Firefox ESR Thunderbird DOM Component Compromise

The vulnerability of the DOM component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protecte...

Cast Component Privilege Escalation

The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

DevTools Component Unauthorized Access

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

DevTools Component UI Replacement

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface using a specially created Chrome extension...

GPU components unauthorized access

The vulnerability of the GPU components in Google Chrome and Microsoft Edge is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the user interface of Google Chrome and Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

Go tool pack Command Read Write Arbitrary Files

The vulnerability of the Go tool pack command language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary files...

Navigation Section Bypass

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures through a specially created HTML page, operating remotely...

SOGo Contact Search Code Execution

The vulnerability of the contact search component in the SOGo collaborative work software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information...

OpenCapsule Function UEFI 7-Zip

The vulnerability of the OpenCapsule function in UEFI capsule file parsers and 7-Zip archivers is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Next.js Authentication Bypass

The vulnerability of the Next.js web application development software platform relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Libgcrypt Heap Buffer Overflow DoS

The vulnerability of the gcryeccmontdecodepoint function in the cipher/ecc-misc.c file of the cryptographic library Libgcrypt is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

AppArmor DoS

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

AppArmor DoS

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

Progress MOVEit Automation Authentication Bypass

The vulnerability of the Progress MOVEit Automation software for automating work processes is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and gain increased privileges...

IntelliJ IDEA Symbolic Link Unauthorized Access

The vulnerability of the IntelliJ IDEA integrated development environment is related to the incorrect definition of symbolic links during file access. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Qualcomm embedded firmware DoS

The vulnerability of WLAN microprogramming software’s firmware in Qualcomm embedded chips relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures remotely...

Qualcomm QSC Code Execution

The vulnerability of the microprogramming software in the Qualcomm QSC family is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows WLAN Host system

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to cause memory corruption...

Zimbra Collaboration Suite XXE

The vulnerability of the Zimbra Collaboration Suite email management system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

LibreChat DoS

The vulnerability of the LibreChat artificial intelligence-based platform is related to an error in processing exceptional states at the final endpoint /api/convos. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Tlon plugin SSRF

The vulnerability of the Tlon plugin Urbit, which is part of the AI agent OpenClaw previously known as ClawdBot or MoltBot, stems from insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

Firefox Thunderbird Buffer Overflow

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TabGroups Component UI Replacement

The vulnerability of the TabGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to replace the user’s interface...

Media component Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

WebApp Component UI Replacement

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

Go LookupCNAME DoS

The vulnerability of the LookupCNAME function in the Go programming language is related to a memory reclamation error when processing CNAME records. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Go XSS

The vulnerability of the Go programming language is related to the lack of measures taken to neutralize special elements when processing the content attribute of the tag. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

iHead: Logs Module Code Execution

Vulnerability of the “iHead: Logs” module in the Content Management System CMS of 1C-Bitrix: Website management is related to the failure to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

command-line interface of the Code Execution

The vulnerability of the command-line interface of the Cisco Catalyst SD-WAN Manager is related to incorrect encoding or filtering of output data. Exploiting this vulnerability allows an attacker to execute arbitrary code and elevate their privileges to the root level...

radare2-mcp Server Code Execution

The vulnerability of the r2cmdstr function in the radare2-mcp server is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Moby AuthZ Privilege Escalation

The vulnerability of the AuthZ plugin of the container isolation system Moby allows for bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can enable a hacker to gain increased privileges...

Perl zlib Library Cryptographic Data Compromise

The vulnerability of the Perl module from the zlib library is related to incorrect input of configuration data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7-Zip Handler GetSecurity Function Information Disclosure

The vulnerability of the CHandler::GetSecurity function, a handler for WIM archives of the 7-Zip archive tool, is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause service failures or disclose confidential information...

Next.js Unreliable Data DoS

The vulnerability of the Next.js web application development platform lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Linux kernel match_char Data Compromise

The vulnerability of the matchchar function in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OWASP Coraza WAF Name Reference

The vulnerability of the Web application firewall library OWASP Coraza WAF is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Qualcomm WLAN HAL DoS

The vulnerability of the WLAN HAL microprogramming system component in Qualcomm’s embedded chips relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Qualcomm integrated circuit Privilege Escalation

The vulnerability of Qualcomm’s integrated circuit-based microprogramming software relates to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...

Zimbra Collaboration Suite LDAP Injection Unauthorized Access

The vulnerability of the Zimbra Collaboration Suite email management system is related to the failure to take measures to neutralize special elements in the LDAP request. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Zimbra Collaboration Suite XSS

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Mozilla Firefox Preview Phishing

The vulnerability of the preview interface for Mozilla Firefox links is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers, operating remotely, to carry out phishing attacks...

Agent Zero get_abs_path File Read

The vulnerability of the getabspath function in the framework used to create AI agents like Agent Zero is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files...

Flask-AppBuilder ConfigurationHandler Redirect

The vulnerability of the Flask-AppBuilder web development framework lies in the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to remotely redirect users to arbitrary URL addresses by manipulating the Host header in HTTP requests...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Chromoting Remote Privilege Escalation

The vulnerability of the Chromoting remote administration tool, which is used by browsers such as Google Chrome and Microsoft Edge, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a malicious file...

Payments Component Manipulate URL Bar

The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to forge the URL input by using a specially created HTML page...

Cast Component Bypass Security Restrictions

The vulnerability of the Cast component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions through a specially created HTML page...

FedCM Component Unauthorized Access

The vulnerability of the FedCM component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

SiteIsolation Component Bypass Security Restrictions

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...