Util-linux Use-After-Free DoS

The vulnerability of the Util-linux command-line utility suite relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Nghttp2 Heap Buffer Overflow DoS

The vulnerability of the lib/nghttp2session.c component in the HTTP/2 implementation of Nghttp2 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux Component DoS

The vulnerability of the drivers/net/ethernet/cadence/macbmain.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

vorbis-tools Remote DoS

The vulnerability of the remote.c component in the vorbis-tools set of tools for working with audio files is related to a violation of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...

QEMU Loop Exit Condition DoS

The vulnerability of the QEMU hardware emulation software is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

Haveged Random Number Generator DoS

The vulnerability of the src/havegecmd.c component, which generates random numbers for Haveged, is related to the bypassing of authentication due to a fundamental error. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel io_uring kbuf Heap Buffer Overflow DoS

The vulnerability in the iouring/kbuf.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

net/mlx5 DoS

The vulnerability of the net/mlx5 component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

LibVNC Buffer Overflow DoS

The vulnerability of the LibVNC library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

JQ Uncontrolled Recursion DoS

The vulnerability of the JSON data processing tool JQ is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

QEMU Hardware Emulation DoS

The vulnerability of the hw/9pfs/codir.c component of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...

Open vSwitch Buffer Overflow DoS

The vulnerability of the Open vSwitch multi-level switch lies in the fact that the output of operations goes beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Firefox Thunderbird Confidential Data Access

The vulnerability of the Engine component in web browsers such as Firefox and Firefox ESR, as well as in the Thunderbird email client, is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

Audio/Video components Firefox Thunderbird Confidential Data Access

The vulnerability of the Audio/Video components in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential dat...

Workers Component DoS

The vulnerability of the Workers component in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Firefox Thunderbird Heap Buffer Overflow DoS

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ATBroker Privilege Escalation

The vulnerability of the ATBroker.exe process responsible for registering auxiliary technologies in the Windows Accessibility Infrastructure affects Windows operating systems. This vulnerability is related to incorrect handling of symbolic links before accessing the file. Exploiting this...

User-Mode Power Service Privilege Escalation

The vulnerability of the User-Mode Power Service UMPS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

MCTP serial transport driver Heap Buffer Overflow DoS

The vulnerability of the mctpi2crecv function in the drivers/net/mctp/mctp-i2c.c module of the MCTP serial transport driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

Linux kernel bonding DoS

The vulnerability of the bondrcvvalidate function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver module is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

xdp_umem_reg() Kernel Data Compromise

The vulnerability of the xdpumemreg function in the net/xdp/xdpumem.c module, which implements networking functions for the Linux kernel, is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Ceph Monmap Decode Buffer Overflow DoS

The vulnerability of the cephmonmapdecode function in the net/ceph/monclient.c module, which implements networking functions for the Linux operating system’s kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to caus...

I3C driver Heap Buffer Overflow DoS

The vulnerability of the hcidmadequeuexfer function in the drivers/i3c/master/mipi-i3c-hci/dma.c file of the I3C driver in the Linux operating system is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux net/ipv4/udplite.c Heap Buffer Overflow DoS

The vulnerability of the udpliteskinit function in the net/ipv4/udplite.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Django QuerySet Order By

The vulnerability of the QuerySet.orderby function in the Django web application framework relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to gain access to sensitive data and compromise data integrity...

MapServer Path Traversal

The vulnerability of the MapServer geographic data rendering system is related to deficiencies in path name restriction. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

Linux driver/spi/spi.c DoS

The vulnerability of the drivers/spi/spi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

BusyBox d6_dhcpc.c DoS

The vulnerability in the d6dhcpc.c component of the UNIX command-line utilities in BusyBox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Rsync DoS

The vulnerability of the Rsync file transfer and synchronization utility is related to errors in processing parameter length settings. Exploiting this vulnerability can allow a remote attacker to cause service failures...

OpenEXR Integer Overflow DoS

The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Component DoS

The vulnerability of the net/mptcp/pmkernel.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Libssh2 DoS

The vulnerability in the src/userauth.c component of the SSH2 protocol implementation library Libssh2 is related to errors in number processing. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

lib/LWP/UserAgent.pm Confidential Data Access

The vulnerability of the lib/LWP/UserAgent.pm component, a module for working with LWP::UserAgent web resources, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

HPLIP Printer Driver DoS

The vulnerability of HPLIP printer drivers is related to the lack of measures taken to clean incoming data. Exploiting this vulnerability can allow an attacker to cause service failures...

Autofill Component Data Compromise

The vulnerability of the Autofill component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird relates to the ability to bypass authentication through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

Sandboxing Confidential Data Access

The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the email client Thunderbird relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

Codecs Component DoS

The vulnerability of the Codecs component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created image file...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the computeinsnlive regs function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux operating systems, is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Adaptive Substance 3D Painter Buffer Overflow RCE

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

RPM getTarSpec Code Execution

The vulnerability of the getTarSpec function in the tools/rpmbuild.cc component of the RPM package manager is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Imperative Web Server Oracle Helidon Library Data Access DoS

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

GitPython Repo Clone Arbitrary File Write

The vulnerability of the Repo.clonefrom and Repo.clone functions in the git/repo/base.py module of the GitPython library for interacting with Git repositories is related to an incorrect path name limitation when processing the --separate-git-dir parameter. Exploiting this vulnerability could allo...

Imperative Web Server Oracle Helidon Library Data Access DoS

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as well as to...

Imperative Web Server Oracle Helidon DoS

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Imperative Web Server Oracle Helidon Full Control

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain full control over the system...

Imperative Web Server Oracle Helidon Library Data Access DoS

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

Imperative Web Server Oracle Helidon DoS

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Imperative Web Server Oracle Helidon DoS

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...