The vulnerability of the `iris_hfi_gen2_session_stop()` function in the driver/media/platform/qcom/iris/iris_hfi_gen2_command.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the irishfigen2sessionstop function in the drivers/media/platform/qcom/iris/irishfigen2command.c driver for multimedia devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the NDR RDPEAR RDP-client parser allows a intruder to gain unauthorized access to protected information.

The vulnerability of the NDR RDPEAR RDP-client FreeRDP lies in the reading of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the de265_image_get_buffer() function in the h.265 Libde265 implementation allows a attacker to cause a service failure.

The vulnerability of the de265imagegetbuffer function in the h.265 Libde265 implementation is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Avast Sandbox component of the Avast antivirus protection software allows a hacker to increase their privileges.

The vulnerability of the Avast Sandbox component of the Avast antivirus protection software is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to elevate their privileges to the SYSTEM level...

The vulnerability of Desktop Window Managers in Windows operating systems allows attackers to increase their privileges.

The vulnerability of desktop window managers in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the iSCSI Target Service for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the iSCSI Target Service for Windows operating systems is related to pointer aliasing. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

The vulnerability of the mask_sensitive_config() function on the security monitoring and threat detection platform Wazuh allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the masksensitiveconfig function on the security monitoring and threat detection platform provided by Wazuh is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access t...

The vulnerability of the isPublicIP() function in the core/providers/utils/fetch.go file of the data-free synchronization software Bifrost allows a attacker to perform an SSRF attack.

The vulnerability of the isPublicIP function in the core/providers/utils/fetch.go file of the data-free synchronization software Bifrost is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...

The vulnerability of the nvoglv64.dll library driver for NVIDIA’s graphical interface allows a hacker to induce a service failure.

The vulnerability of the nvoglv64.dll graphics driver from NVIDIA is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the apply() function in the gix-pack library, which allows a hacker to trigger a service failure

The vulnerability of the apply function in the gix-pack library is related to an error in handling exceptional states. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the Cross Device Service for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Cross Device Service for Windows operating systems is related to deficiencies in access control when processing the enabled parameter of the SeImpersonatePrivilege service token, as a result of loading the malicious CrossDeviceStreaming.Source.dll library. Exploiting this...

The vulnerability of the Device Health Attestation (DHA) status-checking function in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker who operates remotely to execute arbitrary code...

The vulnerability of the Remote Access API interface for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Remote Access API interface for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Capability Access Management Service (camsvc) on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Capability Access Management Service camsvc on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerabilities of the functions mb_convert_encoding(), mb_detect_encoding(), mb_convert_variables(), and mb_detect_order() of the PHP language interpreter allow attackers to cause the application to terminate abnormally.

The vulnerability of the functions mbconvertencoding, mbdetectencoding, mbconvertvariables, and mbdetectorder in the PHP interpreter is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause an unexpected termination of the application...

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client on Windows operating systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the NRF RegisterNFInstance handler of the 5G mobile communication network organization software free5GC allows a attacker to gain unauthorized access to protected information.

The vulnerability of the NRF RegisterNFInstance handler in the software for fifth-generation mobile communication networks 5G, free5GC, is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected informati...

The vulnerability of the graphical user interface of Kaspersky Endpoint Security’s antivirus protection allows a hacker to bypass existing security mechanisms and cause a partial failure in service delivery.

The vulnerability of the graphical user interface of Kaspersky Endpoint Security’s antivirus protection for Windows relates to insecure temporary files. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms and cause partial service interruption...

The vulnerability of the getDataFromResource() function in the PHP programming platform pimcore allows a hacker to execute arbitrary code.

The vulnerability of the getDataFromResource function in the PHP programming platform pimcore is related to deficiencies in the deserialization mechanism when processing the hotspots parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows operating system’s Telephony Service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the `update_master_files_in_worker()` function on the platform for security monitoring and threat detection by Wazuh allows a malicious user to elevate their privileges to root level and execute arbitrary code.

The vulnerability of the updatemasterfilesinworker function on the platform for security monitoring and threat detection by Wazuh is related to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to root an...

The vulnerability of the application software interface of the Natural Language Processing library package NLTK allows a hacker to bypass existing security mechanisms and gain access to read and write arbitrary files.

The vulnerability of the application programming interface of the Natural Language Processing library NLTK is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms and gain read-write access ...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the iSCSI Target Service for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the iSCSI Target Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Storage Port Driver driver for Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Storage Port Driver driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code.

The vulnerability of DNS servers on Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code.

The vulnerability of DNS servers on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the `nltk.downloader.Downloader.download` and `nltk.downloader.Downloader.incr_download` components of the NLTK library, which are used for symbolic and statistical processing of natural language, allows attackers to bypass existing security mechanisms and gain access to write and delete any files they desire.

The vulnerability of the nltk.downloader.Downloader.download and nltk.downloader.Downloader.incrdownload components of the NLTK library, which are used for symbolic and statistical processing of natural language, is related to an incorrect definition of symbolic references before accessing files...

The vulnerability of the strtol() function in the su-exec utility allows a attacker to elevate their privileges to root and execute arbitrary code.

The vulnerability of the strtol function in the su-exec utility is related to incorrect conversion of numerical types. Exploiting this vulnerability can allow an attacker to elevate their privileges to root and execute arbitrary code...

The vulnerability of the Device Health Attestation (DHA) status-checking function in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the Key Guard component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Key Guard component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to the reclamation of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the GDI+ component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the input-remapper.service service, a device management tool for input devices, allows a malicious actor to switch the service to a specified configuration directory and initiate an injection mechanism for input data.

The vulnerability of the input-remapper.service service, a device management tool for input devices, is related to the lack of authentication. Exploiting this vulnerability allows an attacker to switch the service to a specified configuration directory and activate the mechanism for injecting...

The vulnerability of the FilteredObjectInputStream component in the Apache Log4j2 logging library allows a hacker to execute arbitrary code.

The vulnerability of the FilteredObjectInputStream component in the Apache Log4j2 logging library is related to deserialization mechanism flaws. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Windows operating systems’ message queues allows attackers to enhance their privileges.

The vulnerability of Windows operating systems’ message queues is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the iSCSI Target Service for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the iSCSI Target Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Reliable Multicast Transport Driver (RMCAST) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code.

The vulnerability of DNS servers on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code.

The vulnerability of DNS servers for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Active Directory Certificate Services (AD CS) service, which manages the distribution and usage of certificates, allows a perpetrator to execute arbitrary code.

The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and usage of certificates on Windows operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the Password Manager components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Password Manager components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Web Share component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Web Share component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Audio component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...