MongoDB DoS

The vulnerability of the bit expression processing mechanisms $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear in the MongoDB database management system is related to improper handling of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause service...

golang-x-net Clickjacking

The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

golang-x-net Clickjacking

The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

golang-x-net Clickjacking

The vulnerability of the golang-x-net package in the Golang programming language is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

GitPython Service Data Access

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel Control Flow DoS

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Kibana APM Unauthorized Access

The vulnerability of the Application Performance Monitoring APM component of the Kibana data visualization service is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protecte...

GitPython Command Injection

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

DNSdist getEDNSOptions Method DoS

The vulnerability of the DNSQuestion:getEDNSOptions method in the pdns/dnsdistdist/dnsdist.hh file of the load balancer and proxy for DNS traffic is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Erlang/OTP SSRF

The vulnerability of the Erlang/OTP software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to perform a SSRF attack remotely...

Timelion Data Visualization Service DoS

The vulnerability of the expression processing mechanism in Timelion’s Kibana visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana Connectors SSRF

The vulnerability of the Kibana Connector request execution mechanism of the Kibana visualization service is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Kibana SSRF

The vulnerability of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

PDF Memory Exploitation Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 relates to the ability to utilize memory after decompression. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel Memory Leak DoS

The vulnerability of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Resource Control DoS

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Resource Leak DoS

The vulnerability of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures through specially created IPv6 traffic...

Linux kernel Resource Control DoS

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

MongoDB Server-Side JavaScript Engine Data Compromise

The vulnerability of the server-side JavaScript engine of the MongoDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

FFmpeg decode_move() Buffer Overflow DoS

The vulnerability of the decodemove function in the libavcodec/rasc.c file of the multimedia library FFmpeg is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Perl-DBI Buffer Overflow DoS

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves reading beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

libssh Stack Buffer Overflow RCE

The vulnerability of the libssh library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

BuildKit Path Traversal

The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...

Erlang-hex_core Uncontrolled Resource Consumption DoS

The vulnerability of the Erlang-hexcore programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Erlang/OTP Path Traversal Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

DNSdist Bypass ACL

The vulnerability of the IncomingHTTP2Connection::handleIncomingQuery function in the pdns/dnsdistdist/dnsdist-nghttp2-in.cc file of the load balancer and proxy for DNS traffic is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor ...

DNSdist DNS DoS

The vulnerability of the GenericDNSPacketWriter::commit function in the pdns/dnswriter.c file of the load balancer and proxy for DNS traffic is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failur...

Erlang/OTP Certificate Verification DoS

The vulnerability of the Erlang/OTP software platform is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to trigger a denial-of-service attack...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Dashboard Bypass Security

The vulnerability of the dashboard management mechanism of the Kibana data visualization service is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

Go Symbolic Reference Privilege Escalation

The vulnerability of the Go programming language is related to the tracking of symbolic references. Exploiting this vulnerability can allow attackers to enhance their privileges...

PHP-phpseclib Time Mismatch Unauthorized Access

The vulnerability of the PHP-phpseclib interpreter lies in manipulating an unknown input, which leads to a time mismatch vulnerability. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Erlang/OTP Authentication Bypass

The vulnerability of the Erlang/OTP software platform is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to influence the confidentiality and integrity of the protected information...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

Fleet Plugin Bypass Security Restrictions

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

pygments DoS

The vulnerability of the pygments syntax highlighting library is related to the use of a regular expression c, which has an inefficient computational cost. Exploiting this vulnerability could allow an attacker to cause a service failure...

Glances Outdated._load_cache() Code Execution

The vulnerability of the Outdated.loadcache function in the glances/outdated.py monitoring tool is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Containerd DoS

The vulnerability of the mechanism for handling user groups in the Containerd runtime is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a attacker to cause service failures...

Netty Heap Buffer Overflow DoS

The vulnerability of the framework for developing network applications, servers, and client protocols related to Netty lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Netty Encryption Unauthorized Access

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Erlang/OTP Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Erlang/OTP URL Redirection

The vulnerability of the Erlang/OTP software platform is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

Kibana Timeline Mass Deletion DoS

The vulnerability of the mass deletion mechanism of objects in the Kibana data visualization service’s Timeline feature is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana Output Encoding

The vulnerability of the Kibana data visualization service is related to the lack of mechanisms for encoding or shielding the output data during header processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protect...

Kibana DoS

The vulnerability of the Kibana data visualization service is related to an error in handling exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Erlang/OTP Stack Buffer Overflow

The vulnerability of the Erlang/OTP software platform is related to overflowing buffers in the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

Jenkins Permission Checking Unauthorized Access

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

Jenkins URL Redirection Phishing

The vulnerability of the URL redirection check mechanism after a Jenkins automation server is accessed involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...