Component Code Execution

The vulnerability of the Browser component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Gamepad DoS

The vulnerability of the Gamepad components in Google Chrome and Microsoft Edge browsers is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Media Component DoS

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

WebAppInstalls Component Code Execution

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cisco Identity Services Engine RCE

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root leve...

Cisco ISE RADIUS DoS

The vulnerability of the RADIUS function of the Cisco Identity Services Engine ISE management interface involves an escape from the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Secure Email Resource Control DoS

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...

Cisco Secure Email and Web Manager Access Control Bypass

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass existing security mechanisms remotely...

Cisco Secure Email and Web Manager Code Execution

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient checks for message or data structure correctness. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

PDF Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...

Intel Media SDK Heap Buffer Overflow Privilege Escalation

The vulnerability of the Intel Media SDK library lies in reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

.NET Visual Studio Code Buffer Overflow Privilege Escalation

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

.NET Visual Studio Code Information Disclosure

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Password component Code Execution

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

V8 Script Handler Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

WebAudio Component Code Execution

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Blink Component Code Execution

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge DoS

The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

GFX Component Code Execution

The vulnerability of the GFX web browser components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cisco Secure Firewall Authentication Bypass

The vulnerabilities of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software are related to errors in the certificate validation process. Exploiting these vulnerabilities can allow attackers to...

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cisco Identity Services Engine Unauthorized Access

The vulnerability of the Cisco Identity Services Engine ISE network policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to insufficient protection of registration data. Exploiting this vulnerability could allow a...

Cisco Secure Email and Web Manager Relative Path Handling

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in the handling of relative paths. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

PDF Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...

Intel Media SDK Heap Buffer Overflow DoS

The vulnerability of the Intel Media SDK library lies in improper restrictions on operations within memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome Bluetooth Code Execution

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Windows Defender DoS

The vulnerability of Microsoft Windows Defender operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service interruptions...

lib/setup-sandbox.js lib/bridge.js vm2 Package Manager Data Compromise

The vulnerability in the scripts of lib/setup-sandbox.js and lib/bridge.js in the vm2 package manager NPM is related to the lack of validation for the correctness of incoming requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Oracle Java SE Unauthorized Access

The vulnerability of Oracle Java SE’s scripting components is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

NPM vm2 Arbitrary Command Execution

The vulnerability of the NPM package manager’s vm2 library is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

vm2 Sandbox Prepare Stack Trace

The vulnerability of the defaultSandboxPrepareStackTrace function in the lib/setup-sandbox.js file of the vm2 library, a part of the npm package manager, is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...

SOGo Contact Search Unauthorized Access

The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to a user’s account through specially craft...

SQLite SQLAR Extension DoS

The vulnerability of the sqlarcompress and sqlaruncompress functions in the SQLite database management system’s SQLAR extension involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

NLTK IPIPANCorpusReader CrubadanCorpusReader LinThesaurusCorpusReader Unauthorized Access

The vulnerability of the IPIPANCorpusReader, CrubadanCorpusReader, and LinThesaurusCorpusReader classes in the NLTK library for symbolic and statistical processing of natural language data is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this...

go-yaml Unmarshal DoS

The vulnerability of the Unmarshal function in the go-yaml library for the Go programming language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Electron Shell Open Path

The vulnerability of the shell.openPath function in the Electron application development platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

Oracle Java SE Unauthorized Access

The vulnerability of the components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

vm2 Library VM Component Data Compromise

The vulnerability of the new VM component in the vm2 library of the NPM package manager is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

cupsd Privilege Escalation

The vulnerability of the cupsd server in CUPS printing relates to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

vm2 os dns Module Data Compromise

The vulnerability of the os and dns modules in the vm2 package manager NPM is related to errors in information processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OpenCast etc/security/mh_default_org.xml Unauthorized Access

The vulnerability in the script of etc/security/mhdefaultorg.xml of the application for automatic capture, processing, management, and distribution of Opencast videos is related to improper session management when processing the JSESSIONID parameter. Exploiting this vulnerability may allow an...

Soup Sieve CSS Selector XSS

The vulnerability in the src/soupsieve/cssparser.py script of the Soup Sieve CSS selector library is related to an uncontrolled resource consumption when processing the IDENTIFIER parameter. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected...

Traccar GPS Disclosure

The vulnerability of the Traccar GPS system’s application programming interface is related to the lack of measures taken to protect the SQL query structure when processing an HTTP DELETE /api/permissions request. Exploiting this vulnerability can allow a remote attacker to disclose sensitive...

VPN NetworkManager-l2tp Plugin Code Execution

The vulnerability of the writeconfigoption function in the VPN NetworkManager-l2tp plugin is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...