Linux Kernel BPF Use-After-Free

The vulnerability in the include/linux/filter.h and kernel/bpf/core.c files of Linux operating systems is related to a violation of expected behavior. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

lib/adapters/http.js file in the Information Disclosure

The vulnerability of the lib/adapters/http.js file in the axios library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this security measure...

lib/resolver-compat.js Code Execution

The vulnerability of the LegacyResolver.customResolve function in the lib/resolver-compat.js file of the NodeVM library’s vm2 module is related to authentication process vulnerabilities. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Wazuh _getattributes() Heap Buffer Overflow

The vulnerability of the getattributes function in the src/osxml/osxml.c file of the security monitoring and threat detection platform Wazuh is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Wireshark frame_add_comment function Heap Buffer Overflow DoS

The vulnerability of the frameaddcomment function in the Wireshark network traffic analyzer program epan/dissectors/packet-frame.c is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause service failures...

Wireshark dissect_zbee_zcl_touchlink DoS

The vulnerability of the dissectzbeezcltouchlink function in the Wireshark network traffic analyzer relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a service failure...

MBIM Protocol DoS

The vulnerability of the MBIM protocol dissector epan/dissectors/packet-mbim.c and the Wireshark traffic analyzer is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a attacker to cause service failures...

lib/helpers/Http2Sessions.js axios Bypass

The vulnerability of the lib/helpers/Http2Sessions.js file from the axios library is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms...

axios shouldBypassProxy function DoS

The vulnerability of the shouldBypassProxy function in the axios library’s lib/helpers/shouldBypassProxy.js file is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

vm2 BaseHandler markHostPromiseHandled Buffer Overflow DoS

The vulnerability of the markHostPromiseHandled function in the BaseHandler component of the vm2 library in the NPM package manager is related to an error in handling exceptional states. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Wazuh Cluster DoS

The vulnerability in the framework/wazuh/core/cluster/common.py file of the Wazuh security monitoring and threat detection platform is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Wireshark netmon_process_record function DoS

The vulnerability of the netmonprocessrecord function, a traffic analyzer in Wireshark, is related to the lack of input data validation for cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...

phpMyFAQ XSS

The vulnerability of the htmlentitydecode function in the phpMyFAQ/src/phpMyFAQ/Controller/Frontend/Api/FaqController.php file of the phpMyFAQ web application is related to the lack of security measures for the website’s structure. Exploiting this vulnerability could allow an attacker to perform...

Wireshark Dot11DecryptFtMicCheck Buffer Overflow DoS

The vulnerability of the Dot11DecryptFtMicCheck function epan/crypt/dot11decrypt.c, a traffic analyzer for computer networks in Wireshark, is related to the operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures...

Wireshark USB HID Traffic Analyzer DoS

The vulnerability of the parsereportdescriptor function in the Wireshark USB HID traffic analyzer relates to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

Sharkd Traffic Analyzer DoS

The vulnerability of the Sharkd traffic analyzer in Wireshark relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a hacker to cause service failures...

axios Http2Sessions Session Failure

The vulnerability of the Http2Sessions.getSession function in the axios library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the arch/x86/include/asm/nospec-branch.h and arch/x86/kernel/cpu/bugs.c files in Linux operating systems is related to a violation of expected behavior. Exploiting this vulnerability can allow an attacker to cause a service failure...

phpMyFAQ StopWords Method Compromise

The vulnerability of the StopWords::add method in the phpMyFAQ web application’s file phpMyFAQ/src/phpMyFAQ/StopWords.php relates to the lack of measures taken to protect the SQL query structure when processing the word parameter. Exploiting this vulnerability allows an attacker to compromise the...

SumatraPDF Heap Buffer Overflow DoS

The vulnerability of the MobiDoc::ParseHeader function in the src/MobiDoc.cpp file of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing software SumatraPDF lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service...

WiresharkZipHelper unzip DoS

The vulnerability of the WiresharkZipHelper::unzip function in the Wireshark network traffic analyzer is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a attacker to cause service failures or execute arbitrary code...

Wireshark file_gets DoS

The vulnerability of the filegets function in the Wireshark network traffic analyzer is related to the operation of writing data beyond the buffer in memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

Wireshark g_ascii_strtoull Heap Buffer Overflow DoS

The vulnerability of the gasciistrtoull function in the Wireshark network traffic analyzer is related to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark TTL Analyzer DoS

The vulnerability of the TTL analyzer in Wireshark for computer network traffic analysis is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

dispatchRequest() function in the Security Bypass

The vulnerability of the dispatchRequest function in the axios library is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...

axios Heap Buffer Overflow DoS

The vulnerability of the axios.get function in the axios library’s lib/helpers/fromDataURI.js file is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

libsndfile Heap Buffer Overflow DoS

The vulnerability of the psfbinheaderreadf function in the library for reading and writing audio files in libsndfile is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

phpMyFAQ ChatController XSS

The vulnerability in the phpMyFAQ application’s file phpMyFAQ/src/phpMyFAQ/Controller/Frontend/Api/ChatController.php is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information...

phpMyFAQ TwoFactorSuccess Unauthorized Access

The vulnerability of the twoFactorSuccess function in the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Packet-synphasor Heap Buffer Overflow DoS

The vulnerability of the wmemfilescope function in the SYNCHROPHASOR dissector component packet-synphasor.c, a traffic analyzer for Wireshark computer networks, is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause service failures...

Catapult DCT2000 File Parser DoS

The vulnerability of the Catapult DCT2000 file parser, a packet analyzer for computer networks developed by Wireshark, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark dissect_tiff_ifd() DoS

The vulnerability of the dissecttiffifd function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability can allow attackers to cause service failures...

Apple CoreGraphics Code Execution

The vulnerability of the Apple CoreGraphics system framework in iOS, MacOS, and iPadOS relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PostgresConnector.connect() Code Execution

The vulnerability of the PostgresConnector.connect function on the MCP-server, when used to interact with DBHub databases, is related to the use of an incomplete black list. Exploiting this vulnerability could allow an attacker to gain unauthorized read and write access, or execute arbitrary code...

Cisco Catalyst SD-WAN Manager Unauthorized Access

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager is related to improper handling of data with encoded URLs. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by...

Dissector ISO 15765 Analyzers Wireshark Data Compromise

The vulnerability of the ISO 15765 and ISO 10681 discrivers of the Wireshark network traffic analyzer is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker operating remotely to compromise the integrity and accessibility of...

Azure Arc Name Reference Privilege Escalation

The vulnerability of the Azure Arc local infrastructure connection software relates to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Panthor driver Heap Buffer Overflow DoS

The vulnerability of the groupreleasework function in the drivers/gpu/drm/panthor/panthorsched.c module of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously released memory. Exploiti...

mcp23s08_probe_one Heap Buffer Overflow DoS

The vulnerability of the mcp23s08probeone function in the drivers/pinctrl/pinctrl-mcp23s08.c driver for Linux kernel’s PINCTRL output ports is related to improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux hardware monitoring driver Heap Buffer Overflow DoS

The vulnerability of the nct7363presentpwmfanin function in the drivers/hwmon/nct7363.c module of the Linux device monitoring driver causes a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Kernel DRI DoS

The vulnerability of the rzg2lmipidsiatomicdisable function in the drivers/gpu/drm/renesas/rz-du/rzg2lmipidsi.c driver of the Direct Rendering Infrastructure DRI component of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the adisinit function in the drivers/iio/imu/adis.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux USB Device Driver RNDIS Buffer Overflow

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

rtw_get_ie_ex Heap Buffer Overflow

The vulnerability of the rtwgetieex function in the drivers/staging/rtl8723bs/core/rtwieee80211.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain...

amdxdna_ubuf_map Heap Buffer Overflow DoS

The vulnerability of the amdxdnaubufmap function in the drivers/accel/amdxdna/amdxdnaubuf.c driver for Linux kernel-based computing devices involves improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to cause system failures...

kubectl cp Arbitrary File Write

The vulnerability of the kubectl cp command in the Kubernetes command line tool relates to an incorrect path name limitation. Exploiting this vulnerability could allow a remote attacker to write arbitrary files...

Grafana MCP Server SSRF

The vulnerability of the grafanaapirequest tool on the Grafana MCP Server platform, which is used for monitoring and surveillance, is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

D-Link R95 Router Code Execution

The vulnerability of the /bin/ssi file of the DHMAPI component in D-Link R95 router microprogramming software is related to the lack of measures taken to neutralize special elements in the NTPServer parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code,...

Kafka Protocol Decoder Wireshark DoS

The vulnerability of the Kafka protocol decoder and the Wireshark traffic analyzer in computer networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Azure Arc Authentication Privilege Escalation

The vulnerability of the Azure Arc local infrastructure connection software relates to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...