Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Catapult DCT2000 Protocol Analyzer DoS

The vulnerability of the Catapult DCT2000 protocol discoverer and the Wireshark network traffic analyzer is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

Gitea IsPublicMember Function Disclosure

The vulnerability of the IsPublicMember function in the routers/api/v1/org/member.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to expose protected information...

Gitea API Disclosure Sensitive Information

The vulnerability of endpoints /api/v1/user/orgs and /api/v1/users/username/orgs/org/permissions in the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea UpdateIssueAttachments Function

The vulnerability of the UpdateIssueAttachments function in the models/issues/issueupdate.go file and the UpdateCommentAttachments function in the models/issues/comment.go files of the Git repository management system Gitea is related to the use of names with incorrect references. Exploiting this...

Gitea LocalUploader Function Information Disclosure

The vulnerability of the GiteaLocalUploader.CreateReleases function in the services/migrations/giteauploader.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to disclose sensiti...

Gitea ChangeTargetBranch Privilege Bypass

The vulnerability of the ChangeTargetBranch function in the services/pull/pull.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges or circumvent security restrictio...

Gitea Name Link DoS

The vulnerability of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Gitea Open Disclosure Information Disclosure

The vulnerability of the Open function in the modules/uri/uri.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

pbkdf2 library DoS

The vulnerability in the lib/sync.js script of the pbkdf2 library on the Node.js software platform involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Piscina ThreadPoolOptions Code Execution

The vulnerability of the ThreadPoolOptions component in the Piscina library of the Node.js software platform is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

AEM Forms Server-Side Validation Exploitation

The vulnerability of the corporate platform for creating, managing, and processing Adobe Experience Manager AEM Forms on JEE is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

AEM Forms Code Execution

The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a...

Adobe Connect Path Traversal

The vulnerability of the Adobe Connect instant messaging program is related to an incorrect limitation on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe XD Buffer Overflow RCE

The vulnerability of the Adobe Experience Design Adobe XD interface development software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Gitea IsMigrateURLAllowed Function Information Disclosure

The vulnerability of the IsMigrateURLAllowed function in the services/migrations/migrate.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea init-function internalAPITransport Internal

The vulnerability of the init-function in the internalAPITransport function in the modules/private/internal.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentialit...

Gitea handleOAuth2SignIn OAuth2 Bypass

The vulnerability of the handleOAuth2SignIn function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protecte...

Gitea Data Compromise

The vulnerabilities in the files routers/api/v1/api.go, routers/api/packages/api.go, services/context/api.go, and services/context/permission.go of the Git repository management system Gitea are related to access control deficiencies. Exploiting these vulnerabilities could allow a malicious actor...

Gitea Disclosure Information Disclosure

The vulnerability of the HostMatchList.checkIP function in the modules/hostmatcher/hostmatcher.go file and the RedirectURL function in the modules/auth/openid/openid.go file of the Git repository management system Gitea is related to incorrect calculations. Exploiting this vulnerability could all...

Gitea IntrospectOAuth Disclosure

The vulnerability of the IntrospectOAuth function in the routers/web/auth/oauth2provider.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea API Endpoint Protected Information Exposure

The vulnerability of the endpoint /api/v1/teams/teamid of the Gitea Git repository management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Gitea HookPostReceive Buffer Overflow

The vulnerability of the HookPostReceive function in the routers/private/hookpostreceive.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Gitea DeleteIssueLabel Function Information Disclosure

The vulnerability of the DeleteIssueLabel function in the routers/api/v1/repo/issuelabel.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected...

basic-ftp FTP Client DoS

The vulnerability of the Client.list function in the FTP-client library of the basic-ftp software platform for Node.js lies in the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

Flysystem normalizePath() Path Traversal

The vulnerability of the normalizePath function in the src/WhitespacePathNormalizer.php file of the Flysystem library is related to the failure to take measures to eliminate special elements. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected...

lib/helpers/Http2Sessions.js axios Bypass

The vulnerability of the lib/helpers/Http2Sessions.js file from the axios library is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms...

PostgresConnector.connect() Code Execution

The vulnerability of the PostgresConnector.connect function on the MCP-server, when used to interact with DBHub databases, is related to the use of an incomplete black list. Exploiting this vulnerability could allow an attacker to gain unauthorized read and write access, or execute arbitrary code...

Wazuh Cluster DoS

The vulnerability in the framework/wazuh/core/cluster/common.py file of the Wazuh security monitoring and threat detection platform is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

lib/adapters/http.js file in the Information Disclosure

The vulnerability of the lib/adapters/http.js file in the axios library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this security measure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the arch/x86/include/asm/nospec-branch.h and arch/x86/kernel/cpu/bugs.c files in Linux operating systems is related to a violation of expected behavior. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wireshark dissect_tiff_ifd() DoS

The vulnerability of the dissecttiffifd function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark file_gets DoS

The vulnerability of the filegets function in the Wireshark network traffic analyzer is related to the operation of writing data beyond the buffer in memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

Wireshark USB HID Traffic Analyzer DoS

The vulnerability of the parsereportdescriptor function in the Wireshark USB HID traffic analyzer relates to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark frame_add_comment function Heap Buffer Overflow DoS

The vulnerability of the frameaddcomment function in the Wireshark network traffic analyzer program epan/dissectors/packet-frame.c is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause service failures...

Wireshark TTL Analyzer DoS

The vulnerability of the TTL analyzer in Wireshark for computer network traffic analysis is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark dissect_zbee_zcl_touchlink DoS

The vulnerability of the dissectzbeezcltouchlink function in the Wireshark network traffic analyzer relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a service failure...

MBIM Protocol DoS

The vulnerability of the MBIM protocol dissector epan/dissectors/packet-mbim.c and the Wireshark traffic analyzer is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a attacker to cause service failures...

lib/resolver-compat.js Code Execution

The vulnerability of the LegacyResolver.customResolve function in the lib/resolver-compat.js file of the NodeVM library’s vm2 module is related to authentication process vulnerabilities. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

phpMyFAQ StopWords Method Compromise

The vulnerability of the StopWords::add method in the phpMyFAQ web application’s file phpMyFAQ/src/phpMyFAQ/StopWords.php relates to the lack of measures taken to protect the SQL query structure when processing the word parameter. Exploiting this vulnerability allows an attacker to compromise the...

libsndfile Heap Buffer Overflow DoS

The vulnerability of the psfbinheaderreadf function in the library for reading and writing audio files in libsndfile is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

phpMyFAQ ChatController XSS

The vulnerability in the phpMyFAQ application’s file phpMyFAQ/src/phpMyFAQ/Controller/Frontend/Api/ChatController.php is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information...

SumatraPDF Heap Buffer Overflow DoS

The vulnerability of the MobiDoc::ParseHeader function in the src/MobiDoc.cpp file of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing software SumatraPDF lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service...

phpMyFAQ TwoFactorSuccess Unauthorized Access

The vulnerability of the twoFactorSuccess function in the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Catapult DCT2000 File Parser DoS

The vulnerability of the Catapult DCT2000 file parser, a packet analyzer for computer networks developed by Wireshark, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark fragment_reassembly() function Heap Buffer Overflow DoS

The vulnerability of the fragmentreassembly function epan/dissectors/packet-sctp.c in the Wireshark network traffic analyzer is related to the execution of operations outside the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruption...