lib/dom.js Processing Instruction Data Compromise

The vulnerability of the Document.createProcessingInstruction method in the lib/dom.js module, which is part of the XML document access and manipulation mechanism implemented by XMLDOM, is related to errors in processing XML requests. Exploiting this vulnerability could allow an attacker to...

LibreNMS Network Monitoring XSS

The vulnerability of the LibreNMS network monitoring system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS and increase their privileges...

lib/sax.js XML DOM DoS

The vulnerability of the lib/sax.js file, which is part of the XML document access and management module XMLDOM, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

lib/grammar.js reg() Bypass Security

The vulnerability of the reg function in the lib/grammar.js module, which is used for accessing and managing XML documents, is related to errors in processing XML requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

led-class Heap Buffer Overflow DoS

The vulnerability of the ledget function in the drivers/leds/led-class.c module related to Linux LED support in the Linux kernel is associated with errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

i915_perf_add_config_ioctl Heap Buffer Overflow DoS

The vulnerability of the i915perfaddconfigioctl function in the drivers/gpu/drm/i915/i915perf.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacke...

Linux block/genhd.c Kernel Block DoS

The vulnerability of the diskrelease function in the block/genhd.c module related to Linux’s kernel-level block support involves the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

D-Link DIR-825M Firmware Code Execution

The vulnerability of the sub41802C function in the /boafrm/formLtefotaUpgradeFibocom file of the LTE Module Firmware Upgrade component of the D-Link DIR-825M router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability coul...

Tenda AC1206 Full Control

The vulnerability of function R7WebsSecurityHandler in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device for routers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Linux kernel voltage regulator driver Heap Buffer Overflow DoS

The vulnerability of the regulatorresolvesupply function in the drivers/regulator/core.c file of the Linux kernel’s voltage and current regulators driver module is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

WordPress pingback SSRF

The vulnerability of the pingback.ping method in the WordPress content management system is related to synchronization errors when using a shared resource “Race Situation”. This occurs due to improper validation of requests on the server side. Exploiting this vulnerability allows an attacker to...

Business Connectivity Services Framework Code Execution

The vulnerability of the Business Connectivity Services BCS framework in Microsoft SharePoint Server and SharePoint Enterprise Server stems from the insecure creation of .NET types through insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary...

Linux TPM-core Device Driver Heap Buffer Overflow DoS

The vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module of the Linux TPM-devices driver module is related to improper inter-process communication for critical data deletion. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmapicupdateirr function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86-based Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the checkCondjmpop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux operating systems, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux X86 Platform Driver Heap Buffer Overflow DoS

The vulnerability of the tlmianalyze function in the drivers/platform/x86/think-lmi.c driver for X86 devices in the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failur...

XMLDOM appendElement Function DoS

The vulnerability of the appendElement function in the XML document access and management module XMLDOM is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

virtio_transport_recv_listen Heap Buffer Overflow DoS

The vulnerability of the virtiotransportrecvlisten function in the net/vmwvsock/virtiotransportcommon.c file, which is part of the networking functions in the Linux kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause ...

Linux kernel cgroup dmem buffer overflow DoS

The vulnerability of the dmemcglimitwrite function in the kernel/cgroup/dmem.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux TTY Driver Heap Buffer Overflow DoS

The vulnerability of the ttydriverlookuptty function in the drivers/tty/ttyio.c file of the TTY console driver in the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux arch/loongarch syscall Heap Buffer Overflow DoS

The vulnerability of the dosyscall function in the arch/loongarch/kernel/syscall.c module, which supports the LoongArch architecture of the Linux operating system, is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could...

virtio_vdpa_find_vqs Heap Buffer Overflow DoS

The vulnerability of the virtiovdpafindvqs function in the drivers/virtio/virtiovdpa.c module, which supports the virtio bus in Linux kernels, is related to the absence of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a...

DRI infrastructure driver Heap Buffer Overflow DoS

The vulnerability of the intelhdcpgsccheckstatus function in the drivers/gpu/drm/xe/display/xehdcpgsc.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a servic...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the kvmhvFlushtlb function in the arch/x86/kvm/hyperv.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a service failure...

Containous Traefik StripPrefix Bypass Access

The vulnerability of the intermediate software program StripPrefix of the Containous Traefik reverse proxy server relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions and gain...

Linux blockmq Buffer Overflow DoS

The vulnerability of the blkmqrealloctagsettags function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause...

block/bfq-iosched Heap Buffer Overflow DoS

The vulnerability of the bfqqrequestoverlimit function in the block/bfq-iosched.c module related to Linux’s block-level kernel support involves errors related to division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

Isolated Web Apps Component Compromise Data Compromise

The vulnerability of the “Isolated Web Apps” component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Tenda AC1206 Telnet Full Control

The vulnerability of the TendaTelnet function in the /goform/telnet file of the Web UI component of the Tenda AC1206 networking software lies in the deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain full control over the system remotely...

Google Chrome Edge Data Compromise

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

Extensions Component Confidential Data Access

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Canvas Component DoS

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Views Component DoS

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

DevTools Component Confidential Data Access

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the xesyncentryparse function in the drivers/gpu/drm/xe/xesync.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service...

ImageMagick Memory Leak DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...

OpenSSL CMSdecrypt DoS

The vulnerability of the CMSdecrypt function in the OpenSSL library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Extensions Component DoS

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS# Relative Path Traversal

The vulnerability of open libraries and tools written in C for ROS is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Paint Component Confidential Data Access

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

Linux kernel trace ring buffer Heap Buffer Overflow DoS

The vulnerability of the rbmetavalidateevents function in the kernel/trace/ringbuffer.c module, which supports kernel tracing in Linux operating systems, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux RAID Buffer Overflow DoS

The vulnerability of the raiddisksstore function in the drivers/md/md.c module of the Linux device driver for multiple devices RAID and LVM is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to access protected information or caus...

Skia Graphic Library Confidential Data Access

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

AI assistant Gemini DoS

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created...

AI assistant Gemini Data Compromise

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to the improper implementation of security functions on the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

WebAppInstalls Component Confidential Data Compromise

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to sensitive data and compromise its integrity through a specially crafted HTML page...

Chromoting Remote Administration DoS

The vulnerability of the Chromoting remote administration tool, which is used by browsers such as Google Chrome and Microsoft Edge, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Views Component DoS

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

TOTOLINK A950RG firewall.so SetUrlFilterRules Code Execution

The vulnerability of the setUrlFilterRules interface in the /lib/cstemodules/firewall.so module of the TOTOLINK A950RG router’s microprogramming system is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures remotely...