Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость графической библиотеки Skia браузера Google Chrome связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...

The vulnerability of the fromSafeUrlFilter() function in the httpd daemon of the microprogramming-based router software Tenda F456 allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSafeUrlFilter function in the httpd daemon of the microprogramming-based router software Tenda F456 is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows attackers to expose protected information or cause service interruptions.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Уязвимость обработчика JavaScript-сценариев V8 браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость обработчика JavaScript-сценариев V8 браузеров Google Chrome и Microsoft Edge связана с ошибками смешения типов данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с помощью специально созданной HTML-страницы...

Уязвимость компонента Input браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти существующие механизмы безопасности

Уязвимость компонента Input браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...

Уязвимость библиотеки ANGLE браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти защитный механизм песочницы

Уязвимость библиотеки ANGLE браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти защитный механизм песочницы с помощью специально созданной HTML-страницы...

Уязвимость компонента Printing браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти защитный механизм песочницы

Уязвимость компонента Printing браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти защитный механизм песочницы...

The vulnerability of the OData service of the SAP S/4HANA software platform allows attackers to compromise the integrity of the protected information.

The vulnerability of the OData service of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

Уязвимость компонента Network браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Уязвимость компонента Network браузера Google Chrome связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

The vulnerability of the decoder in the Protocol Buffers library allows a attacker to cause a service failure.

The vulnerability of the decoder in the Protocol Buffers-based library related to Protocol Buffers Protobuf protobufjs is associated with an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Cacti network monitoring software lies in the incorrect path name limitation, which allows attackers to carry out phishing attacks.

The vulnerability of the Cacti network monitoring software is related to an incorrect limitation on the path name to the directory when processing the formatfile parameter. Exploiting this vulnerability allows a remote attacker to perform phishing attacks...

The vulnerability of the FileBackedSessionManager mechanism in the pgAdmin 4 database management tool allows a hacker to execute arbitrary code.

The vulnerability of the FileBackedSessionManager mechanism in the pgAdmin 4 database management tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the graphics processor in Google Chrome browsers on Windows operating systems, which allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the graphics processor in Google Chrome browsers on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing protection mechanisms by using a specially created HTML page...

Уязвимость компонента WebGPU браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Уязвимость компонента WebGPU браузера Google Chrome связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации с помощью специально созданной...

The vulnerability of the `virtio_gpu_plane_prepare_fb()` function in the Linux kernel’s drivers/gpu/drm/virtio/virtgpu_plane.c file allows a hacker to cause a service failure.

The vulnerability of the virtiogpuplanepreparefb function in the drivers/gpu/drm/virtio/virtgpuplane.c file of the Linux kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of Azure Synapse analytics services, related to errors in privilege management, allows attackers to escalate their privileges.

The vulnerability of Azure Synapse cloud analytics service is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the f2fs_io_schedule_timeout() function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux kernel allows a attacker to trigger a service failure.

The vulnerability of the f2fsioscheduletimeout function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux’s kernel involves executing a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow a attacker to cause a service failure...

Уязвимость компонента Cast браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость компонента Cast браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Уязвимость компонента Dawn браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти защитный механизм песочницы

Уязвимость компонента Dawn браузеров Google Chrome и Microsoft Edge связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти защитный механизм песочницы...

The vulnerability of the `cache_fuse_add_dirent_to_cache()` function in the `fs/fuse/readdir.c` module of the Linux operating system allows a hacker to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the cachefuseadddirenttocache function in the fs/fuse/readdir.c module of the Linux operating system is related to the execution of operations outside the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gai...

The vulnerability of the importExternalTexture method in the Web page rendering module of the Safari browser for iOS operating systems, iPadOS, and macOS allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the importExternalTexture method in the WebPageRendering module of the WebKit browser engine for Safari operating systems, iPadOS, and macOS is related to deficiencies in the mechanism for verifying data sources when processing web content. Exploiting this vulnerability can...

Уязвимость графического процессора браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальной информации

Уязвимость графического процессора браузера Google Chrome связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальной информации с помощью специально созданной HTML-страницы...

The vulnerability of the Duo Workflows software tool, a git-based programming platform for collaborative code development on GitLab EE/CE, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Duo Workflows software tool, a git-based programming platform for collaborative code development in GitLab EE/CE, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability in the software web interface of Cisco Webex Meetings allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of Cisco Webex Meetings software’s web interface is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the rxe_qp_do_cleanup() function in the drivers/infiniband/sw/rxe/rxe_qp.c module of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the dmc620_pmu_init() function in the drivers/perf/arm_dmc620_pmu.c module of the Linux kernel’s performance monitoring driver, which allows a hacker to cause a system failure.

The vulnerability of the dmc620pmuinit function in the drivers/perf/armdmc620pmu.c module of the Linux kernel’s performance monitoring driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the qla24xx_abort_iocb_timeout() function in the drivers/scsi/qla2xxx/qla_init.c driver module of the Linux operating system’s SCSI device driver allows a hacker to trigger a service failure.

The vulnerability of the qla24xxabortiocbtimeout function in the drivers/scsi/qla2xxx/qlainit.c driver for SCSI device drivers in the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the VPU_IOCX_OPEN_INSTANCE() and vpu_put_inst() functions in the VPU operating system driver for Android allows a hacker to cause a service failure.

The vulnerability of the VPUIOCXOPENINSTANCE and vpuputinst functions in the VPU operating system driver of Android is related to the use of memory after it is freed, as a result of retrieving the driver instance from an array and resetting the reference counter before closing it. Exploiting this...

The vulnerability of the Suricata intrusion detection and prevention system, related to an uncontrolled reachable assertion, allows a intruder to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the Splunk Enterprise platform for operational analysis allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to improper handling of data with Unicode encoding. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to unlimited distribution of resources, allows a intruder to cause a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Teamcenter product lifecycle management system, related to the use of strictly encrypted inventory data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Teamcenter product lifecycle management system lies in the use of strictly encrypted inventory data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the imxfb_probe() function in the drivers/video/fbdev/imxfb.c driver module allows a hacker to cause a service failure.

The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c driver for kernel-based graphics device drivers in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the ext4_xattr inode_create() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4xattr inodecreate function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the nilfs_valid_sb() function in the fs/nilfs2/the_nilfs.c file of the NILFS2 file system in the Linux operating system allows a attacker to access protected information or cause service failure.

The vulnerability of the nilfsvalidsb function in the fs/nilfs2/thenilfs.c file of the NILFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected information or cause servic...

The vulnerability of the NFS intrusion detection and prevention system Suricata allows a intruder to trigger a service failure.

The vulnerability of the NFS intrusion detection and prevention system Suricata depends on the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the checkstackGC() function in the Lua script interpreter allows a attacker to trigger a service failure.

The vulnerability of the checkstackGC function in the Lua script interpreter is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the gs_usb_receive_bulk_callback() function in the drivers/net/can/usb/gs_usb.c module of the Linux network device driver framework allows a attacker to access protected information or cause a service failure.

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c module of the Linux network device driver framework is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...

The vulnerability of the Grafana monitoring and observation platform, related to unencrypted storage of user credentials, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Grafana monitoring and observation platform is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Fastify framework, a Node.js-based software platform, arises from improper validation of the specified data type. This allows attackers to bypass existing security measures.

The vulnerability of the Fastify framework, a Node.js software platform, is related to improper validation of the specified data type during input processing. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

The vulnerability of the macio_add_one_device() function in the drivers/macintosh/macio_asic.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the macioaddonedevice function in the drivers/macintosh/macioasic.c module of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions virtnet_freeze_down() and virtnet_restore_up() in the drivers/net/virtio_net.c module of the Linux kernel’s network device support driver allows a attacker to access protected information or cause service failures.

The vulnerability of the virtnetfreezedown and virtnetrestoreup functions in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected...

The vulnerability of NETAMS WNAM user management software, related to the manipulation of inter-site requests, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETAMS WNAM user management software lies in the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the authentication mechanism of the SAML-based NetScaler ADC controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to cause service interruptions.

The vulnerability of the SAML authentication mechanism for NetScaler ADC formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a...

The vulnerability of the UEFI Secure Boot protection mechanism in Windows operating systems allows a hacker to circumvent security restrictions and execute arbitrary code.

The vulnerability of the UEFI Secure Boot security mechanism in Windows operating systems is related to a component that cannot be updated. Exploiting this vulnerability can allow attackers to bypass security restrictions and execute arbitrary code...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the authentication procedures’ flaws, which allow unauthorized access to protected information by intruders.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Mattermost instant messaging application, related to information disclosure, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack lies in errors related to the authentication process. These errors allow attackers to compromise the confidentiality and integrity of the protected information.

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack are related to errors in the authentication process. Exploiting these vulnerabilities can allow unauthorized actors to compromise t...

The vulnerabilities of NVIDIA Virtual GPU Manager and the Guest driver of virtual graphics processors allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NVIDIA Virtual GPU Manager and the Guest driver for NVIDIA Virtual GPUs is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...