NVIDIA Display Driver Code Execution

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to incorrect conversion of numerical data types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

NVIDIA Display Driver Privilege Escalation

The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for virtual graphics processors from NVIDIA, is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow attackers to increase their privileges and execute arbitrary code...

NVIDIA Display Driver DoS

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

NVIDIA Display Driver DoS

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insecure initialization. Exploiting this vulnerability can allow an attacker to cause system failures...

Ruby IMAP Library CRLF Injection

The vulnerability in the client API library for the IMAP protocol in Ruby is related to the failure to implement measures to neutralize CRLF sequences. Exploiting this vulnerability allows an attacker to execute arbitrary IMAP commands remotely...

IMAP Library Man-in-the-Middle

The vulnerability in the client API library for the IMAP protocol, written in Ruby, relates to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

Check Point Security Management Server Path Traversal

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in incorrect path name restrictions for accessing the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

OpenEXR GetChannelsInMultiPartFile viewFromChannelName DoS

The vulnerability of the GetChannelsInMultiPartFile and viewFromChannelName functions in software for storing OpenEXR images with wide dynamic range brightness values is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

Intel Media SDK Heap Buffer Overflow Privilege Escalation

The vulnerability of the Intel Media SDK library lies in improper restrictions on operations within memory buffers. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel Media SDK Heap Buffer Overflow Privilege Escalation

The vulnerability of the Intel Media SDK library lies in reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

.NET Visual Studio Code Buffer Overflow DoS

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browser lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause service interruptions...

HTML-in-Canvas Component Unauthorized Access

The vulnerability of the HTML-in-Canvas component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Password component Code Execution

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Skia Graphic Library Code Execution

The vulnerability of the Skia graphics library in Google Chrome and Microsoft Edge browsers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Device Trust Component Code Execution

The vulnerability of the Device Trust component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Dawn Component Code Execution

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge browser vulnerabilities is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

V8 Script Handler Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Extensions Component DoS

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Chromecast web browsers DoS

The vulnerability of the Chromecast web browsers Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

Input component in Google Code Execution

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge DoS

The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Dawn Component Code Execution

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to writing beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Bluetooth Code Execution

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cisco Secure Firewall Authentication Bypass

The vulnerabilities of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software are related to errors in the certificate validation process. Exploiting these vulnerabilities can allow attackers to...

Cisco Secure Firewall Threat Defense TLS DoS

The vulnerability of the Cisco Secure Firewall Threat Defense FTD software-based TLS protocol implementation is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco Secure Firewall IKEv2 DoS

The vulnerability of the IKEv2 protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to incorrect data type conversion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco ISE Code Execution

The vulnerability of the application software interface of the Cisco Identity Services Engine ISE and the Cisco ISE Passive Identity Connector ISE-PIC, which are used for user authentication data collection, is related to the failure to implement measures to neutralize special elements. Exploitin...

Cisco ISE RADIUS DoS

The vulnerability of the RADIUS function of the Cisco Identity Services Engine ISE management interface involves an escape from the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Secure Email and Web Manager Access Control Bypass

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass existing security mechanisms remotely...

Cisco Secure Email and Web Manager Code Execution

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient checks for message or data structure correctness. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

OpenEXR unpack_sample_table DeepTiledInputFile readPixelSampleCounts System Failure

The vulnerabilities of the functions unpacksampletable and DeepTiledInputFile::readPixelSampleCounts in software for storing images in OpenEXR format with a wide dynamic range are related to the situation where the operation’s output goes beyond the buffer boundaries during data decoding...

NVIDIA Display Driver DoS

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient control over input data. Exploiting this vulnerability can allow attackers to cause system failures...

NVIDIA Display Driver DoS

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

NVIDIA Display Driver Privilege Escalation

The vulnerability of NVIDIA Display Driver and Guest Driver, which are used for NVIDIA’s virtual graphics processors, is related to improper resolution saving. Exploiting this vulnerability can allow attackers to increase their privileges and execute arbitrary code...

SAP Message Server Code Execution

The vulnerability of the SAP Message Server, a software integration platform of SAP NetWeaver, is related to the use of single-factor authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Intel Media SDK Heap Buffer Overflow DoS

The vulnerability of the Intel Media SDK library collection is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Intel Media SDK Heap Buffer Overflow Privilege Escalation

The vulnerability of the Intel Media SDK library lies in the writing of data beyond the buffer memory boundaries. Exploiting this vulnerability can allow an attacker to enhance their privileges...

.NET Visual Studio Code Buffer Overflow Privilege Escalation

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

.NET Visual Studio Code Information Disclosure

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

PaperCut MF/NG Insecure Dynamic Class Loading Code Execution

The vulnerability of printing control software in PaperCut MF and PaperCut NG lies in the unsafe dynamic loading of classes, due to the lack of checks to ensure that the loaded classes comply with the list of allowed drivers. Exploiting this vulnerability allows a remote attacker to execute...

Linux Toolkit Theming Component DoS

The vulnerability of the Linux Toolkit Theming component in Google Chrome and Microsoft Edge relates to insufficient input validation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

WebAppInstalls Component Code Execution

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WebShare DoS

The vulnerability of the WebShare component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Navigation Component Google Chrome Microsoft Edge DoS

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CameraCapture Component Code Execution

The vulnerability of the CameraCapture component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...