Python omni-completion module autoload Code Execution

The vulnerability of the Python omni-completion module’s autoload mechanism, located in the runtime/autoload/python3complete.vim file, is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Vim omni-completion Code Execution

The vulnerability of the Python omni-completion mechanisms for runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim in the Vim text editor involves the integration of functionality from an unreliable source. Exploiting this vulnerability allows a remote attacker to execute...

GoBGP Edge Gateway Protocol Buffer Overflow DoS

The vulnerability of the decoder handlers for BGP OPEN messages in the GoBGP border gateway module’s pkg/packet/bbg protocol relates to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GoBGP Edge Gateway Buffer Overflow DoS

The vulnerability of the UpdatePathAttrs4ByteAs function in the GoBGP edge gateway protocol’s internal/pkg/table/message.go file is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

RPC Runtime Library Windows Code Execution

The vulnerability of the RPC Runtime Library in Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

HTTP Print Provider Code Execution

The vulnerability of the HTTP Print Provider component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

gf_opus_parse_packet_header() media_tools/av_parsers.c DoS

The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file of the multimedia platform GPAC is related to incorrect numerical calculations when processing values with a comma-separated format. Exploiting this vulnerability could allow an attacker to cause service...

BMP Parser Heap Buffer Overflow DoS

The vulnerability of the ParseBody function in the pkg/packet/bmp/bmp.go file of the BMP Parser component of the GoBGP edge gateway protocol is related to the situation where the output of the operation goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

SOGo Null Pointer DoS

The vulnerability of the Alinto SOPE framework and the SOGo software for collaborative work is related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service failures...

FreeRDP RDP Drift File Access

The vulnerability of the RDPDR IRP RDP-client FreeRDP module is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to read, write, and delete arbitrary files...

FreeRDP RCE

The vulnerability of the CliprdrStreamRead, wfcliprdrserverfilecontentsresponse, and cliprdrreadfilecontentsresponse functions in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Adobe Illustrator Code Execution

The vulnerability of the Adobe Illustrator graphic editor is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

zstd-jni DoS

The vulnerabilities of the functions setDict, setLongMax, and setLevel in the data compression library zstd-jni are related to the possibility of exploiting memory usage after deallocation. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

Open WebUI /oauth/backchannel-logout DoS

The vulnerability of the /oauth/backchannel-logout web interface component in the Open WebUI system is related to asymmetric resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

FreeRDP x509_utils_verify bypass

The vulnerability of the x509utilsverify function in the RDP client FreeRDP is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

Adobe Photoshop Buffer Overflow

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Photoshop Integer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ZstdDictCompress Code Execution

The vulnerability of the ZstdDictCompress component in the zstd-jni data compression library is related to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DDSSQLFilter Component DoS

The vulnerability of the DDSSQLFilter component in the Fast DDS library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Microsoft Malware Protection Engine Unauthorized Access

The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, relates to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...

Adobe Illustrator Auth Bypass RCE

The vulnerability of Adobe Illustrator’s graphic editor is related to deficiencies in the authentication process. Exploiting this vulnerability allows a hacker to execute arbitrary code...

Adobe Illustrator Buffer Overflow

The vulnerability of the Adobe Illustrator graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows iSCSI Target Bypass

The vulnerability of the Windows iSCSI Target service for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

zstd-jni Heap Buffer Overflow DoS

The vulnerability of the Zstd.trainFromBufferDirect function in the zstd-jni data compression library is related to reading beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GitPython Argument Injection Unauthorized Access

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

libheif Heap Buffer Overflow DoS

The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

Linux SCTP DoS

The vulnerability of the SCTP kernel implementation in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Google Chrome V8 Engine Code Execution

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

Adobe Photoshop Buffer Overflow

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

GitPython Actor.name_email_regex() DoS

The vulnerability of the Actor.nameemailregex function in the Python library for interacting with Git repositories in GitPython is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service...

KeePass ReadHeaderField Function DoS

The vulnerability of the ReadHeaderField function in the KeePass password manager is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created KDBX file...

Discovery Server Fast DDS Code Execution

The vulnerability of the Discovery Server component of the Fast DDS library relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

FreeRDP serial_process_irp_device_control DoS

The vulnerability of the serialprocessirpdevicecontrol function in the channels/serial/client/serialmain.c file of the RDP client FreeRDP is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause service failure...

zstd-jni Component DoS

The vulnerability of the ZstdCompressCtx and ZstdDecompressCtx components of the zstd-jni compression library lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

GitPython Code Execution

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

nxp_sar_adc_write_raw Heap Buffer Overflow DoS

The vulnerability of the nxpsaradcwriteraw function in the iio/adc/nxp-sar-adc.c module of the drivers for various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the cypressreadintcallback function in the drivers/usb/serial/cypressm8.c file of the Linux device driver for USB devices is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failu...

itg3200_read_all_channels() Function Unauthorized Access

The vulnerability of the itg3200readallchannels function in the drivers/iio/gyro/itg3200buffer.c file of various types of embedded sensors in the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, acting remotely,...

Linux touchscreen driver Heap Buffer Overflow

The vulnerability of the nexioreaddata function in the drivers/input/touchscreen/usbtouchscreen.c module of the touchscreen driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

amdgpu_gem_op_ioctl Heap Buffer Overflow DoS

The vulnerability of the amdgpugemopioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpugem.c driver for AMD GPU cores in the Linux operating system’s Direct Rendering Infrastructure DRI is related to the failure to release resources after their useful life has ended. Exploiting this...

I2C Driver Heap Buffer Overflow DoS

The vulnerability of the i801access function in the drivers/i2c/busses/i2c-i801.c module of the I2C driver for the Linux operating system is related to premature release of resources during its operation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux TLS Protocol Buffer Overflow

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

BPF Interpreter Heap Buffer Overflow DoS

The vulnerability of the BTFID function in the kernel/bpf/bpflsm.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to compromise the...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the drmgpusvmscanmm function in the drivers/gpu/drm/drmgpusvm.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system relates to the unlocking of unlocked resources. Exploiting this vulnerability could allow an attacker to compromise the...

mac80211 Stack Use-After-Free

The vulnerability of the ieee80211mlepcs function in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...

ARM virtualization subsystem Kernel Buffer Overflow DoS

The vulnerability of the vgicitsrestoredte function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM 64-bit kernel-based Linux operating system involves the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access...

Linux Kernel sev Function Heap Buffer Overflow DoS

The vulnerability of the snpbeginpsc function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

Linux Kernel BPF __cgroup_bpf_run_filter_sysctl Buffer Overflow DoS

The vulnerability of the cgroupbpfrunfiltersysctl function in the kernel/bpf/cgroup.c module, which supports the BPF interpreter for Linux kernels, is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

CADRA Node.js zlib DoS

The vulnerability of the zlib module in CADRA’s Node.js software lies in insufficient validation of input data during the processing of the windowBits parameter. Exploiting this vulnerability could allow an attacker to cause service failures...