The vulnerability of the Mattermost instant messaging application, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Mattermost instant messaging application is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Mattermost instant messaging application, related to information disclosure, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the vLLM library for working with large language models involves uncontrolled resource consumption, allowing attackers to trigger a service failure.

The vulnerability of the vLLM library for working with large language models is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted HTTP requests...

The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.

The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the TCP/IP driver for Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the TCP/IP driver for Windows operating systems relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability of the JGSS component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to gain unauthorized access to protected information.

The vulnerability of the JGSS component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating...

The vulnerability of the RIFF component in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the RIFF component in the Gstreamer multimedia framework is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Linux operating system for processors based on S5P4418 and S5P6818 allows a hacker to modify real-time clock settings.

The vulnerability of the Linux operating system for platforms based on S5P4418 and S5P6818 processors is related to incorrect initialization. Exploiting this vulnerability can allow attackers to alter real-time clock settings...

The vulnerability of the get_log_file() function in Tenda AC6 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the getlogfile function in Tenda AC6 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through backup operations using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary...

The vulnerability of the Cisco IOS XE operating system’s TLS library allows attackers to trigger memory exhaustion or service failure.

The vulnerability of the Cisco IOS XE operating system’s TLS library is related to the absence of references to an active, allocated resource. Exploiting this vulnerability can allow a malicious actor to induce memory exhaustion or service failure from a remote perspective...

The vulnerability of the Cisco IoT Field Network Director software interface allows a hacker to gain access to confidential information or cause service failures.

The vulnerability of the Cisco IoT Field Network Director software interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

The vulnerability of the microprogrammed network interface cards of SONICWALL series SMA 1000 allows a intruder to elevate their privileges to the level of an administrator.

The vulnerability of the microprogrammed network interface cards of SONICWALL series SMA 1000 is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to elevate their privileges to the level of administrator...

The vulnerability of the print_hex_string() function in the Wazuh intrusion detection and prevention system allows a perpetrator to execute arbitrary code.

The vulnerability of the printhexstring function in the Wazuh intrusion detection and prevention system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Next.js software platform for creating web applications, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.

The vulnerability of the Next.js web application development software platform is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the Windows Admin Center server management tool, related to deficiencies in the authentication process, allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Admin Center management tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems relates to bypassing authentication by avoiding memory release after the effective lifetime of the protocol. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the Win32K component – GRFX in Windows operating systems – allows a hacker to execute arbitrary code.

The vulnerability of the Win32K component in Windows operating systems is related to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the EGifGCBToExtension function in the GIFLIB library allows a hacker to induce a service failure.

The vulnerability of the EGifGCBToExtension function in the GIFLIB library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the soap_add_xml_ref() function in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the soapaddxmlref function in the PHP programming language is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the .NET software platform, related to insufficient validation of output data, allows attackers to increase their privileges.

The vulnerability of the .NET software platform is related to insufficient validation of output data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.

The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause servi...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their uncontrolled resource consumption, which allows attackers to cause service interruptions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service interruptions remotel...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow an attacker to execute arbitrary...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to enhance their privileges.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrar...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to perform cross-site scripting attacks.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager allows a attacker to perform cross-site scripting attacks (XSS).

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Mattermost instant messaging application, related to access control errors, allows a malicious user to reduce the privileges of arbitrary users.

The vulnerability of the Mattermost instant messaging application is related to access control errors. Exploiting this vulnerability could allow a malicious actor to reduce the privileges of arbitrary users...

The vulnerability of the Next.js software platform for creating web applications lies in the lack of source verification, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Next.js web application development software platform lies in the lack of source verification. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the print spooler daemon on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their uncontrolled resource consumption, which allows attackers to cause service interruptions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service interruptions remotel...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass existing security mechanisms.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass existing security...

The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.

The vulnerability of the Windows Operating System’s Telephony Service relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Adobe After Effects’ video and dynamic image editing software, related to integer overflow, allows attackers to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to cause service failures.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerabilities of the `png_set_TRNX` and `png_set_PLTE` functions in the LIBPNG library allow attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the pngsettRNS and pngsetPLTE functions in the LIBPNG library is related to improper memory management during data deallocation. Exploiting this vulnerability may allow an attacker to gain access to the freed memory area, which could lead to the execution of arbitrary code or...

The vulnerability of the Ruby programming language’s URI module, the RubyGems package manager, allows attackers to gain access to confidential data.

The vulnerability of the Ruby language’s URI module, as well as the RubyGems package manager system, relates to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

The vulnerability of the TagSection.keys() function in the tag.cc component allows for the execution of Python APT exploits, enabling an attacker to cause a denial-of-service attack.

The vulnerability of the TagSection.keys function in the tag.cc component, which is used to install Python APT packages, is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created deb822 file...

The vulnerability of the ClonePixelCacheRepository() function in the magick/cache.c component of the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the ClonePixelCacheRepository function in the magick/cache.c component of the ImageMagick console graphics editor is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially create...

The vulnerability of the ANGLE component in the Google Chrome web browser, which allows a hacker to access confidential data

The vulnerability of the ANGLE web browser component in Google Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the WebGL component in Google Chrome web browser allows a hacker to trigger a service failure.

The vulnerability of the WebGL component in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Navigation function in the Google Chrome web browser, which allows a hacker to trigger a service failure

The vulnerability of the Navigation function in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of the mbuf_get_bytes() and mbuf_get_chars() functions in PostgreSQL PgBouncer’s connection pool allows a hacker to cause a service failure.

The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...

The vulnerability of the TanStack library set, related to the presence of undeclared capabilities, allows a hacker to execute arbitrary code.

The vulnerability of the TanStack library set is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows relates to access to resources through incompatible types. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Message Queuing MSMQ queue service on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the rtpqdm2depay component in the GStreamer multimedia framework allows a attacker to execute arbitrary code.

The vulnerability of the rtpqdm2depay component in the GStreamer multimedia framework is related to incorrect checking of the length of input data during the processing of the X-QDM RTP payload. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...