The vulnerability of the AuthZ plugin of the container isolation system creation software Moby allows a hacker to increase their privileges.

The vulnerability of the AuthZ plugin of the container isolation system Moby allows for bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can enable a hacker to gain increased privileges...

The vulnerability of the CHandler::GetSecurity() function, a handler for WIM archives of the 7-Zip archive creator, allows a perpetrator to cause a service failure or disclose confidential information.

The vulnerability of the CHandler::GetSecurity function, a handler for WIM archives of the 7-Zip archive tool, is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause service failures or disclose confidential information...

The vulnerability of the `match_char` function in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the matchchar function in the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the sub_41C8E8() function in D-Link DWR-M920 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the sub41C8E8 function in D-Link DWR-M920 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the actionvalue parameter. Exploiting this vulnerability can allow a remote attacker to execute arbitrary cod...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the contact search component in the SOGo software for collaborative work allows a hacker to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain unauthorized access to protected...

The vulnerability of the Parse function in the UDF format file archiver 7-Zip allows attackers to exploit it to disclose protected information.

The vulnerability of the Parse function in the UDF format file processing tool of the 7-Zip archive manager is related to reading data beyond the allowed range of memory. Exploiting this vulnerability allows a remote attacker to disclose the protected information...

The vulnerability of the apparmor component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the apparmor component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the aa_replace_profiles function in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the aareplaceprofiles function in the Linux operating system’s kernel is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows a hacker to trigger memory corruption.

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to cause memory corruption...

The vulnerability of the ReadBlock function in the SquashFS file processor and 7-Zip archive creator allows a hacker to disclose confidential information.

The vulnerability of the ReadBlock function in the SquashFS file compressor and 7-Zip archive creator relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

The vulnerability of the apparmor component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Web application network firewall library OWASP Coraza WAF lies in the use of a name with an incorrect reference. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Web application firewall library OWASP Coraza WAF is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the r2cmd_str() function in the radare2-mcp server allows a hacker to execute arbitrary code.

The vulnerability of the r2cmdstr function in the radare2-mcp server is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the Mattermost instant messaging application, related to the manipulation of cross-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of the Mattermost instant messaging application is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to perform a CSRF attack remotely...

The vulnerability of the emac_dispatch_skb_zc() function in the network interface driver icssg-prueth of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the emacdispatchskbzc function in the network interface driver icssg-prueth of the Linux operating system is related to incorrect initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Уязвимость интерфейса WebCodecs браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость интерфейса WebCodecs браузеров Google Chrome и Microsoft Edge связана с ошибками при инициализации переменных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

Уязвимость технологии WebRTC браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость технологии WebRTC браузеров Google Chrome и Microsoft Edge связана с доступом к ресурсу через несовместимые типы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

The vulnerability of the WebDialer service in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) allows a attacker to perform an SSRF attack.

The vulnerability of the WebDialer service in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a maliciou...

The vulnerability of the ogs_sbi_xact_add() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogssbixactadd function, a component of the NR/LTE Open5GS mobile network creation and management tool, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the handle_amf_info() function in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.

The vulnerability of the handleamfinfo function, a component of the NR/LTE Open5GS mobile network creation and management tool, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the add_adev() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the addadev function in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Уязвимость компонента Codecs браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость компонента Codecs браузеров Google Chrome и Microsoft Edge связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

The vulnerability in the net/bluetooth/mgmt.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/bluetooth/mgmt.c module of the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `sco_sock_connect()` function in Linux operating system kernels, which allows a hacker to cause a service failure.

The vulnerability of the scosockconnect function in Linux operating systems is related to a race condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

Уязвимость режима чтения (Reading Mode) браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость режима чтения Reading Mode браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

Уязвимость обработчика JavaScript-сценариев V8 браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость обработчика JavaScript-сценариев V8 браузеров Google Chrome и Microsoft Edge связана с недостаточной защитой служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

Уязвимость компонента Dialog браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю проводить спуфинг-атаки

Уязвимость компонента Dialog браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить спуфинг-атаки...

The vulnerability of the Updater service for Google Chrome and Microsoft Edge allows a hacker to escalate their privileges.

The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges using the malicious file...

Уязвимость компонента WebAudio браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость компонента WebAudio браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

The vulnerability of the Telnet protocol implementation in the cryptographic security tool PuTTY, which allows attackers to perform spoofing attacks

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the ChromeDriver component for Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the ChromeDriver component for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...

Уязвимость компонента Dawn браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость компонента Dawn браузеров Google Chrome и Microsoft Edge связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...

Уязвимость графического процессора браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти защитный механизм песочницы

Уязвимость графического процессора браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти защитный механизм песочницы...

The vulnerability of the FacAtFunction() function in Android mobile devices from Samsung allows a hacker to execute arbitrary commands.

The vulnerability of the FacAtFunction function in Android mobile devices from Samsung is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

The vulnerability of the formStaDrvSetup() function in the /goform/formStaDrvSetup file of the EDIMAX BR-6478AC router’s microprogramming software allows a hacker to inject arbitrary commands.

The vulnerability of the formStaDrvSetup function in the /goform/formStaDrvSetup file of the EDIMAX BR-6478AC router’s microprogramming software is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability could allow a remote attacker ...

Уязвимость реализации протокола SSL (Secure Sockets Layer) браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю проводить спуфинг-атаки

Уязвимость реализации протокола SSL Secure Sockets Layer браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить спуфинг-атаки с помощью специально созданной HTML-страницы...

The vulnerability of the sock_def_readable() function in the Linux operating system’s kernel allows a hacker to trigger a denial-of-service attack.

The vulnerability of the sockdef-readable function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the parser for NF-profiles in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.

The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Уязвимость функции автозаполнения Autofill браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю раскрыть защищаемую информацию

Уязвимость функции автозаполнения Autofill браузеров Google Chrome и Microsoft Edge связана с недостатком в механизме подтверждения источника. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...

The vulnerability of the at_distributor component in Android mobile device operating systems allows a hacker to execute arbitrary commands.

The vulnerability of the atdistributor component in Android mobile devices from Samsung relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the handle_scp_info() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the handlescpinfo function, a tool for creating and managing NR/LTE Open5GS mobile networks, is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the ECDSA algorithm (Elliptic Curve Digital Signature Algorithm) in the PuTTY cryptographic protection tool allows a hacker to induce a service failure.

The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the xfsattr3_node_inactive() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xfsattr3nodeinactive function in the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Уязвимость технологии WebRTC браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимостьтехнологии WebRTC браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

The vulnerability of the Companion component in Google Chrome and Microsoft Edge browsers allows attackers to increase their privileges.

The vulnerability of the Companion browser components in Google Chrome and Microsoft Edge is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the ShortcutService system service in Android mobile devices from Samsung allows a perpetrator to re-record or create arbitrary files.

The vulnerability of the ShortcutService system service in Android mobile devices from Samsung is related to an incorrect path limitation for accessing the directory. Exploiting this vulnerability could allow a attacker to re-record or create arbitrary files...

The vulnerability of the parser for NF-profiles in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.

The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Updater service for Google Chrome and Microsoft Edge allows a hacker to escalate their privileges.

The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...