The vulnerability of the rtpqdm2depay component in the GStreamer multimedia framework allows a attacker to execute arbitrary code.

The vulnerability of the rtpqdm2depay component in the GStreamer multimedia framework is related to incorrect checking of the length of input data during the processing of the X-QDM RTP payload. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the library for working with TagLib audio metadata allows a intruder to trigger a service failure.

The vulnerability of the library for working with TagLib audio metadata is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created WAV file...

The vulnerability of the software for interacting with servers via CURL allows a hacker to gain access to confidential data.

The vulnerability of the software for interacting with servers via CURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules allows attackers to induce a service failure.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the qicnshandler.cpp component of the cross-platform framework for developing Qt software. This component is a plugin for Qt6, designed to support various Qt6 image formats. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the qicnshandler.cpp component in the cross-platform framework for developing Qt software, a plugin set for Qt6 to support various Qt6 image formats, is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the Ruby programming language’s URI module, the RubyGems package manager, allows attackers to gain access to confidential data.

The vulnerability of the Ruby language’s URI module, as well as the RubyGems package manager system, relates to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

The vulnerability of the SFTP component in the LibSSH authentication library allows a attacker to induce a service failure.

The vulnerability of the SFTP component in the LibSSH authentication library lies in the escape of the operation beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the ANGLE component in the Google Chrome web browser, which allows a hacker to access confidential data

The vulnerability of the ANGLE web browser component in Google Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the WebGL component in Google Chrome web browser allows a hacker to trigger a service failure.

The vulnerability of the WebGL component in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the PDF component in the Google Chrome web browser, which allows a hacker to trigger a service failure

The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created PDF file...

The vulnerability of the mbuf_get_bytes() and mbuf_get_chars() functions in PostgreSQL PgBouncer’s connection pool allows a hacker to cause a service failure.

The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...

The vulnerability of the SAP S/4HANA software platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to gain unauthorized access to protected information and trigger service failures.

The vulnerability of the SAP S/4HANA software platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information and cause service failures by sending specially crafted S...

The vulnerability of PostgreSQL PgBouncer’s connection pool software, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the PostgreSQL PgBouncer connection pool software relates to the assignment of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Ancillary Function Driver for WinSock in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Ancillary Function Driver for WinSock operating systems in Windows relates to access to resources through incompatible types. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to cause service failures.

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious...

The vulnerabilities of the `png_set_TRNX` and `png_set_PLTE` functions in the LIBPNG library allow attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the pngsettRNS and pngsetPLTE functions in the LIBPNG library is related to improper memory management during data deallocation. Exploiting this vulnerability may allow an attacker to gain access to the freed memory area, which could lead to the execution of arbitrary code or...

The vulnerability of the TanStack library set, related to the presence of undeclared capabilities, allows a hacker to execute arbitrary code.

The vulnerability of the TanStack library set is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Next.js software platform for creating web applications lies in the lack of source verification, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Next.js web application development software platform lies in the lack of source verification. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the TCP/IP driver for Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the TCP/IP driver for Windows operating systems relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability in the DevVGA_VBVA.cpp script of the Core component in the Oracle VM VirtualBox virtual machine allows a hacker to trigger a service failure.

The vulnerability in the DevVGAVBVA.cpp script of the Core component in the Oracle VM VirtualBox virtual machine is related to a numerical overflow resulting from pointer swapping. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the resetPromiseSpecies() function in the vm2 package manager’s NPM library allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary commands.

The vulnerability of the resetPromiseSpecies function in the vm2 library of the NPM package manager is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to bypass the sandbox’s security mechanisms and execute arbitrary commands...

The vulnerability of the Business Chat function in Microsoft 365 Copilot allows a hacker to disclose protected information.

The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

The vulnerability of the intermediate software ForwardAuth in the reverse proxy server Containous Traefik allows a hacker to bypass authentication with invalid credentials.

The vulnerability of the intermediate software ForwardAuth in the reverse proxy server Containous Traefik involves exploiting authentication through spoofing. Exploiting this vulnerability allows a malicious actor to bypass authentication with invalid credentials...

The vulnerability of the Dell ThinOS operating system for thin clients involves insufficient data cleaning at the management level, allowing attackers to execute arbitrary commands.

The vulnerability of the Dell ThinOS operating system for thin clients is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the Dell PowerScale OneFS operating system, related to insufficient protection of registration data, allows attackers to compromise the confidentiality and accessibility of data.

The vulnerability of the Dell PowerScale OneFS operating system is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of data...

The vulnerability of the system for launching and managing large language models in LoLLMS (Lord of Large Language Multimodal Systems) stems from deficiencies in access control. This allows attackers to enhance their privileges.

The vulnerability of the system for launching and managing large language models in LoLLMS Lord of Large Language Multimodal Systems is related to deficiencies in access control when processing JWT signatures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges...

The vulnerability of the gso_features_check() function in Linux operating systems allows a hacker to gain unauthorized access to confidential information.

The vulnerability of the gsofeaturescheck function in Linux operating systems is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...

The vulnerability of the netfilter x_tables component in Linux operating systems allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the netfilter xtables component in Linux operating systems is related to errors that occur when a line or array ends with a zero character. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

The vulnerability of the `bnxt_hwrm_func_backing_store_qcaps_v2()` function in Linux kernels allows a hacker to trigger a service failure.

The vulnerability of the bnxthwrmfuncbackingstoreqcapsv2 function in Linux kernels is related to the use of a pointer offset that is out of range. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the hci_le_remote_conn_param_req_evt() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hcileremoteconnparamreqevt function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the processCommandAndResetClient() function in the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the processCommandAndResetClient function in the Redis database management system is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the RESTORE command in the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the RESTORE command in the Redis database management system is related to buffer overflows in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability in the web interface of the Cisco IOS XE operating system allows attackers to enhance their privileges and gain access to the management API.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and gain access to the management API...

The vulnerability of the Cray operating system’s kernel, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Cray operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a intruder to execute arbitrary commands.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems DD OS is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow an attacker to execute arbitrary...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to enhance their privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup process for Dell EMC Data Domain Operating Systems is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability in the crypto/authencesn.c module of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability in the crypto/authencesn.c module of Linux operating systems is related to incorrect processing of structural elements. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the React frontend building libraries React-server-dom-parcel, React-server-dom-turbopack, and React-server-dom-webpack allow attackers to cause service failures.

The vulnerability of the React frontend library packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack involves uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures by sending specially crafted HTTP...

The vulnerability of the intermediate software ForwardAuth in the reverse proxy server Containous Traefik allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the intermediate software ForwardAuth in the reverse proxy server Containous Traefik is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the RedisBloom data structure module of the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the RedisBloom data structure module of the Redis database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the multi-functional online image editor in PIXSO’s UI/UX design relates to access control errors, which allow attackers to compromise data integrity.

The vulnerability of the multi-functional online image editor in PIXSO’s UI/UX design is related to access control errors. Exploiting this vulnerability could allow an attacker to create threats to data integrity remotely...

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of protective measures for website structures, allowing attackers to perform spear-phishing attacks.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Business Chat function in the Microsoft 365 Copilot intelligent virtual assistant allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Cisco IOS and Cisco IOS XE operating system HTTP servers allows attackers to induce service failures.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems’ HTTP servers is related to incorrect processing of syntaxically incorrect structures. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the backend/routers/files.py script of the system for launching and managing large language models in LoLLMS (Lord of Large Language Multimodal Systems) allows a hacker to write arbitrary files.

The vulnerability in the backend/routers/files.py script of the system for launching and managing large language models in LoLLMS Lord of Large Language Multimodal Systems involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to write any files they...

The vulnerability of the hci_cmd_sync_queue_once() function in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the hcicmdsyncqueueonce function in Linux operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the regsafe() function in Linux operating system kernels allows attackers to disclose confidential information or cause service failures.

The vulnerability of the regsafe function in Linux operating system kernels is related to errors in determining the system’s state. Exploiting this vulnerability can allow an attacker to disclose confidential information or cause service failures...

The vulnerability of the set_cig_params_sync() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the setcigparamssync function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the net/bluetooth/mgmt.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/bluetooth/mgmt.c module of the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the video_timer() function in the implementation of the remote desktop protocol FreeRDP allows a intruder to trigger a service failure.

The vulnerability of the videotimer function in the implementation of the remote desktop protocol FreeRDP is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure...