phpMyFAQ Authentication Controller Data Compromise

The vulnerability of the src/phpMyFAQ/Controller/Frontend/AuthenticationController.php file in the phpMyFAQ web application is related to insufficient limits on authentication attempts. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the...

GitPython IndexFile Methods File Rewrite

The vulnerabilities of the IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree methods in the GitPython library for interacting with git repositories involve the exploitation of arguments. Exploiting these vulnerabilities can allow an attacker to rewrite any files at will...

GitPython Arbitrary Command Execution

The vulnerability of the option-name validation component in the Python library for interacting with Git repositories, GitPython, is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands...

GIMP graphic editor File PSP Component DoS

The vulnerability of the plug-in/common/file-psp.c component of the GIMP graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PSP image...

GIMP graphic editor Heap Buffer Overflow DoS

The vulnerability of the plug-in/file-ico/ico-load.c component in the GIMP graphic editor is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created ICO file...

Exiv2 Component Heap Buffer Overflow DoS

The vulnerability of the CrwMap::decode0x0805 function in the src/crwimageint.cpp component of the Exiv2 media metadata management library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ImageMagick System Failure

The vulnerability of the console-based graphic editor ImageMagick is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to trigger a service failure using a malicious file...

Erlang Authorization Access Data Compromise

The vulnerability of the Erlang programming language is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data and influence its integrity...

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ImageMagick coders/dcm.c Heap Buffer Overflow DoS

The vulnerability in the coders/dcm.c module of the console-based image editing tool ImageMagick relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ImageMagick Pointer Assignment DoS

The vulnerability of the console-based graphic editor ImageMagick is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ImageMagick Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

OpenEXR CompositeDeepScanLine Heap Buffer Overflow DoS

The vulnerability of the CompositeDeepScanLine::readPixels function in the ImfCompositeDeepScanLine component of software for storing images with a wide dynamic range of brightness, OpenEXR, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker ...

OpenEXR internal_piz.c Buffer Overflow DoS

The vulnerability of the internalpiz.c component in the image storage software for OpenEXR, which supports a wide dynamic range of brightness values, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

MapServer SLD Buffer Overflow DoS

The vulnerability of the MapServer geographic data rendering parser’s SLD system is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

QEMU virtio_snd_pcm_in_cb Heap Buffer Overflow DoS

The vulnerability of the virtiosndpcmincb function in the hw/audio/virtio-snd.c component of the QEMU hardware emulation software is related to the issue of writing operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

QEMU Virtio-Snd System Failure

The vulnerability of the hw/audio/virtio-snd.c component of the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux Ceph Handle Auth Reply Buffer Overflow DoS

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module of the Linux kernel is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux kernel Network Device Driver Heap Buffer Overflow DoS

The vulnerability of the sendmsgnofragmentation function in the drivers/net/netconsole.c module of the Linux kernel network device driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause servic...

HEIF AVIF Buffer Overflow DoS

The vulnerability of the HEIF and AVIF file encoding/decoding library lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GC Component DoS

The vulnerability of the GC component in Firefox ESR web browsers, Firefox browsers, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service interruptions...

WebRender DoS

The vulnerability of the WebRender component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control in isolated environments. Exploiting this vulnerability could allow a malicious actor to cause service failures...

WebRender DoS

The vulnerability of the WebRender component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control in isolated environments. Exploiting this vulnerability could allow a malicious actor to cause service failures...

JIT DoS

The vulnerability of the JIT component in Firefox ESR web browsers, Firefox browsers, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Firefox ESR JIT DoS

The vulnerability of the JIT component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

WebAssembly DoS

The vulnerability of the WebAssembly component in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

IndexedDB DoS

The vulnerability of IndexedDB in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control within isolated environments. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Playback Component DoS

The vulnerability of the Playback component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

WebIDL DoS

The vulnerability of the WebIDL component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

mpu3050_common_remove Heap Buffer Overflow DoS

The vulnerability of the mpu3050commonremove function in the iio/gyro/mpu3050-core.c driver of various types of embedded sensors in the Linux operating system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the...

Firefox Thunderbird Parser DoS

The vulnerability of the Parser component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Telemetry DoS

The vulnerability of the Telemetry component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to deficiencies in access control in isolated environments. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Firefox Privilege Management DoS

The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Netmonitor Component Firefox Thunderbird DoS

The vulnerability of the Netmonitor component in the Firefox web browser and Thunderbird email client is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Security Component DoS

The vulnerability of the Security component in Firefox ESR, Firefox, and the Thunderbird email client involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Firefox ESR DoS

The vulnerability of the JavaScript Engine component in Firefox ESR, Firefox, and the Thunderbird email client relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

components of Firefox ESR DoS

The vulnerability of the components of the Firefox ESR, Firefox, and Thunderbird web browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

GMP Component DoS

The vulnerability of the GMP component in Firefox ESR, Firefox, and the Thunderbird email client is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions...

JAR Component DoS

The vulnerability of the JAR component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to a deficiency in the source verification mechanism. Exploiting this vulnerability can allow an attacker to cause service failures...

Networking Component DoS

The vulnerability in the Networking component of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Firefox Thunderbird Buffer Overflow DoS

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to buffer overflow exploits. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...

Firefox Thunderbird Buffer Overflow DoS

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to buffer overflow exploits. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...

IPC web Firefox Thunderbird DoS

The vulnerability of the IPC web browser Firefox and the email client Thunderbird is related to context privilege switching errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Firefox Thunderbird DoS

The vulnerability of the JavaScript Engine component in the Firefox web browser and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...

Firefox Uncontrolled Resource Consumption DoS

The vulnerability in the Firefox web browser is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the block/nullblk/main.c component of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux vmw_vsock/virtio_transport_common.c Confidential Data Access

The vulnerability of the vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Linux SCSI QLA ISR DoS

The vulnerability of the scsi/qla2xxx/qlaisr.c component of the Linux operating system lies in the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Pointer Arithmetic DoS

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...