Cisco Secure Email Resource Control DoS

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient resource control during their existence. Exploiting these vulnerabilities can allow attackers who operate remotely to cause service failures...

Cisco Secure Email and Web Manager Access Control Bypass

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass existing security mechanisms remotely...

Cisco Secure Email and Web Manager Code Execution

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to insufficient checks for message or data structure correctness. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

PDF Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...

Intel Media SDK Heap Buffer Overflow Privilege Escalation

The vulnerability of the Intel Media SDK library lies in reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

.NET Visual Studio Code Buffer Overflow Privilege Escalation

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

.NET Visual Studio Code Information Disclosure

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Password component Code Execution

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

V8 Script Handler Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

WebAudio Component Code Execution

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Blink Component Code Execution

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge DoS

The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

GFX Component Code Execution

The vulnerability of the GFX web browser components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cisco Secure Firewall Authentication Bypass

The vulnerabilities of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software are related to errors in the certificate validation process. Exploiting these vulnerabilities can allow attackers to...

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cisco Identity Services Engine Unauthorized Access

The vulnerability of the Cisco Identity Services Engine ISE network policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to insufficient protection of registration data. Exploiting this vulnerability could allow a...

Cisco Secure Email and Web Manager Relative Path Handling

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in the handling of relative paths. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

PDF Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...

OpenEXR Image Read Pixels Heap Buffer Overflow DoS

The vulnerability of the Imf::InputFile::readPixels method in software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the occurrence of the operation out of buffer boundaries during data decoding. Exploiting this vulnerability can allow an attacker ...

Jackson-Databind NioPathHelper Arbitrary File Load

The vulnerability of the NioPathHelper.deserialize method in the Jackson-Databind library is related to insecure dynamic class loading. Exploiting this vulnerability could allow an attacker to load arbitrary files...

PDF Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat 2024 relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code, provided that the user open...

OpenEXR unpack_sample_table DeepTiledInputFile readPixelSampleCounts System Failure

The vulnerabilities of the functions unpacksampletable and DeepTiledInputFile::readPixelSampleCounts in software for storing images in OpenEXR format with a wide dynamic range are related to the situation where the operation’s output goes beyond the buffer boundaries during data decoding...

ANGLE Component Code Execution

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Intel Media SDK Heap Buffer Overflow DoS

The vulnerability of the Intel Media SDK library lies in improper restrictions on operations within memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome Bluetooth Code Execution

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

NVIDIA Display Driver DoS

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to insecure initialization. Exploiting this vulnerability can allow an attacker to cause system failures...

Microsoft Windows Defender DoS

The vulnerability of Microsoft Windows Defender operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service interruptions...

lib/setup-sandbox.js lib/bridge.js vm2 Package Manager Data Compromise

The vulnerability in the scripts of lib/setup-sandbox.js and lib/bridge.js in the vm2 package manager NPM is related to the lack of validation for the correctness of incoming requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Oracle Java SE Unauthorized Access

The vulnerability of Oracle Java SE’s scripting components is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

NPM vm2 Arbitrary Command Execution

The vulnerability of the NPM package manager’s vm2 library is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

vm2 Sandbox Prepare Stack Trace

The vulnerability of the defaultSandboxPrepareStackTrace function in the lib/setup-sandbox.js file of the vm2 library, a part of the npm package manager, is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...

SOGo Contact Search Unauthorized Access

The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to a user’s account through specially craft...

SQLite SQLAR Extension DoS

The vulnerability of the sqlarcompress and sqlaruncompress functions in the SQLite database management system’s SQLAR extension involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

NLTK IPIPANCorpusReader CrubadanCorpusReader LinThesaurusCorpusReader Unauthorized Access

The vulnerability of the IPIPANCorpusReader, CrubadanCorpusReader, and LinThesaurusCorpusReader classes in the NLTK library for symbolic and statistical processing of natural language data is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this...

go-yaml Unmarshal DoS

The vulnerability of the Unmarshal function in the go-yaml library for the Go programming language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Electron Shell Open Path

The vulnerability of the shell.openPath function in the Electron application development platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

Oracle Java SE Unauthorized Access

The vulnerability of the components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

vm2 Library VM Component Data Compromise

The vulnerability of the new VM component in the vm2 library of the NPM package manager is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

cupsd Privilege Escalation

The vulnerability of the cupsd server in CUPS printing relates to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

vm2 os dns Module Data Compromise

The vulnerability of the os and dns modules in the vm2 package manager NPM is related to errors in information processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OpenCast etc/security/mh_default_org.xml Unauthorized Access

The vulnerability in the script of etc/security/mhdefaultorg.xml of the application for automatic capture, processing, management, and distribution of Opencast videos is related to improper session management when processing the JSESSIONID parameter. Exploiting this vulnerability may allow an...

Traccar GPS Disclosure

The vulnerability of the Traccar GPS system’s application programming interface is related to the lack of measures taken to protect the SQL query structure when processing an HTTP DELETE /api/permissions request. Exploiting this vulnerability can allow a remote attacker to disclose sensitive...

VPN NetworkManager-l2tp Plugin Code Execution

The vulnerability of the writeconfigoption function in the VPN NetworkManager-l2tp plugin is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

Electron Platform Disclosure Information

The vulnerability of the net.fetch and net.request functions in the software platform for creating Electron applications allows unauthorized access to protected information on the server side. Exploiting this vulnerability can enable an attacker to disclose sensitive data...