Уязвимость компонента Skia браузера Google Chrome, позволяющая нарушителю выйти из изолированной программной среды

Уязвимость компонента Skia браузера Google Chrome связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выйти из изолированной программной среды через специально созданную HTML-страницу...

Vulnerability of the adbd_tls_verify_cert() function in the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the adbdtlsverifycert function in the Android operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the load_image() function in the plug-ins/common/file-jp2.c component of the GIMP graphic editor allows a hacker to induce a service failure.

The vulnerability of the loadimage function in the plug-ins/common/file-jp2.c component of the GIMP graphic editor is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the cross-platform framework for developing software in the Qt family allows a perpetrator to trigger a service failure.

The vulnerability of the cross-platform software development framework for Qt is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure using a specially created MNG file...

The vulnerability of the Azure DevOps software development tool, related to information disclosure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Azure DevOps software development tool is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the administration console of the broker’s messaging software platform Apache ActiveMQ allows a hacker to execute arbitrary code.

The vulnerability of the administration console of the broker’s software platform, Apache ActiveMQ, is related to deficiencies in the code generation management mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the WebML component in the Google Chrome browser, which allows a hacker to disclose confidential information

The vulnerability of the WebML component in Google Chrome relates to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to disclose confidential information through a specially created HTML page...

The vulnerability of the ajp_parse_data() function in the Apache HTTP Server allows a hacker to disclose confidential information.

The vulnerability of the ajpparsedata function in the Apache HTTP Server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...

The vulnerability of the Fullscreen component in the Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Fullscreen component in Google Chrome browser relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

Уязвимость компонента ServiceWorker браузера Google Chrome, позволяющая нарушителю перенаправить пользователя на вредоносную веб-страницу и выполнить произвольный код

Уязвимость компонента ServiceWorker браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, перенаправить пользователя на вредоносную веб-страницу и выполнить произвольный код...

The vulnerability of the mod_proxy_ajp() module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modproxyajp module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xfrm component in the Linux operating system’s kernel allows a hacker to elevate their privileges to the level of root.

The vulnerability of the xfrm component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

The vulnerability of the iSimpleBank digital service platform, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary codes.

The vulnerability of the iSimpleBank digital service platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Уязвимость графического процессора браузера Google Chrome, позволяющая нарушителю выполнить произвольный код

Уязвимость графического процессора браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

The vulnerability of the /etc/skel component in Demon allows for triggering of a service failure by other applications called Oddjob. This enables a hacker to cause a service failure.

The vulnerability of the /etc/skel component in the demon is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mod_md module in the Apache HTTP Server, related to pointer dereferencing, allows attackers to trigger resource exhaustion or server failures.

The vulnerability of the modmd module in the Apache HTTP Server is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause resource exhaustion or server failures...

Уязвимость компонента Aura браузера Google Chrome, позволяющая нарушителю выполнить произвольный код

Уязвимость компонента Aura браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с системными привилегиями за пределами браузера с помощью специально созданной...

The vulnerability of the Jenkins GitHub plugin, related to the lack of protection for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Jenkins GitHub plugin is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of Google Chrome’s DevTools component allows a hacker to bypass security restrictions.

The vulnerability of Google Chrome’s DevTools component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions through a specially created HTML page...

Уязвимость компонента InterestGroups браузера Google Chrome, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

Уязвимость компонента InterestGroups браузера Google Chrome связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии и выполнить произвольный код...

Уязвимость компонента Passwords браузера Google Chrome, позволяющая нарушителю перенаправить пользователя на вредоносную веб-страницу

Уязвимость компонента Passwords браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, перенаправить пользователя на вредоносную веб-страницу...

The vulnerability of the Python programming language interpreter, which allows attackers to compromise data integrity

The vulnerability of the Python interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of data...

The vulnerability of the IntraService customer interaction system, related to the， allows a perpetrator to execute a CSRF attack.

The vulnerability of the IntraService customer interaction system is related to the falsification of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the Tenda F456 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function /goform/P2pListFilter of the Tenda F456 router’s software lies in the copying of buffers without checking the size of the input data when processing parameters for manufacturer and Go. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the fromSafeClientFilter() function (/goform/SafeClientFilter) in the Tenda F456 router software allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the Tenda F456 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing parameters menufacturer and Go. Exploiting this vulnerability allows a...

The vulnerability of the SafeEmailFilter() function (/goform/SafeEmailFilter) in the Tenda F456 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the SafeEmailFilter function /goform/SafeEmailFilter of the Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

The vulnerability of the fromSafeMacFilter() function (/goform/SafeMacFilter) in the Tenda F456 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeMacFilter function /goform/SafeMacFilter of the Tenda F456 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability can allow an attacker to...

The vulnerability of SMB2 protocol discoverer, the Wireshark network traffic analyzer, allows a hacker to cause a service failure.

The vulnerability of SMB2 protocol analyzer in Wireshark is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, allows a hacker to cause a service failure.

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, Wireshark, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the codec_sbcdecode() function in the SBC analyzer of the Wireshark computer network analysis tool allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the codecsbcdecode function in the SBC analyzer of Wireshark, a computer network analysis tool, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

The vulnerability of the decrypt_data() function in the ZigBee protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the decryptdata function in the Kismet protocol of the Wireshark network traffic analyzer involves buffer overflow in the stack. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the dissect_swils_zone_obj() function in the FC-SWILS protocol of the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectswilszoneobj function in the FC-SWILS protocol of the Wireshark network traffic analyzer is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition (EE) stems from the lack of authentication for a critical function, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protecte...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition (EE) involves authentication errors, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the dissect_beep_tree() function in the BEEP protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissectbeeptree function in the BEEP protocol analyzer for computer network traffic analysis tool Wireshark is related to the execution of a loop with a potentially overflowing buffer in the stack. Exploiting this vulnerability can allow attackers to cause service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a hacker to execute arbitrary commands.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the fromSetIpBind() function (/goform/SetIpBind) in the httpd microprogramming software for Tenda F456 routers allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function /goform/SetIpBind in the HTTPD microprogramming software for Tenda F456 routers is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacke...

The vulnerability of MySQL protocol discrivers and traffic analyzers for computer networks by Wireshark allows attackers to cause service failures.

The vulnerability of the MySQL protocol analyzer and traffic analyzer for computer networks by Wireshark is related to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the spotlight_dissect_query_loop() function in the AFP Spotlight protocol analyzer for computer network traffic analysis tools by Wireshark allows a hacker to induce a service failure.

The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the HTTP server software for Tenda F456 routers allows a hacker to execute arbitrary commands.

The vulnerability of the FromWriteFacMac function /goform/WriteFacMac in the httpd microprogramming software for Tenda F456 routers is related to the lack of measures to sanitize input data when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the k12_dump_src_setting() function in the K12 file parser and RF5 traffic analyzer software from Wireshark allows a hacker to cause service interruptions.

The vulnerability of the k12dumpsrcsetting function in the K12 file parser and the RF5 traffic analyzer of Wireshark allows for buffer copying without checking input data. Exploiting this vulnerability can enable a hacker to cause service failures...

The vulnerability of the rdp8_decompress_segment() function in the RDP protocol allows a hacker to cause a service failure. This vulnerability exists in the Wireshark network traffic analyzer software.

The vulnerability of the rdp8decompresssegment function in the RDP protocol analysis tool for computer network traffic analysis in Wireshark is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failur...

The vulnerability of the dissect_icmpv6_nd_opt() function in the ICMPv6 protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissecticmpv6ndopt function in the ICMPv6 protocol analyzer for computer network traffic analysis tool Wireshark is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the dissect_rpkirtr_pdu() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectrpkirtrpdu function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of the software platform based on Git for collaborative code development in GitLab Enterprise Edition (EE) arises from the lack of measures taken to protect the structure of web pages. This allows attackers to add email addresses to target accounts.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to remotely add email addresses to target...

The vulnerability of the DLMS/COSEM protocol analyzer of the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the DLMS/COSEM protocol implementation in the Wireshark network traffic analyzer involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability in the packet-gsm_a_rp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability in the packet-gsmarp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark relates to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...