AMD GPU Direct Rendering VCN Buffer Overflow DoS

The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this vulnerability may allow an attacker to access protected information or cause service...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the ov5647sctrl function in the drivers/media/i2c/ov5647.c module of the Linux operating system’s multimedia device driver is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the pgshiftleveltottl function in the arch/arm64/kvm/nested.c file of Linux operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Azure SQL Database Privilege Escalation

The vulnerability of the Azure SQL Database cloud relational database is related to insufficient validation of queries on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Azure Logic Apps Path Traversal Privilege Escalation

The vulnerability of the cloud platform for creating and launching automated work processes in Azure Logic Apps is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remote...

Azure SQL Database SQL Injection

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the vc4hdmihotpluginit function in the drivers/gpu/drm/vc4/vc4hdmi.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to deficiencies in handling exceptional conditions. Exploiting this vulnerability can allow an attacker to...

Linux kernel USB gadget driver Heap Buffer Overflow DoS

The vulnerability of the setlinkstate function in the drivers/usb/gadget/udc/dummyhcd.c file of the Linux USB gadget driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the disarmkprobeftrace function in the kernel/kprobes.c module of the Linux operating system is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux pcrypt Cryptographic Data Compromise

The vulnerability of the functions pcryptaeaddone, pcryptaeadenc, and pcryptaeaddec in the crypto/pcrypt.c module of the Linux operating system is related to errors in handling asynchronous cryptographic requests. Exploiting this vulnerability can allow a remote attacker to compromise the...

exynos DRM Heap Buffer Overflow DoS

The vulnerability of the vidiconnectionioctl function in the drivers/gpu/drm/exynos/exynosdrmvidi.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the use of an unreliable pointer. Exploiting this vulnerability can allow an attacker to access protected...

Linux IPMI Buffer Overflow DoS

The vulnerability of the handleTransactionDone function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s alphabetic device driver lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

protocols such as BPv6

The vulnerability of Dissectors for protocols such as BPv6, OpenFlow, and Kafka, as well as the Wireshark traffic analyzer for computer networks, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service...

Panthor driver Heap Buffer Overflow DoS

The vulnerability of the panthorfwunplug function in the drivers/gpu/drm/panthor/panthorfw.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow...

command-line interface (CLI) of Security Bypass

The vulnerability of the command-line interface CLI of TP-Link Wi-Fi router microprogramming systems such as Archer NX200, NX210, NX500, and NX600 is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remo...

Nouveau Driver Heap Buffer Overflow DoS

The vulnerability of the nouveauconnectorauxxfer function in the drivers/gpu/drm/nouveau/nouveauconnector.c file of the Nouveau graphics driver for Linux-based systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

Crosswork Data Gateway Data Compromise

The vulnerability of the Crosswork Data Gateway data collection platform is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected informati...

L2TP Control Channel Parser Heap Buffer Overflow DoS

The vulnerability of the tunnelsetparams function in the tunnel.c file of the L2TP Control Channel Parser component of the D-Link DIR-895L router microprogramming system is related to the escape operation from the buffer into memory. Exploiting this vulnerability could allow a remote attacker to...

Microsoft Azure Entra ID Compatibility Package Privilege Escalation

The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Linux hardware monitoring driver pt5161l_read_block_data Heap Buffer Overflow

The vulnerability of the pt5161lreadblockdata function in the drivers/hwmon/pt5161l.c file of the Linux operating system’s device monitoring driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...

Adobe Connect Privilege Escalation

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Content Credentials SDK Insufficient Validation

The vulnerability of the Content Credentials SDK library is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

Spring Cloud Azure Privilege Escalation

The vulnerability of the integrated connection platform for cloud services in Spring Cloud Azure is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to enhance their privileges remotely...

UxTheme Library Code Execution

The vulnerability of the UxTheme Library uxtheme.dll in Windows operating systems is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

IPHelper Service Code Execution

The vulnerability of the IP Helper IPhlpsvc service in Windows operating systems is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Visual Studio Code Source Editor Security Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

Reyrolle 7SR5 Device Authentication Bypass

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices related to insufficient verification of input data during the processing of generated values. Exploiting this vulnerability could allow an attacker to bypass authentication procedures and gain unauthorized access to the...

firmware update mode Code Execution

The vulnerability of the firmware update mode of Reyrolle 7SR5 devices for relay protection and automation systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause malfunctions in the device’s...

Adobe Experience Manager Forms Authentication Bypass RCE

The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to authentication procedures’ flaws. Exploiting this vulnerability could allow a malicious actor to...

Adobe Experience Manager Forms Code Execution

The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor ...

Adobe Connect Code Execution

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Exchange Server Privilege Escalation

The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Graphic Fonts Windows Code Execution

The vulnerability of the Graphic Fonts component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Microsoft 365 Apps for Enterprise Buffer Overflow

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

EcoStruxure IT Data Center Expert Code Execution

The vulnerability of the software for managing the infrastructure of EcoStruxure IT Data Center Expert is related to the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Reyrolle 7SR5 Service Information Disclosure

The vulnerability of the microprogramming software in relay protection and automation devices from Reyrolle 7SR5 lies in the inclusion of functional information within the debugging code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read and modify da...

USB Mass Storage Class Driver Code Execution

The vulnerability of the USB Mass Storage Class Driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows DNS Service Code Execution

The vulnerability of the Windows DNS service for Windows operating systems is related to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Reyrolle 7SR5 Web Interface Unauthorized Access

The vulnerability of the web interface of Reyrolle 7SR5 microprogrammable logic devices for relay protection and automation systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized acces...

AEM Forms Server-Side Validation Exploitation

The vulnerability of the corporate platform for creating, managing, and processing Adobe Experience Manager AEM Forms on JEE is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Adobe Connect Privilege Escalation

The vulnerability of the Adobe Connect instant messaging program relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Microsoft SharePoint Server Code Execution

The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to improper code generation. Exploiting this vulnerability could allow ...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...