Perl-Crypt-DSA DoS

The vulnerability of the Perl-Crypt-DSA digital signature package is related to insufficient entropy. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Resource Control DoS

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

Kibana Data Visualization Token Timestamp Disclosure

The vulnerability of the Kibana data visualization service is related to the improper processing of token timestamps. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

golang-x-image Resource Management Code Execution

The vulnerability of the golang-x-image package, a programming language, is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Erlang/OTP Buffer Overflow DoS

The vulnerability of the Erlang/OTP software platform lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

golang-x-net Package Code Execution

The vulnerability of the golang-x-net package in the Golang programming language is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

PHP Buffer Overflow DoS

The vulnerability of the PHP interpreter is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Netty Insufficient Data Authenticity Code Execution

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vim Command Injection

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Linux kernel Code Execution

The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources with dynamic management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Erlang/OTP Stack Buffer Overflow

The vulnerability of the Erlang/OTP software platform is related to overflowing buffers in the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

FFmpeg MACE6 Decoder Memory Damage Code Execution

The vulnerability of the MACE6 decoder for FFmpeg’s multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

MongoDB BSON Document Verification DoS

The vulnerability of the BSON document verification mechanism in the MongoDB database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service failures...

OpenTofu DoS

The vulnerability of the OpenTofu infrastructure management tool is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...

Oracle Java SE 2D DoS

The vulnerability of the Oracle Java SE 2D software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

WordPress get_page_template() Code Execution

The vulnerability of the getpagetemplate function in the WordPress content management system is related to improper handling of file names for PHP functions like include or require. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DIR-825 Router Code Execution

The vulnerability of the tunnelsetparams function in the rp-l2tp component of D-Link’s DIR-825 router software lies in the fact that the operation of writing data beyond the buffer in memory occurs when processing the peerhostname parameter. Exploiting this vulnerability allows a remote attacker ...

Kibana Canvas DoS

The vulnerability of the built-in Canvas tool in the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Kibana Workflows SSRF

The vulnerability of the Workflows interface of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Moby Container Isolation Uncontrolled Resource Consumption DoS

The vulnerability of the Moby container isolation system creation software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...

ImageIO Component Privilege Escalation

The vulnerability of the ImageIO component in the Oracle Java SE software platform, as well as in Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Oracle Java SE DoS

The vulnerability of the Oracle Java SE 2D software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

LibreNMS Shell Exec RCE

The vulnerability of the shellexec function in the LibreNMS network monitoring system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

LibreNMS XSS

The vulnerability of the LibreNMS network monitoring system is related to deficiencies in the blocking procedures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

LibreNMS XSS

The vulnerability of the LibreNMS network monitoring system’s sceenario/include/html/print-vrf.inc.php file is related to deficiencies in the encapsulation process when processing fields such as vrfname, mplsVpnVrfDescription, and mplsVpnVrfRoute. Exploiting this vulnerability allows a remote...

WordPress Kernel Code Execution

The vulnerability of the WordPress website content management system’s kernel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

next og ImageResponse Code Execution

The vulnerability of the ImageResponse component in the next/og software platform for creating web applications in Next.js is related to improper encoding or escaping of output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DIR-822 A1 strcpy Heap Buffer Overflow

The vulnerability of the strcpy function in the udhcpcd component of D-Link DIR-822 A1 wireless router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

LibreNMS SNMP Unauthorized Access Cross-site

The vulnerability of the SNMP protocol implementation in the LibreNMS network monitoring system is related to deficiencies in the process of blocking outdated PHP templates. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information and perform...

Kibana Data Visualization Service Resource Consumption DoS

The vulnerability of the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana visualization service DoS

The vulnerability of the automatic data import function of the Kibana visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PHP dns_get_record SSRF

The vulnerability of the dnsgetrecord function in the PHP programming language is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

Oracle Java SE DoS

The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Oracle Java SE JSE Unauthenticated Access Disclosure

The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

D-Link DAP-1360 Code Execution

The vulnerability of the web interface for managing microprogrammed wireless access points from D-Link DAP-1360 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted...

Kibana ML DoS

The vulnerability of the Machine Learning function of the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Oracle Java SE Libraries DoS

The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service interruptio...

Security Component Unauthorized Access

The vulnerability of the Security component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker operating remotely to gain...

Cisco Secure Firewall Security Bypass

The vulnerabilities of Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA, as well as the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software, are related to the compromise of the data protection...

Cisco Identity Services Engine Unauthorized Access

The vulnerability of the Cisco Identity Services Engine ISE network policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to insufficient protection of registration data. Exploiting this vulnerability could allow a...

.NET Visual Studio Code Buffer Overflow Privilege Escalation

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PDF Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...

GFX Component Code Execution

The vulnerability of the GFX web browser components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cisco Secure Email and Web Manager Code Execution

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient checks for message or data structure correctness. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

PDF Buffer Overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted...

OpenEXR Image Read Pixels Heap Buffer Overflow DoS

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

VeloCloud Orchestrator Code Execution

The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator VCO on the VMware SD-WAN by VeloCloud On-Prem platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...

OpenEXR Image Read Pixels Heap Buffer Overflow DoS

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

Cisco Secure Firewall DoS

The vulnerability of the EIGRP protocol implementation in Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to improper memory release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Jackson-Databind NioPathHelper Arbitrary File Load

The vulnerability of the NioPathHelper.deserialize method in the Jackson-Databind library is related to insecure dynamic class loading. Exploiting this vulnerability could allow an attacker to load arbitrary files...