Persistent Cache Component Bypass

The vulnerability of the Persistent Cache component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security measures remotely...

Cross-Origin-Opener-Policy Bypass

The vulnerability of the Cross-Origin-Opener-Policy COOP function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...

WebUI User Interface Bypass

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

Speech Component Spoofing

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

Samba vfs_worm module file modification

The vulnerability of the vfsworm module in Samba software is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...

formAccept() Code Execution

The vulnerability of the formAccept function in microprogrammed software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Heap Buffer Overflow DoS

The vulnerability of the formConnectionSetting function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

microprogramming software Code Execution

The vulnerability of the formrefresh function in the microprogramming software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Edimax EW-7438RPn FormSDHCP Code Execution

The vulnerability of the formSDHCP function in the microprogrammed software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Drupal Kernel Code Execution

The vulnerability of the Drupal CMS system’s kernel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Apktoo File Write

The vulnerability in the brut/androlib/res/decoder/ResFileDecoder.java file of the Apktool tool for reverse-engineering Android APK files is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write or rewrite...

GLPI Mreporting SQL Injection

The vulnerability of the Mreporting plugin for the GLPI system is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Incus Privilege Escalation

The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

MediaWiki Code Execution

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

Container management system Template Creation Code Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to the failure to take measures to neutralize special elements in the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

libexpat Heap Buffer Overflow DoS

The vulnerability of the libexpat library for analyzing XML files is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Helm Unprotected Channel Information Disclosure

The vulnerability of the package manager for Kubernetes Helm is related to the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to expose protected information...

Bars Obrazovanie (Alexander) (No. 2 from May 27, 2026 at

...

Moodle Arbitrary Command Execution

The vulnerability of the virtual training environment Moodle is related to the lack of measures taken to neutralize special elements within it. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

aiohttp HTTP Client Request Manipulation

The vulnerability of the aiohttp HTTP client is related to deficiencies in request processing. Exploiting this vulnerability allows an attacker who operates remotely to carry out attacks by replacing HTTP requests with malicious content...

MediaWiki Unauthorized Access

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Routing Null Pointer DoS

The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

LibreDWG form processing library Heap Buffer Overflow DoS

The vulnerability of the bitconvertTU function in the LibreDWG form processing library is related to the issue of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

LibreDWG decompress Buffer Overflow DoS

The vulnerability of the decompressR2004section function in the library for processing DWG format files by LibreDWG is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to cause service failures...

XWiki Platform Auth Bypass File Modification

The vulnerability of the XWiki Platform lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to create or modify arbitrary files remotely...

EDIMAX BR-6478AC Command Injection

The vulnerability of the formAccept function in the microprogramming software for EDIMAX BR-6478AC routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

Wireless Signal Amplifier Code Execution

The vulnerability of the formRadius function in the microprogramming software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Edimax formLicence Heap Buffer Overflow

The vulnerability of the formLicence function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Heap Buffer Overflow DoS

The vulnerability of the formWpsProxyEnable function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Samba check_password script Code Execution

The vulnerability of the checkpassword script in the DCE/RPC SAMR server of the Samba networking software package is related to the failure to eliminate special elements during the processing of the parameter %u. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

Nginx UI WebSocket Origin Disclosure

The vulnerability of the Nginx UI server’s user interface lies in the lack of origin verification in WebSockets. Exploiting this vulnerability allows an attacker to disclose confidential information remotely...

Squid proxy buffer overflow DoS

The vulnerability of the Squid proxy server is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Glances Service Data Unauthorized Access

The vulnerability of the Glances monitoring tool is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

Valkey data structure Server Code Execution

The vulnerability of the Valkey data structure server is related to insufficient neutralization of special elements in requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

aiohttp HTTP Client DoS

The vulnerability of the aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PyPDF Loop DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Zabbix IT-infrastructure monitoring system Command Execution

The vulnerability of the Zabbix IT-infrastructure monitoring system is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Azure Resource Manager Authentication Bypass Privilege Escalation

The vulnerability of the Azure Resource Manager deployment and management service, as well as the Azure Local software platform, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

Zabbix Privilege Escalation

The vulnerability of the Zabbix universal monitoring system lies in the provision of data elements for erroneous sessions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Zabbix Command Injection

The vulnerability of the Zabbix IT-infrastructure monitoring system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Moodle TeX Formula Editor DoS

The vulnerability of the TeX Formula Editor component in the virtual learning environment Moodle is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

aiohttp HTTP client DoS

The vulnerability of the aiohttp HTTP client is related to the registration of excessive data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Valkey data structure server DoS

The vulnerability of the Valkey data structure server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Network Routing Zero Pointer DoS

The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Incus Authentication Data Compromise

The vulnerability of the container management system and the virtual machine manager Incus is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

Incus Symbolic Link Privilege Escalation

The vulnerability of the container management system and the virtual machine manager Incus relates to the tracking of symbolic links. Exploiting this vulnerability can allow attackers to enhance their privileges...

CommuniGate Pro Information Disclosure

The vulnerability of the CommuniGate Pro mail server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to confidential information...

Linux skb_gro_receive() Root Privilege

The vulnerability of the skbgroreceive function in Linux operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow an attacker to gain root privileges...

lxml_html_clean XSS

The vulnerability of the hassneakyjavascript function in the lxmlhtmlclean library, written in the Python programming language, is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

LibreDWG Heap Buffer Overflow DoS

The vulnerability of the dwgnextentity function in the library for processing DWG format files by LibreDWG is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...