The vulnerability of the ulpi_register_interface() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the page display mechanism of the software platform based on Git, which is used for collaborative code development in GitLab CE/EE, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the page display mechanism for software-based programming platforms based on Git, which is used for collaborative code development in GitLab CE/EE, is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perfor...

The vulnerability of the API for reporting testing results of CI/CD pipelines is a problem with the Pipeline Test Report API software platform based on Git. This API allows attackers to compromise the confidentiality of protected information.

The vulnerability of the API reports for testing CI/CD pipelines is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of Google Chrome’s Directory service allows a hacker to trigger a service failure.

The vulnerability of the Google Chrome browser’s directory service is related to insufficient control over the resource during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the WebML component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Extensions component of the Google Chrome browser, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Extensions component relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Downloads component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the DataTransfer interface of Google Chrome allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s DataTransfer interface is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of Google Chrome’s Payments component, which allows a violator to trigger a service failure.

The vulnerability of Google Chrome’s Payments component is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the WebRTC component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC component in Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Python library for working with Git Dulwich repositories lies in the incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to writing outside the buffer, allows a intruder to cause a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Python programming language’s pip module arises from incorrect pathname restrictions for directories, allowing attackers to compromise the integrity of protected information.

The vulnerability of the Python programming language’s pip module is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the config_writer() method in the Python library for interacting with Git repositories in GitPython allows a malicious actor to execute arbitrary code.

The vulnerability of the configwriter method in the Python library for interacting with Git repositories in GitPython is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the XmlLayout() function in the Apache Log4j Core library allows attackers to compromise the integrity of the protected information.

The vulnerability of the XmlLayout function in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information from a remote location...

The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library allows a hacker to bypass existing security mechanisms.

The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library is related to the use of the outdated SHA-1 cryptographic algorithm. Exploiting this vulnerability allows a remote attacker to bypass existing security measures...

The vulnerability of the userOverridesAsString method in the JDBC driver library allows a hacker to execute arbitrary code.

The vulnerability of the userOverridesAsString method in the JDBC driver handling library in c3p0 is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created Java serializable objects and instances of...

The vulnerability of the PostCSS cascade style sheet transformation library’s instrumented library arises from the lack of protection for website structure. This allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the PostCSS cascade style sheet transformation library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the YAML syntax analysis library lies in its uncontrolled recursion, which allows attackers to trigger a service failure.

The vulnerability of the YAML syntax analysis library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the bond_header_parse() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bondheaderparse function in the Linux operating system’s kernel is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the intel_pmuHW_config() function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the intelpmuHWconfig function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the ucsi_notify_common() function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ucsinotifycommon function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability could allow an...

The vulnerability of the __cdns3_gadget_init() function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdns3gadgetinit function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to an incorrect definition of internal states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `dev_energymodel_nl_get_perf_domains_doit()` function in the kernel/power/em_netlink.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the devenergymodelnlgetperfdomainsdoit function in the kernel/power/emnetlink.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the btree.c module in the SQLite database management system allows a hacker to disclose sensitive information or cause service failures by using a specially created db file.

The vulnerability of the btree.c module in the SQLite database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause a service failure by using a specially created db file...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Password component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Password component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the mechanism for generating headers of confidential issues in a software platform based on Git for collaborative code development in GitLab CE/EE allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the mechanism for generating headers of confidential issues in a Git-based software platform for collaborative code development on GitLab CE/EE is related to the disclosure of confidential information through metadata. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform allows a malicious actor to alter the configuration of CI/CD processes. This vulnerability enables a hacker to modify the setup of CI/CD workflows.

The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform relates to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow an attacker to remotely alter the CI/CD configuration...

The vulnerability of the configuration processor for protected branches of the Git-based software platform, which allows a hacker to modify the configuration of protected branches.

The vulnerability of the configuration processor for protected branches in the git-based software platform, which is used for collaborative code development in GitLab CE/EE, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the cJSON_Compare() function in the cJSON.c library for working with JSON objects in C language allows a attacker to cause a service denial.

The vulnerability of the cJSONCompare function in the cJSON.c library for working with JSON objects in C language is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the apply_patch() function in the cJSON_Utils.c component of the library for working with JSON objects in C language allows a attacker to compromise data integrity.

The vulnerability of the applypatch function in the cJSONUtils.c component of the C language JSON object handling library is related to an incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability in the web-based authentication interface of the Cisco Secure FMC Software allows a perpetrator to escalate their privileges.

The vulnerability in the web-based authentication interface of the Cisco Secure FMC Software for managing network security devices is related to the use of strictly encrypted login credentials. Exploiting this vulnerability can allow a malicious actor to remotely increase their privileges...

The vulnerability of Google Chrome’s user interface allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WebShare component of the Google Chrome browser, which allows a hacker to trigger a service failure.

The vulnerability of the WebShare component of the Google Chrome browser is related to insufficient resource management during its existence. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of Google Chrome browser’s Blink rendering module allows a hacker to execute arbitrary code.

The vulnerability of the Blink rendering module in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Tab Groups component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Tab Groups component is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the s:NetrwBookHistSave() function in the Vim text editor, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the s:NetrwBookHistSave function in the Vim text editor is related to improper elimination of separators. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the JDBC driver pgjdbc, related to unlimited resource allocation, allows attackers to cause service failures.

The vulnerability of the JDBC driver pgjdbc is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Unbound DNS server, related to excessive resource consumption during the cycle, allows a hacker to cause a service failure.

The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the Python relenv tool for creating reproducible and portable environments is related to insufficient resource control during its existence. This allows a malicious actor to trigger a service failure.

The vulnerability of the Python relenv tool for creating reproducible and portable environments is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the PuTTY encryption protection mechanism lies in its insufficient verification of data authenticity, allowing attackers to execute arbitrary code.

The vulnerability of the PuTTY encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the possibility of introducing or modifying arguments, allowing attackers to execute arbitrary commands.

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the libcaca graphic library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the libcaca graphic library is related to overflow in the buffer in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Geomap panel on the Grafana monitoring and observation platform allows a intruder to execute arbitrary code.

The vulnerability of the Geomap panel of the Grafana monitoring and observation platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their authentication procedures, which allow attackers to bypass existing security mechanisms.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of its authentication procedures. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms remotely...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to reading data outside of the allowed range in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the DOMPurify.sanitize() function in the JavaScript library for safe cleaning and protection of HTML code. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the DOMPurify.sanitize function in the JavaScript library for safe cleaning and protection of HTML code is related to the lack of protective measures for website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript-based Thymeleaf engine arises from the lack of measures taken to neutralize special elements used in the expression language operator, allowing attackers to bypass existing security mechanisms.

The vulnerability of the JavaScript-based Thymeleaf engine is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...

The vulnerability of the tpacket_snd() function in the net/packet/af_packet.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tpacketsnd function in the net/packet/afpacket.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...