98239 matches found
NLTK Bypass Arbitrary File Read Write
The vulnerability of the application programming interface of the Natural Language Processing library NLTK is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms and gain read-write access ...
NLTK Downloader Bypass Write Delete
The vulnerability of the nltk.downloader.Downloader.download and nltk.downloader.Downloader.incrdownload components of the NLTK library, which are used for symbolic and statistical processing of natural language, is related to an incorrect definition of symbolic references before accessing files...
Wazuh update_master_files_in_worker RCE
The vulnerability of the updatemasterfilesinworker function on the platform for security monitoring and threat detection by Wazuh is related to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to root an...
gix-pack apply Heap Overflow DoS
The vulnerability of the apply function in the gix-pack library is related to an error in handling exceptional states. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Avast Sandbox Privilege Escalation
The vulnerability of the Avast Sandbox component of the Avast antivirus protection software is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to elevate their privileges to the SYSTEM level...
Cross Device Service Privilege Escalation
The vulnerability of the Cross Device Service for Windows operating systems is related to deficiencies in access control when processing the enabled parameter of the SeImpersonatePrivilege service token, as a result of loading the malicious CrossDeviceStreaming.Source.dll library. Exploiting this...
Device Health Attestation Code Execution
The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker who operates remotely to execute arbitrary code...
Windows Installer Privilege Escalation
The vulnerability of Windows operating system installers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Telephony Service Privilege Escalation
The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
Device Health Attestation Code Execution
The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
iSCSI Target Service Code Execution
The vulnerability of the iSCSI Target Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Remote Access API Privilege Escalation
The vulnerability of the Remote Access API interface for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows DNS Code Execution
The vulnerability of DNS servers on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...
Windows DNS Code Execution
The vulnerability of DNS servers for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Active Directory Certificate Services Code Execution
The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and usage of certificates on Windows operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Windows DNS Code Execution
The vulnerability of DNS servers on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...
Reliable Multicast Transport Driver Code Execution
The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Desktop Window Managers Privilege Escalation
The vulnerability of desktop window managers in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
GPU components DoS
The vulnerability of the GPU components in Google Chrome and Microsoft Edge browsers is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Viz Component DoS
The vulnerability of the Viz component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
Dawn Component DoS
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...
WebRTC DoS
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...
Actor Component DoS
The vulnerability of the Actor component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
AI assistant Gemini DoS
The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Codecs Component DoS
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
DevTools DoS
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
InterestGroups Component DoS
The vulnerability of the InterestGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Extensions Component DoS
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Dawn Component Confidential Data Access
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
WebRTC DoS
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
Dawn Component DoS
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
WebXR interfaces DoS
The vulnerability of the WebXR interfaces of Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Animation Component Confidential Data Access
The vulnerability of the Animation component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Skia Graphic Library Confidential Data Access
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
TabStrip Component DoS
The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
Media component Confidential Data Access
The vulnerability of the Media component in Google Chrome and Microsoft Edge browsers is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...
Extensions Component Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...
WebAppInstalls Component Confidential Data Access
The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Codecs Component DoS
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...
Extensions Component Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Blink DoS
The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Dawn Component Confidential Data Access
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...