The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of protection for operational data, allows a violator to gain unauthorized access to protected information.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ConnectedComponentsImage() function in the ImageMagick console graphics editor allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ConnectedComponentsImage function in the console-based image editing tool ImageMagick is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of Google Chrome’s FileSystem component, which allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s FileSystem component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Unbound DNS server, related to insufficient validation of input data and improper implementation of functions, allows a hacker to trigger a service failure.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the SAFE_FOR_TEMPLATES() function in the JavaScript library for safe cleaning and protection of HTML code by DOMPurify, allowing attackers to execute arbitrary code.

The vulnerability of the SAFEFORTEMPLATES function in the JavaScript library for safe cleaning and protection of DOMPurify’s HTML code is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of GitLab Workhorse’s HTTP request handler on the git-based software platform, which is used for collaborative code development in GitLab CE/EE, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of GitLab Workhorse’s HTTP request handler, a software platform based on git for collaborative code development in GitLab CE/EE, relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint, related to integer overflow, allows attackers to disclose sensitive information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Windows App Store application store for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows App Store application store for Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Pillow image processing library, related to integer overflow, allows an attacker to cause a service failure.

The vulnerability of the Pillow image processing library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Unbound DNS server, related to improper blocking of resources, allows a hacker to trigger a service failure.

The vulnerability of the Unbound DNS server is related to improper blocking of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the lz4-java data compression library, related to the disclosure of information during data transmission, allows attackers to disclose protected information.

The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the Unbound DNS server, related to the computational complexity, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to the computational complexity of the algorithms involved. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, is related to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the s:stepmatch() function in the Vim text editor, which allows a hacker to execute arbitrary code.

The vulnerability of the s:stepmatch function in the Vim text editor is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the YAML syntax analysis and parsing library js-yaml lies in the uncontrolled modification of object prototype attributes, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the YAML parsing library js-yaml is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the G3413CTRBlockCipher file in the Java Bouncy Castle cryptographic library allows a hacker to disclose protected information.

The vulnerability of the G3413CTRBlockCipher file in the Java Bouncy Castle cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library allows a hacker to bypass existing security mechanisms.

The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library is related to the use of the outdated cryptographic algorithm SHA-1. Exploiting this vulnerability allows a remote attacker to bypass existing security measures...

The vulnerability of the valueOf() function in the JavaScript library for generating unique string identifiers called nanoids allows a attacker to expose protected information.

The vulnerability of the valueOf function in the JavaScript library for generating unique string identifiers called nanoids is related to incorrect data type conversion. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by this mechanism...

The vulnerability of the qs.stringify() function in the string query analysis and transformation library allows a attacker to cause a service failure.

The vulnerability of the qs.stringify function in the string query analysis and conversion library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the library for serializing JavaScript objects into a string format, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the library for serializing JavaScript objects into a string format is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the PostCSS cascade style sheet transformation library’s instrumented library arises from the lack of protection for website structure. This allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the PostCSS cascade style sheet transformation library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the amd_isp_dw_i2c_plat_probe() function in the drivers/i2c/busses/i2c-designware-amdisp.c driver for the I2C hardware interface of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdispdwi2cplatprobe function in the drivers/i2c/busses/i2c-designware-amdisp.c driver for the I2C hardware interface of the Linux operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allo...

The vulnerability of the dwc2_hsotg_udc_stop() function in the drivers/usb/dwc2/gadget.c file of the Linux operating system’s device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dwc2hsotgudcstop function in the drivers/usb/dwc2/gadget.c file of the Linux device driver framework relates to the unlocking of a locked resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the DEFINE_IDA() function in the drivers/auxdisplay/line-display.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the DEFINEIDA function in the drivers/auxdisplay/line-display.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Portainer container management platform, related to the improper implementation of authentication algorithms, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.

The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to writing outside the buffer, allows a intruder to cause a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the bcprov cryptographic library for the Java platform, Bouncy Castle, allows attackers to disclose protected information.

The vulnerability of the bcprov cryptographic library for the Java platform, Bouncy Castle, is related to the failure to take measures to neutralize special elements in LDAP requests. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

The vulnerability of the userOverridesAsString method in the JDBC driver library allows a hacker to execute arbitrary code.

The vulnerability of the userOverridesAsString method in the JDBC driver handling library in c3p0 is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created Java serializable objects and instances of...

The vulnerability of the YAML syntax analysis library lies in its uncontrolled recursion, which allows attackers to trigger a service failure.

The vulnerability of the YAML syntax analysis library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the th1520_aon_power_update() function in the drivers/firmware/thead module, located in the Linux kernel-based firmware, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the th1520aonpowerupdate function in the drivers/firmware/thead module, within the th1520-aon.c driver for Linux kernel patches, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

The vulnerability of the intel_pmuHW_config() function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the intelpmuHWconfig function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the buildid_show() function in the drivers/xen/privcmd.c file of the Linux kernel device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildidshow function in the drivers/xen/privcmd.c module of the Linux kernel device driver library is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the bond_header_parse() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bondheaderparse function in the Linux operating system’s kernel is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the ucsi_notify_common() function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ucsinotifycommon function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability could allow an...

The vulnerability of the __cdns3_gadget_init() function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdns3gadgetinit function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to an incorrect definition of internal states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the cpsw_ndo_set_rx_mode_work() function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver from Texas Instruments’ Linux kernel, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cpswndosetrxmodework function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver for Texas Instruments’ Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the `dev_energymodel_nl_get_perf_domains_doit()` function in the kernel/power/em_netlink.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the devenergymodelnlgetperfdomainsdoit function in the kernel/power/emnetlink.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the atmio16d_attach() function in the drivers/comedi/drivers/ni_atmio16d.c module allows a remote attacker to cause a service failure for Linux operating system device drivers.

The vulnerability of the atmio16dattach function in the drivers/comedi/drivers/niatmio16d.c module relates to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the ulpi_register_interface() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the API for reporting testing results of CI/CD pipelines is a problem with the Pipeline Test Report API software platform based on Git. This API allows attackers to compromise the confidentiality of protected information.

The vulnerability of the API reports for testing CI/CD pipelines is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of the btree.c module in the SQLite database management system allows a hacker to disclose sensitive information or cause service failures by using a specially created db file.

The vulnerability of the btree.c module in the SQLite database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause a service failure by using a specially created db file...

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Downloads component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WebRTC component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC component in Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Password component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Password component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Sqlalchemy mako Python template library relates to incorrect path name restrictions for restricted access directories, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Unbound DNS server, related to access to an uninitialized pointer, allows a hacker to cause a service failure.

The vulnerability of the Unbound DNS server relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...