The vulnerability of the QueryRGBBufferSizeInternal() function in the OpenImageIO library allows a hacker to cause a service failure.

The vulnerability of the QueryRGBBufferSizeInternal function in the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Уязвимость механизма Opaque Response Blocking (ORB) браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти существующие механизмы безопасности

Уязвимость механизма Opaque Response Blocking ORB браузеров Google Chrome и Microsoft Edge связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности с помощью специально созданной...

Уязвимость набора инструментов для веб-разработки DevTools браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость набора инструментов для веб-разработки DevTools браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации с помощью...

The vulnerability of the IKEv2 VPN server implementation in the operating system PAN-OS allows a perpetrator to cause a service failure.

The vulnerability of the IKEv2 VPN server implementation in the PAN-OS operating system is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Уязвимость графической библиотеки Skia браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость графической библиотеки Skia браузеров Google Chrome и Microsoft Edge связана с чтением данных за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

Уязвимость элемента управления «Network» («Сеть») браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю осуществить подмену пользовательского интерфейса

Уязвимость элемента управления «Network» «Сеть» браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить подмену пользовательского интерфейса с помощью специально созданной...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from a violation of access control checks, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a violation of access control checking procedures. Exploiting this vulnerability allows an attacker operating remotely to compromise the integrity of the protected information...

The vulnerability of the SwapRGBABytes() function in the OpenImageIO library, which allows a hacker to cause a service failure.

The vulnerability of the SwapRGBABytes function in the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.

The vulnerability of the NPM packet manager’s vm2 library is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Grafana monitoring and surveillance platform lies in the unauthorized access to the account after the token has expired, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Grafana monitoring and observation platform relates to incorrect access to the account after the token’s expiration period. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Vulnerability of the real-time messaging system of the Grafana Live platform for monitoring and observation. This platform allows a hacker to trigger a service failure.

The vulnerability of the Grafana Live messaging system in real-time mode, a platform for monitoring and surveillance, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted...

The vulnerability of the virtual machine on Palo Alto Networks’ Cortex XDR Broker VM, a cloud-based security platform, stems from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the virtual machine on the cloud security platform of Palo Alto Networks Cortex XDR Broker VM is related to insufficient validation of input data during the processing of certificate and key fields. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Уязвимость компонента Views браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость компонента Views браузеров Google Chrome и Microsoft Edge связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с помощью специально созданной HTML-страницы...

Уязвимость модуля отображения Blink браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

Уязвимость модуля отображения Blink браузеров Google Chrome и Microsoft Edge связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с помощью специально созданной HTML-страницы...

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to shortcomings in the mechanism for limiting input data. This allows attackers to trigger service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to shortcomings in the mechanism for limiting the amount of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the improper handling of logical operations, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of logical operations. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using a user-controlled key. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using a key controlled by the user. Exploiting this vulnerability allows an attacker to remotely compromise the integrity of the protected information...

The vulnerability of the Prisma Browser browser in macOS operating systems stems from improper protection of the alternate path, allowing attackers to bypass security restrictions and execute arbitrary commands.

The vulnerability of the Prisma Browser browser in macOS operating systems is related to improper protection of the alternative path. Exploiting this vulnerability allows an attacker to bypass security restrictions and execute arbitrary commands...

The vulnerability of the Grafana monitoring and surveillance platform, related to the re-writing of access control lists, allows a violator to increase their privileges.

The vulnerability of the Grafana monitoring and observation platform lies in the reimporting of access control lists due to data import from the monitoring panel. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Annotations API interface of the Grafana monitoring and observation platform allows a perpetrator to gain access to read, modify, or delete data.

The vulnerability of the Annotations API interface of the Grafana monitoring and observation platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain read, modify, or delete access to data...

The vulnerability of the sqlExpressions() function on the Grafana monitoring and observation platform allows a hacker to read arbitrary files.

The vulnerability of the sqlExpressions function on the Grafana monitoring and observation platform relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

The vulnerability of the Media components in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to memory-related issues. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted HTML page...

Уязвимость интерфейса Shared Storage API браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость интерфейса Shared Storage API браузеров Google Chrome и Microsoft Edge связана c ошибками синхронизации при использовании общего ресурса «Ситуация гонки». Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой...

Уязвимость элемента управления Разрешения (Permissions) браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость элемента управления Разрешения Permissions браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge allows a hacker to bypass existing security measures.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML page...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the distribution of resources without any restrictions or regulations, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the lack of authentication, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to potentially compromise the integrity of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures taken against the user-controlled structure of web pages. This allows attackers to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the certificate validation process. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access ...

The vulnerability in the web interface of the operating system PAN-OS for Ethernet interfaces of the PA-Series and VM-Series series allows attackers to carry out cross-site scripting attacks.

The vulnerability of the PAN-OS operating system’s web interfaces for PA-Series and VM-Series series network interfaces is related to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attack...

The vulnerability of the Chromoting remote administration tool, which is available for Google Chrome and Microsoft Edge browsers, allows a hacker to escalate their privileges.

The vulnerability of the Chromoting remote administration tool, which is available for Google Chrome and Microsoft Edge browsers, is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges by...

Vulnerability of the Audio/Video component: The playback feature in Mozilla Firefox browsers and the Thunderbird email client allows attackers to trigger a service failure.

The vulnerability of the Audio/Video component: The playback functions of Mozilla Firefox browsers and the Thunderbird email client are vulnerable to a resource consumption issue that is not controlled. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Vulnerability of the DOM component: Security vulnerabilities in Mozilla Firefox browsers and Thunderbird email client, allowing attackers to circumvent existing security restrictions

The vulnerability of the DOM component: The security of Mozilla Firefox browsers and Thunderbird email client is related to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of Mozilla Firefox browsers and the Thunderbird email client, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browsers and the Thunderbird email client relates to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Tenda AC7 microprogrammed software, related to the disclosure of information during data transmission, allows a hacker to disclose the protected information.

The vulnerability of Tenda AC7 microprogramming software relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the Next.js software platform for creating web applications lies in its lack of protection for website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Next.js web application development software platform is related to the lack of security measures for protecting the structure of web pages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Next.js web application development software platform, related to deficiencies in authentication procedures, allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the Next.js web application development software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information...

The vulnerability of the Next.js software platform for creating web applications stems from insufficient validation of requests on the server side. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Next.js web application development software platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Cloud Authentication Service (CAS) component of the PAN-OS operating system, related to incorrect verification of the cryptographic signature, allows attackers to bypass existing security mechanisms.

The vulnerability of the Cloud Authentication Service CAS component in the PAN-OS operating system is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the Bufferalloc() function in the vm2 package manager’s library allows a attacker to cause a service failure.

The vulnerability of the Bufferalloc function in the vm2 package manager’s library is related to the unlimited distribution of resources when processing the timeout parameter. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the path Resolve() function in the vm2 library of the NPM package manager allows a attacker to bypass the sandbox protection and execute arbitrary code.

The vulnerability of the pathResolve function in the vm2 library of the NPM package manager is related to an incorrect definition of symbolic links during file access. Exploiting this vulnerability allows a remote attacker to bypass the sandboxing mechanisms and execute arbitrary code...

The vulnerability of the get_dumpable() function in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getdumpable function in the Linux operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the N8n automation platform, related to deficiencies in the authentication process, allows a malicious actor to reuse the external API key and gain unauthorized access to protected information.

The vulnerability of the N8n automation platform lies in the deficiencies of the authentication process when processing the dynamic-node-parameters endpoint. Exploiting this vulnerability allows an attacker to re-use the external API key and gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording beyond buffer limits, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the ability to record beyond the buffer limits. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...

Уязвимость компонента PresentationAPI браузера Google Chrome, позволяющая нарушителю выполнить произвольный код

Уязвимость компонента PresentationAPI браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри песочницы с помощью специально созданной HTML-страницы...

Уязвимость компонента Downloads браузера Google Chrome, позволяющая нарушителю повысить свои привилегии

Уязвимость компонента Downloads браузера Google Chrome связана с нарушением механизма защиты данных. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии с помощью специально созданной HTML-страницы...

The vulnerability of the MCP Client Registration mechanism of the N8n platform, which is used for automating work processes, allows a perpetrator to trigger a service failure.

The vulnerability of the MCP Client Registration mechanism of the N8n automation platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Vulnerability of the DOM component: The security features of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to circumvent existing security restrictions.

Vulnerability of the DOM component: The security of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relies on bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...