Nodemailer SSRF

The vulnerability of the MailComposer.compile method in the Nodemailer email sending library is related to improper external manipulation of file names or file paths. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information and perform an SSRF attack...

vc4_free_hang_state Heap Buffer Overflow DoS

The vulnerability of the vc4freehangstate function in the drivers/gpu/drm/vc4/vc4gem.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability can allow an attacker to cause a system...

Linux ipc_idr_alloc() Privilege Escalation

The vulnerability of the ipcidralloc function in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to enhance their privileges...

JFrog Artifactory Path Traversal

The vulnerability of the JFrog Artifactory repository management platform is related to deficiencies in path name restrictions for restricted catalogs. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...

Geolocation Component Data Compromise

The vulnerability of the Geolocation component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...

Navigation Component DoS

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

Password component DoS

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Permissions control element Data Compromise

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

WebXR interfaces Compromise Data Compromise

The vulnerability of the WebXR interfaces of Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially crafted HTML page...

SVG Component Confidential Data Access

The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

SanitizerAPI Component Data Compromise

The vulnerability of the SanitizerAPI component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

StorageAccessAPI Confidential Data Access

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

File Input Component Compromise Data Compromise

The vulnerability of the File Input component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...

NLTK validate_network_url SSRF

The vulnerability of the validatenetworkurl function in the NLTK library for symbolic and statistical processing related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

SPIP analyse_resultat_skel() Code Execution

The vulnerability of the analyseresultatskel function in the SPIP content management system is related to improper handling of code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

NetworkCache Confidential Data Access

The vulnerability of the NetworkCache component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Serial Component DoS

The vulnerability of the Serial component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

Chromecast Web Confidential Data Access

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Network Component Compromise Data Compromise

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Related-Website-Sets Component Confidential Data Access

The vulnerability of the Related-Website-Sets component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to access confidential data through a specially created HTML page...

Views Component Confidential Data Access

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

Chromecast Web Confidential Data Access

The vulnerability of Chromecast web browsers Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

WebRTC DoS

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

DevTools Component Confidential Data Access

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

CSS components Confidential Data Access

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to improper protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

Component DoS

The vulnerability of the Browser component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

WebAppInstalls Component DoS

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PDFium DoS

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created PDF file...

WebProtect DoS

The vulnerability of the WebProtect components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CSS Component Confidential Data Compromise

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

AI components DoS

The vulnerability of AI-powered web browsers Google Chrome and Microsoft Edge relates to improper resource relocation between different areas of the system. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Tint Component DoS

The vulnerability of the Tint component in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

Dawn Component DoS

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Dawn Component DoS

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Tint Component DoS

The vulnerability of the Tint component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to operations that occur outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Payments Component DoS

The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Edge DoS

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML pag...

Navigation Component Google Chrome Microsoft Edge Confidential Data Access

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

D-Link DNS-345 Network Storage Software Command Execution

The vulnerability in the cgi/backupmgr/iscsimgr.cgi script of the D-Link DNS-345 and DNS-340L network storage software is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely and gai...

Views Component Code Execution

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created HTML page from a remote location...

Media Component Bypass Security

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to escape from the sandbox environment by using a specially created HTML page...

Python CPython Morsel JS Output Code Execution

The vulnerability of the http.cookies.Morsel.jsOutput method in the Python programming language interpreter CPython is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a remote attacker to exploit the system. source-iocs-preserved...

Linux kernel PHY driver Heap Buffer Overflow DoS

The vulnerability of the imx8mqusbphyprobe function in the driver/phy/freescale/phy-fsl-imx8mq-usb.c file of the Linux kernel’s PHY driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

elFinder Volume Driver Code Execution

The vulnerability of the checkExtractItems method in the elFinderVolumeDriver.class.php file of the elFinder file manager allows for unlimited downloading of malicious files. Exploiting this vulnerability could enable a remote attacker to execute arbitrary code...