VPN NetworkManager-l2tp Plugin Code Execution

The vulnerability of the writeconfigoption function in the VPN NetworkManager-l2tp plugin is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

Electron Platform Disclosure Information

The vulnerability of the net.fetch and net.request functions in the software platform for creating Electron applications allows unauthorized access to protected information on the server side. Exploiting this vulnerability can enable an attacker to disclose sensitive data...

setPermissionCheckHandler Unauthorized Access

The vulnerability of the setPermissionCheckHandler method in the Electron application development software is related to the lack of proper verification of the reliability of the data source. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

vm2 isPathAllowedForModule Unauthorized Access

The vulnerability of the isPathAllowedForModule function in the vm2 library of the NPM package manager is related to an incorrect restriction on path names for directories. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

Oracle Java SE Unauthorized Access

The vulnerability of Oracle Java SE’s scripting components is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

vm2 Library VM NodeVM Compromise

The vulnerability of the VM and NodeVM classes in the vm2 library of the NPM package manager is related to a flaw in the data protection mechanism during the processing of the allowAsync: false parameter. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibili...

vm2 ArrayBuffer SharedArrayBuffer TypedArray

The vulnerability of the ArrayBuffer, SharedArrayBuffer, and TypedArray functions in the vm2 package manager’s NPM library is related to the unlimited distribution of resources when processing the bufferAllocLimit parameter. Exploiting this vulnerability could allow an attacker to compromise the...

NLTK Library Code Execution

The vulnerabilities of the nltk.parse.dependencygraph.dot2img and nltk.translate.api.AlignedSent.reprsvg functions in the NLTK library for symbolic and statistical processing of natural language are related to the use of an insecure search path. Exploiting these vulnerabilities could allow...

Zyxel CGI Code Execution

The vulnerability of the CGI microprogramming interface of Zyxel routers series GS1900 lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted HTTP requests...

Hyper-V Component Code Execution

The vulnerability of the Hyper-V component in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vm2 Buffer Overflow DoS

The vulnerabilities of the Buffer.from and Buffer.concat functions in the vm2 library from the NPM package manager are related to information disclosure. Exploiting these vulnerabilities could allow an attacker to gain unauthorized access to protected information and cause service failures...

Tesseract OCR Classify ReadIntTemplates Heap Buffer Overflow DoS

The vulnerability of the GenericVector::read function in the src/ccutil/genericvector.h file of the Tesseract OCR system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Graphics component Windows Code Execution

The vulnerability of the Graphics component in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created RTF format file...

Microsoft Office Memory Execution Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FreeRDP rpc_recvBind_ack_pdu Code Execution

The vulnerability of the rpcrecvBindackpdu function in the libfreerdp/core/gateway/rpcBind.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

libfreerdp glyph_cache_get() Disclosure

The vulnerability of the glyphcacheget function in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service...

FreeRDP codec color function Heap Buffer Overflow DoS

The vulnerability of the freerdpimagecopyfromicondata function in the libfreerdp/codec/color.c file of the RDP client FreeRDP is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

MariaDB SQL Injection

The vulnerability of the mysqlrealescapestring function in the MariaDB database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute SQL injections remotely...

Linux driver Heap Buffer Overflow DoS

The vulnerabilities of the functions cgxlmacwrite and cgxlmacread in the file drivers/net/ethernet/marvell/octeontx2/af/cgx.c of the network controller driver for the Marvell OcteonTX2 AF in the Linux operating system are related to insufficient resource management during its existence. Exploitin...

Authlib OAuth CSRF

The vulnerability of the OAuth authentication component for web applications based on the Starlette library, provided by the Authlib library for OAuth and OpenID Connect servers, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to...

Django UpdateCacheMiddleware cache_page Disclosure

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware and django.views.decorators.cache.cachepage modules in the Django web development framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to disclose sensitive...

golang-x-image DoS

The vulnerability of the golang-x-image package, a programming language, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

MediaWiki Unauthorized Access

The vulnerability of the infoAction.php script used in the MediaWiki hypertext environment involves insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

container management system storagePoolVolumesPost disclosure

The vulnerability of the storagePoolVolumesPost function in the cmd/incusd/storagevolumes.go file of the container management system and the Incus virtual machine manager is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive...

container management system instancesPost disclosure

The vulnerability of the instancesPost function in the cmd/incusd/instancespost.go file of the container management system and the Incus virtual machine manager is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Shell command Code Execution

The vulnerability of the Shell command shell in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vm2 require.external Code Execution

The vulnerability of the require.external component in the vm2 package manager NPM is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

node sqlite VM2 Code Execution

The vulnerability of the node:sqlite component in the vm2 library of the NPM package manager is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

vm2 crypto.setEngine Code Execution

The vulnerability of the crypto.setEngine function in the vm2 package manager’s NPM library is related to improper management of processes. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Tesseract OCR GenericVector read code execution

The vulnerability of the GenericVector::read function in the src/ccutil/genericvector.h file of the Tesseract OCR system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Failover Cluster Code Execution

The vulnerability of the Failover Cluster component for Windows operating systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

MariaDB wsrep_notify_cmd Command Execution

The vulnerability of the wsrepnotifyCmd function in the MariaDB database management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

MariaDB wsrep_sst_receive_address Command Execution

The vulnerability of the wsrepsstreceiveaddress and wsrepsstdonor parameters in the sql/wsrepsst.cc file of the MariaDB database management system is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability may allow an attacker operating remotely...

OpenSSL invoke_passwd_cb() function Heap Buffer Overflow

The vulnerability of the invokepasswdcb function in the openssl/src/util.rs module of the OpenSSL library is related to the execution of operations outside the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...

Linux kernel TUN/TAP Buffer Overflow DoS

The vulnerability of the tungetuser and tunxdpone functions in the drivers/net/tun.c file of the Linux virtual network interface TUN/TAP driver leads to a lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability can allow an attacker to cause...

Libssh2 sftp_symlink() Disclosure DoS

The vulnerability of the sftpsymlink function in the src/sftp.c component of the SSH2 protocol implementation in the Libssh2 library is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitiv...

mtk_vpu Heap Buffer Overflow DoS

The vulnerability of the vpuloadfirmware function in the drivers/media/platform/mediatek/vpu/mtkvpu.c file of the MediaTek VPU video processor driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system...

FortiSandbox Threat Detection Data Cleaning Unauthorized Access Command Execution

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or execu...

FortiOS Certificate Authenticity Verification

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

OpenSSL cipher_update_inplace Data Compromise

The vulnerability of the cipherupdateinplace function in the openssl/src/cipherctx.rs module of the OpenSSL library is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected...

Ansible-content CollectionRemote Plugin Token Storage Mechanism Unauthorized Access

The vulnerability of the CollectionRemote mechanism, a plugin for managing Ansible content on the pulpansible platform, which manages repositories for Pulp, relates to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...

Authlib OAuth Redirect

The vulnerability of the Authlib OAuth 2.0 library server for OAuth and OpenID Connect servers involves redirecting the URL to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...

MediaWiki Authentication Manipulation

The vulnerabilities of the scripts including/api/apiChangeAuthenticationData.php, including/api/apiLinkAccount.php, including/api/apiRemoveAuthenticationData.php, including/specials/specialLinkAccounts.php, and including/specials/specialUnlinkAccounts.php, related to the MediaWiki hypertext...

container management system createDependentVolumesFromBackup function Heap Buffer Overflow DoS

The vulnerability of the createDependentVolumesFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager Incus is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigg...

Authlib OpenID Implicit Grant Hybrid Grant Redirection

The vulnerability of the OpenIDImplicitGrant and OpenIDHybridGrant endpoints of the Authlib library for OAuth and OpenID Connect servers involves redirecting users to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...

D-Link DIR-882 CGI Binary Buffer Overflow Disclosure

The vulnerability in the main function of the /HNAP1/dllog.cgi file of the CGI Binary component of the D-Link DIR-882 wireless router software is related to insufficient protection for sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

TOTOLINK A3300R Router Command Execution

The vulnerability of the setUPnPCfg function in TOTOLINK A3300R router microprogramming systems is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Microsoft XPS Document Writer Code Execution

The vulnerability of the Microsoft XPS Document Writer MXDW driver on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

NPM vm2 Information Disclosure

The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

NPM vm2 Code Execution

The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...