The vulnerability of the libexpat XML file analysis library, related to the swapping of the zero pointer, allows an attacker to trigger a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Valkey data structure server, related to reading beyond the buffer in memory, allows attackers to cause service failures.

The vulnerability of the Valkey data structure server is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the package manager for Kubernetes Helm, related to the use of an unprotected alternative channel, allows a attacker to expose protected information.

The vulnerability of the package manager for Kubernetes Helm is related to the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to expose protected information...

The vulnerability of the Azure Resource Manager deployment and management service, as well as the Azure Local software platform, is related to authentication procedures that have flaws. This allows attackers to escalate their privileges.

The vulnerability of the Azure Resource Manager deployment and management service, as well as the Azure Local software platform, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerability of the universal monitoring system Zabbix, related to the provision of data elements for an erroneous session, allows a intruder to increase their privileges.

The vulnerability of the Zabbix universal monitoring system lies in the provision of data elements for erroneous sessions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Zabbix IT-infrastructure monitoring system lies in its inability to neutralize special elements used in the operating system’s command line. This allows attackers to execute arbitrary commands.

The vulnerability of the Zabbix IT-infrastructure monitoring system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the virtual learning environment Moodle, related to the lack of measures to neutralize special elements, allows a violator to execute arbitrary commands.

The vulnerability of the virtual training environment Moodle is related to the lack of measures taken to neutralize special elements within it. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Valkey data structure server, related to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the Valkey data structure server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the container management system and the virtual machine manager Incus, related to errors in the authentication process, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the container management system and the virtual machine manager Incus is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the SVG converter CairoSVG, related to uncontrolled recursion, allows attackers to cause service failures.

The vulnerability of the SVG converter CairoSVG is related to uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Bars Obrazovanie (Alexander) (No. 2 from May 27, 2026 at 13:59:12)

...

The vulnerability of the read_2004_compressed_section() function in the library for processing DWG format files by LibreDWG allows a perpetrator to cause service interruptions.

The vulnerability of the read2004compressedsection function in the library for processing DWG format files by GNU LibreDWG is related to the issue of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Squid proxy server, related to reading beyond the buffer in memory, allows attackers to cause a service failure.

The vulnerability of the Squid proxy server is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the formSDHCP() function in the microprogrammed software of Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formSDHCP function in the microprogrammed software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Zabbix IT-infrastructure monitoring system, related to the lack of protective measures for the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the Zabbix IT-infrastructure monitoring system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the file brut/androlib/res/decoder/ResFileDecoder.java of the Android APK reverse-engineering tool Apktoo,l allows a hacker to write or rewrite any data.

The vulnerability in the brut/androlib/res/decoder/ResFileDecoder.java file of the Apktool tool for reverse-engineering Android APK files is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write or rewrite...

The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Dell BSAFE Crypto-J cryptographic library, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Dell BSAFE Crypto-J cryptographic library is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the TeX Formula Editor component in the virtual learning environment Moodle allows a perpetrator to trigger a service failure.

The vulnerability of the TeX Formula Editor component in the virtual learning environment Moodle is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the network infrastructure for Flannel containers, related to the lack of measures taken at the management level to clean data, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Flannel container’s network infrastructure is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the SAML Endpoint component of the Keycloak identity and access management software allows a attacker to trigger a service denial.

The vulnerability of the SAML Endpoint component of the Keycloak identity and access management software lies in improper syntax validation during input verification. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the lxml_html_clean library in the Python programming language arises from improper encoding or escaping of output data. This allows attackers to perform cross-site scripting (XSS) attacks or phishing attacks, or to modify the user interface.

The vulnerability of the lxmlhtmlclean library in the Python programming language is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows an attacker to perform cross-site scripting XSS attacks or phishing attacks, or to modify the user interface...

The vulnerability of the aiohttp HTTP client, related to the registration of excessive data, allows a hacker to trigger a service failure.

The vulnerability of the aiohttp HTTP client is related to the registration of excessive data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the container management system and the virtual machine manager Incus, related to unlimited resource distribution, allows a hacker to trigger a service failure.

The vulnerability of the container management system and the virtual machine manager Incus is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the container management system and the virtual machine manager Incus, related to the tracking of symbolic links, allows a perpetrator to escalate their privileges.

The vulnerability of the container management system and the virtual machine manager Incus relates to the tracking of symbolic links. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the networking routing implementation software on Unix-like systems is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the decompress_R2004_section() function in the LibreDWG file processing library allows a perpetrator to cause service interruptions.

The vulnerability of the decompressR2004section function in the library for processing DWG format files by LibreDWG is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the formAccept() function in microprogramming software of Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formAccept function in microprogrammed software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the check_password script of the DCE/RPC SAMR server in the Samba networking interaction software package allows a hacker to execute arbitrary code.

The vulnerability of the checkpassword script in the DCE/RPC SAMR server of the Samba networking software package is related to the failure to eliminate special elements during the processing of the parameter %u. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

The vulnerability of the container management system and the Incus virtual machine manager, related to the failure to take measures to neutralize special elements in the template creation mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the container management system and the virtual machine manager Incus is related to the failure to take measures to neutralize special elements in the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Valkey data structure server arises from insufficient neutralization of special elements in queries, allowing attackers to execute arbitrary code.

The vulnerability of the Valkey data structure server is related to insufficient neutralization of special elements in requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript library for cryptography, Jwcrypto, arises from incorrect processing of highly compressed input data, allowing attackers to cause service failures.

The vulnerability of the JavaScript library for cryptography, Jwcrypto, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Python library for working with PDF files, PyPDF, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the decompress_R2004_section() function in the LibreDWG file processing library allows a perpetrator to cause service interruptions.

The vulnerability of the decompressR2004section function in the library for processing DWG format files by LibreDWG is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of authentication mechanisms. This allows attackers to create or modify arbitrary files.

The vulnerability of the XWiki Platform lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to create or modify arbitrary files remotely...

The vulnerability of the plugin for the GLPI system, Mreporting, relates to the lack of security measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the Mreporting plugin for the GLPI system is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Packetbeat network packet analyzer, related to unvalidated array indexing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Network Packetbeat analyzer is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Libarchive archive library, related to integer overflow, allows an attacker to trigger a service failure.

The vulnerability of the Libarchive archive library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the CommuniGate Pro mail server, related to insufficient validation of input data, allows a hacker to gain unauthorized access to confidential information.

The vulnerability of the CommuniGate Pro mail server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to confidential information...

The vulnerability of the formWlanMP() function in the /goform/formWlanMP file of the Edimax BR-6675nD router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the formWlanMP function in the /goform/formWlanMP file of the Edimax BR-6675nD router’s microprogramming system is related to the lack of data cleaning measures at the management level when processing parameters such as ateFunc, ateGain, ateRate, ateChan, ateTxCount,...

The vulnerability of the formUSBStorage() function in the /goform/formUSBStorage file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the formUSBStorage function in the /goform/formUSBStorage file of the Edimax BR-6675nD router’s microprogramming system is related to the lack of data cleaning at the control level when processing the subdir parameter. Exploiting this vulnerability allows an attacker to execu...

The vulnerability of the CInStream::GetCuSize() function in the 7-Zip NTFS archiver driver allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the CInStream::GetCuSize function in the 7-Zip NTFS archiver lies in the writing beyond buffer boundaries to memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the formWanTcpipSetup() function in the /goform/formWanTcpipSetup file of the Edimax BR-6675nD router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formWanTcpipSetup function in the /goform/formWanTcpipSetup file of the Edimax BR-6675nD router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the pppUserName parameter. Exploiting this...

The vulnerability of the formConnectionSetting() function in the /goform/formConnectionSetting file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the formConnectionSetting function in the /goform/formConnectionSetting file of the Edimax BR-6675nD router’s microprogramming software is related to the lack of data cleaning measures at the control level when processing the maxConn and timeOut parameters. Exploiting this...

The vulnerability of the formWlSiteSurvey() function in the /goform/formWlSiteSurvey file of the Edimax BR-6675nD router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formWlSiteSurvey function in the /goform/formWlSiteSurvey file of the Edimax BR-6675nD router’s microprogramming system is related to the issue where the operation’s output goes beyond the buffer in memory when processing the selSSID parameter. Exploiting this vulnerabili...

The vulnerability of the formWlSiteSurvey() function in the /goform/formWlSiteSurvey file of the webs component of the microprogramming software for wireless signal amplifiers from Edimax EW-7438RPn allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWlSiteSurvey function in the /goform/formWlSiteSurvey file of the webs component of the microprogramming software for wireless signal amplifiers like Edimax EW-7438RPn is related to the issue where the operation output goes beyond the buffer in memory when processing...

The vulnerability of the formEZCHNwlanSetup() function in the /goform/formEZCHNwlanSetu file of the Edimax BR-6675nD router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the formEZCHNwlanSetup function in the /goform/formEZCHNwlanSetu file of the Edimax BR-6675nD router microprogramming system is related to the lack of data cleaning measures at the control level when processing the method parameter. Exploiting this vulnerability allows an...

The vulnerability of the learning platform IQ SCHOOL, related to deficiencies in verifying user input data, allows a hacker to obtain hash values of other users’ passwords.

The vulnerability of the learning platform IQ SCHOOL is related to deficiencies in the verification of data entered by users. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain the hash values of other users’ passwords...