header processing module in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

NextCloud Desktop Synchronization Code Execution

The vulnerability of the synchronization tool for NextCloud’s desktop interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

libinput-device-group RCE

The vulnerability of the libinput-device-group interface in the libinput library, which is used in the implementation of X.Org and Wayland display server protocols, is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root...

TRENDnet TEW-432BRP formSetPortTr Heap Buffer Overflow DoS

The vulnerability of the formSetPortTr function in the /goform/formSetPortTr file of the TRENDnet TEW-432BRP router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or...