Natural Language processing library Code Execution

The vulnerability of the punktpickleload function in the NLTK library for symbolic and statistical processing of natural language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Netty Component Unauthorized Access

The vulnerability of the io.netty.incubator.netty-incubator-codec-ohttp-hpke-classes-boringssl component, a framework for developing network applications, servers, and protocol clients using Netty, relates to the disclosure of information. Exploiting this vulnerability may allow an attacker,...

Tenda CH22 Router Code Execution

The vulnerability of the formeditFileName function in the Tenda CH22 router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the ahashsetkey function in the drivers/crypto/caam/caamalgqi2.c file of the Linux kernel’s cryptographic accelerator driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux net/ipv6/addrconf.c Heap Buffer Overflow DoS

The vulnerability of the addrconfpermanentaddr function in the net/ipv6/addrconf.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Imperative Web Server Oracle Helidon Library Data Access DoS

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

Imperative Web Server Oracle Helidon Privilege Escalation

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

Gimp Image Processing Library Unauthenticated Access DoS

The vulnerability of the loadxwdf2d1b1 and loadxwdf1d24b1 functions in the Gimp image processing library is related to reading values outside of the permitted range in memory. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service...

NLTK SSRF

The vulnerabilities of the functions pathsec.urlopen, nltk.data.load, Downloader.index, and Downloader.download in the NLTK library for symbolic and statistical processing of natural language are related to insufficient validation of requests on the server side. Exploiting these vulnerabilities...

Tenda CH22 Router Command Execution

The vulnerability of the formexeCommand function in the Tenda CH22 router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Ancillary Function Driver Disclosure

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the transmission of critical information in open text. Exploiting this vulnerability can allow an attacker to disclose protected information...

AMD GPU Direct Rendering VCN Buffer Overflow DoS

The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to access...

Linux USB Device Driver __acquires() Buffer Overflow DoS

The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux SPI Rockchip SFC Probe Heap Buffer Overflow

The vulnerability of the rockchipsfcprobe function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux q54sj108a2debugfs_read() Function Heap Buffer Overflow DoS

The vulnerability of the q54sj108a2debugfsread function in the drivers/hwmon/pmbus/q54sj108a2.c file, a driver for hardware monitoring in the Linux operating system, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerabilit...

Linux HID ROCCAT Buffer Overflow

The vulnerability of the roccatreportevent function in the drivers/hid/hid-roccat.c module of the Linux kernel device subsystem driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Imperative Web Server Oracle Helidon Library Data Access DoS

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

Imperative Web Server Oracle Helidon Privilege Escalation

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

Imperative Web Server Oracle Helidon Privilege Escalation

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

Imperative Web Server Oracle Helidon Privilege Escalation

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

Imperative Web Server Oracle Helidon Unauthorized Access

The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

kin-openapi Heap Buffer Overflow DoS

The vulnerability of the openapi3filter.sliceMapToSlice function in the kin-openapi file handling library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SQLite Driver Code Execution

The vulnerability of the SQLite driver software used by Adminer for database management involves improper code generation practices. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Windows Media Disclosure

The vulnerability of the Windows Media component in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

ODBC Driver SQL Server Privilege Escalation

The vulnerability of the ODBC driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

Linux kernel SPI Function Heap Buffer Overflow DoS

The vulnerability of the cqspiprobe function in the drivers/spi/spi-cadence-quadspi.c file of the Linux kernel’s SPI device driver relates to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux USB Renesas_usbhs Buffer Overflow

The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c driver for Linux USB device controllers is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

amdgpu_dma_buf_move_notify Heap Buffer Overflow DoS

The vulnerability of the amdgpudmabufmovenotify function in the drivers/gpu/drm/amd/amdgpu/amdgpudmabuf.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory...

Linux NFC Driver Heap Buffer Overflow DoS

The vulnerability of the s3fwrn82uartread function in the drivers/nfc/s3fwrn5/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

Smb kernel SMB Direct Buffer Overflow DoS

The vulnerability of the smbdirectprepare function in the fs/smb/server/transportrdma.c module of the Smb subsystem in the Linux operating system is related to buffer overflows caused by type conversion errors. Exploiting this vulnerability allows a remote attacker to compromise the...

Smb opinfo_add Heap Buffer Overflow DoS

The vulnerability of the opinfoadd function in the fs/smb/server/oplock.c module of the Smb subsystem in the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remote attacker to...

BPF Kernel Heap Buffer Overflow DoS

The vulnerability of the scalarbyteswap function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux drivers/media/platform/qcom/camss/camss-vfe-480.c Heap Buffer

The vulnerability of the vfeisr function in the drivers/media/platform/qcom/camss/camss-vfe-480.c driver for Linux multimedia devices is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the scxcgroupinit function in the kernel/sched/ext.c module, which is part of the Linux kernel’s resource management subsystem, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Imperative Web Server Oracle Helidon Library Data Access DoS

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

Imperative Web Server Oracle Helidon Privilege Escalation

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

Imperative Web Server Oracle Helidon DoS

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Imperative Web Server Oracle Helidon Library Unauthorized Access

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions and gain unauthorized access ...

Imperative Web Server Oracle Helidon Privilege Escalation

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

Imperative Web Server Oracle Helidon Library Data Access

The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to add, delete, and modify data...

GitConfigParser Code Execution

The vulnerability of the GitConfigParser.read function in the git/config.py module of the Python library for interacting with Git repositories in GitPython is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to execute arbitra...

Lightdash validatePublicHttpUrl XSS

The vulnerability of the validatePublicHttpUrl function in the Lightdash data visualization and analysis tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause...

kin-openapi Heap Buffer Overflow DoS

The vulnerability of the openapi3filter.convertParseError function in the kin-openapi library is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SQLite Driver Software Privilege Escalation

The vulnerability of the SQLite driver software used by Adminer for database management involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to gain access and delete any files by sending a specially crafted POST request...

Gimp file-pcx Plugin Code Execution

The vulnerability of the file-pcx plugin of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

Windows Bluetooth Port Driver Code Execution

The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Secure Kernel Mode Privilege Escalation

The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to improper checking of consistency in input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux kernel thermal_zone_device_register_with_trips() Buffer Overflow

The vulnerability of the thermalzonedeviceregisterwithtrips function in the drivers/thermal/thermalcore.c driver for controlling kernel temperature in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

GeoTools jsonArrayContains() Code Execution

The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an...

GitPython Submodule Config Code Execution

The vulnerability of the Submodule.config parser function in the Python library for interacting with Git repositories in GitPython is related to incorrect external management of file names or paths. Exploiting this vulnerability could allow an attacker to execute arbitrary code...