The vulnerability of the Model.load_model() function in the Keras library allows a hacker to execute arbitrary code.

The vulnerability of the Model.loadmodel function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the PathMaterializer class in the ZenML machine learning pipeline creation framework allows a hacker to execute arbitrary code.

The vulnerability of the PathMaterializer class in the ZenML machine learning pipeline creation framework is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the WebML component in Google Chrome and Microsoft Edge browsers on macOS operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebML component in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker, acting remotely, to gain unauthorized access to protected information...

The vulnerability of the formSetNetCheckTools() function in the Tenda W15E router’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the formSetNetCheckTools function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the hostname parameter. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the software for deploying and executing AI models with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) involves uncontrolled memory consumption, which allows a malicious actor to cause service failures.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to uncontrolled memory consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Ollama’s system for running and managing large language models lies in the fact that code is loaded without any checks for its integrity, allowing attackers to execute arbitrary code.

The vulnerability of the Ollama system for running and managing large language models is related to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows a hacker to trigger a service failure

The vulnerability of the HTTP.sys driver on Windows operating systems is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the “Universal Import” module, due to insufficient validation of requests on the server side, allows attackers to execute SSRF attacks.

The vulnerability of the “Universal Import” module is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

The vulnerability of the nft_map_catchall_activate() function in the nf_tables component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nftmapcatchallactivate function in the nftables component of the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on macOS operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the formAddWewifiWhiteUser() function in the Tenda W15E router software allows a hacker to induce a service failure.

The vulnerability of the formAddWewifiWhiteUser function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wewifiWhiteUserInfo parameter. Exploiting this vulnerability could allow a remote attacker t...

The vulnerability in the built-in reverse proxy server of the Go programming language allows a hacker to perform an SSRF attack.

The vulnerability of the built-in reverse proxy server in the Go programming language is related to insufficient checking of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

The vulnerability of the Webview API in the Visual Studio Code editor allows attackers to replace data and perform cross-site scripting (XSS) attacks.

The vulnerability of the Webview API of the Visual Studio Code editor is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a remote attacker to replace data and perform cross-site scripting attacks...

The vulnerability in the debugging function of the CPython interpreter allows attackers to circumvent security restrictions.

The vulnerability of the debugging function in the CPython interpreter relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers on Android operating systems allows attackers to bypass security restrictions.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers on Android operating systems is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) relates to synchronization errors when using a shared resource. This vulnerability allows a hacker to bypass existing security mechanisms and execute arbitrary code.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms and execute arbitrary code...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the sub_41CF20() function in the /boafrm/formUSSDSetup file of the D-Link DWR-M920 router’s microprogramming software allows a hacker to inject arbitrary commands.

The vulnerability of the sub41CF20 function in the /boafrm/formUSSDSetup file of the D-Link DWR-M920 router’s microprogramming system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject...

The vulnerability of the RetrieveTokenData() function in the Portainer container management platform allows a hacker to increase their privileges.

The vulnerability of the RetrieveTokenData function in the Portainer container management platform is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the load_data() function in the llama_index/readers/obsidian/base.py file of the ObsidianReader plugin, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the loaddata function in the llamaindex/readers/obsidian/base.py file of the ObsidianReader plugin is related to path traversal. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the openDCIM software for managing data center infrastructure lies in its lack of mechanisms to neutralize certain special elements, allowing a perpetrator to execute arbitrary code.

The vulnerability of the openDCIM software for managing data centers’ infrastructure is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the PraisonAI framework, related to the lack of authentication for critical functions, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PraisonAI framework is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the dlopen() function in the library /usr/lib/oui-httpd/rpc of the microprogramming software for routers GL.iNet GL-MT3000 allows a attacker to execute arbitrary commands.

The vulnerability of the dlopen function in the library /usr/lib/oui-httpd/rpc of the microprogramming software for routers GL.iNet GL-MT3000 is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

The vulnerability of the sub_412DA0() function in the /boafrm/formIMEISetup file of the D-Link DWR-M920 router’s microprogramming software allows a intruder to inject arbitrary commands.

The vulnerability of the sub412DA0 function in the /boafrm/formIMEISetup file of the D-Link DWR-M920 router’s microprogramming system is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow a malicious actor to inject arbitrary...

Уязвимость компонента Payments браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю подменить пользовательский интерфейс

Уязвимость компонента Payments браузеров Google Chrome и Microsoft Edge связана с ошибками представления информации пользовательским интерфейсом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, подменить пользовательский интерфейс...

The vulnerability of the AIDE intrusion detection system, related to pointer assignment errors, allows a intruder to trigger a service failure.

The vulnerability of the AIDE intrusion detection system is related to errors in pointer assignment. Exploiting this vulnerability could allow an intruder to trigger a service failure...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of the CONTENT_LENGTH component in the /cgi-bin/upload.cgi file of the Wi-Fi signal booster software WINSTAR WN572HP3 allows a perpetrator to execute arbitrary code.

The vulnerability of the CONTENTLENGTH component in the /cgi-bin/upload.cgi file of the Wi-Fi signal booster software WINSTAR WN572HP3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the formatting function of the SQL parser for Python, Sqlparse, allows a hacker to cause a service failure.

The vulnerability of the formatting function of the SQL parser for Python, Sqlparse, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of QStar Archive Solutions’ software for working with archives lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the software for working with QStar Archive Solutions is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability affects the implementations of the Internet Key Exchange (IKEv1) protocol in software-based remote access solutions such as Check Point Remote Access VPN, Check Point Mobile Access/SSL VPN, and the network interface layer of Check Point Spark. This vulnerability allows attackers to circumvent existing security restrictions and establish a VPN connection.

The vulnerability of the Internet Key Exchange IKEv1 protocol implementation in Check Point Remote Access VPN, Check Point Mobile Access/SSL VPN, and Check Point Spark network gateways is related to authentication procedures’ deficiencies. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the OPNsense operating system, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the OPNsense operating system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Configuration Handler component in the /upload.cgi file of the BlackVue Dashcam 590X software allows a violator to disclose protected information.

The vulnerability of the Configuration Handler component in the /upload.cgi file of the BlackVue Dashcam 590X microprogramming system is related to access control errors. Exploiting this vulnerability could allow an intruder to disclose protected information...

The vulnerability of the administrative interface of the Java Lucee virtual machine allows a perpetrator to execute arbitrary code.

The vulnerability of the administrative interface of the Java Lucee virtual machine’s scripting language is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Keycloak’s client authentication mechanism in the UDS Identity Config configuration package allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the client authentication mechanism in the UDS Identity Config configuration package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

The vulnerability of the filestring() function in the nltk.util module of the NLTK natural language processing and statistics library allows attackers to read arbitrary files.

The vulnerability of the filestring function in the nltk.util module of the NLTK natural language processing and statistics library is related to an incorrect path limitation for the directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

The vulnerability of the ExtensionValue getData() function in the MessagePack NodeJS/JavaScript msgpackr implementation allows a hacker to cause a service failure.

The vulnerability of the ExtensionValue getData implementation in MessagePack NodeJS/JavaScript msgpackr is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of the “GEO: Categories and search for lists and business processes” module of the website content management system (CMS) 1C-Bitrix: Website management related to the failure to protect the SQL query structure, allowing attackers to execute arbitrary code

Vulnerability of the “GEO: Categories and search for lists and business processes” module of the website content management system CMS 1C-Bitrix: Website management involves failing to protect the SQL query structure. Exploiting this vulnerability may allow a malicious actor to execute arbitrary...

The vulnerability of the IPv6 packet parser in the Inspect.sys driver of the Comodo Internet Security comprehensive information protection tool allows a hacker to cause a service failure.

The vulnerability of the IPv6 packet parser in the Inspect.sys driver of the Comodo Internet Security comprehensive information protection tool is related to a significant loss of importance. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the OpenVPN Client Import Workflow component of the GL.iNet GL-MT3000 router microsystem allows a intruder to inject arbitrary commands.

The vulnerability of the OpenVPN Client Import Workflow component of the GL.iNet GL-MT3000 router microsystem lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

The vulnerability of the FUN_0042e200() function in the /cgi-bin/glc file of the GL.iNet GL-MT3000 router’s microprogramming software allows a intruder to inject arbitrary commands.

The vulnerability of the FUN0042e200 function in the /cgi-bin/glc module of the GL.iNet GL-MT3000 router’s microprogramming system is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to inject arbitrary...

The vulnerability of the snprintf() function in the /cgi-bin/glc file of the GL.iNet GL-MT3000 router’s microprogramming system allows a hacker to inject arbitrary commands.

The vulnerability of the snprintf function in the /cgi-bin/glc file of the GL.iNet GL-MT3000 router’s microprogramming system is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

The vulnerability of the npm library eslint-config-prettier lies in the presence of undeclared features, which allows a malicious actor to execute arbitrary code.

The vulnerability of the npm library eslint-config-prettier is related to the presence of undeclared features. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the openDCIM software for managing data processing infrastructure lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the openDCIM software for managing data infrastructure is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Уязвимость компонента Media браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость компонента Media браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

The vulnerability of tools for storing and delivering content within containers arises from deficiencies in authentication mechanisms, allowing unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the tools for storing and delivering content within containers like Distribution is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FileBrowser Quantum file manager, related to incorrect restrictions on the path name of the restricted directory, allows a hacker to delete any files from the system.

The vulnerability of the FileBrowser Quantum file manager is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a remote attacker to delete any files from the system...

Уязвимость браузеров Google Chrome и Microsoft Edge, связанная с ошибкой подтверждения источника данных, позволяющая нарушителю обойти ограничения безопасности

Уязвимость браузеров Google Chrome и Microsoft Edge связана с ошибкой подтверждения источника данных при обработке DOM-объектов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти ограничения безопасности...

The vulnerability of the openDCIM software for managing data centers’ infrastructure lies in the lack of authentication procedures, which allows unauthorized users to gain access to protected information.

The vulnerability of the openDCIM software for managing data infrastructure is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...