Microsoft .NET Data Protection Disclosure

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

Apache ActiveMQ Integer Overflow DoS

The vulnerability of Apache ActiveMQ software products is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Apache HTTP Server Code Execution

The vulnerability of the Apache HTTP Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Go Integer Overflow DoS

The vulnerability of the Go programming language is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Apache Tomcat RewriteValve Bypass

The vulnerability of the RewriteValve component in the Apache Tomcat application server is related to improper handling of data with URL encoding. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms remotely...

PostgreSQL to_char Function Code Execution

The vulnerability of the tochartimestamptz function in the PostgreSQL database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

Zoom Buffer Overflow

The vulnerability of Zoom, a video conferencing software, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker who operates remotely to execute arbitrary code...

openssl_encrypt File Read Write

The vulnerability in the opensslencrypt/modules/pluginsystem/pluginsandbox.py file, belonging to the opensslencrypt library written in Python, relates to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to rea...

Content Credentials SDK Insufficient Validation Privilege Escalation

The vulnerability of Content Credentials SDK library libraries is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Content Credentials SDK Path Traversal

The vulnerability of the Content Credentials SDK libraries is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Content Credentials SDK Certificate Authentication Bypass

The vulnerability of the Content Credentials SDK libraries is related to errors in the certificate authentication process. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

Content Credentials SDK Countable Loss of Significance DoS

The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

Content Credentials SDK Integer Overflow DoS

The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Content Credentials SDK Countable Loss of Significance DoS

The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

Content Credentials SDK Insufficient Validation Bypass

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

Content Credentials SDK Pointer Dereferencing DoS

The vulnerability of the Content Credentials SDK libraries is related to errors in pointer assignment. Exploiting this vulnerability could allow an attacker to cause service failures...

Content Credentials SDK Uncontrolled Resource Consumption DoS

The vulnerability of Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Adobe Campaign Classic SQL Injection

The vulnerability of the Adobe Campaign Classic software platform for managing marketing campaigns is related to the lack of security measures regarding the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Adobe Acrobat PDF Extension Unauthorized Access

The vulnerability of the Adobe Acrobat PDF browser extension for Google Chrome is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

Online Store Code Execution

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

Online Store Authentication Privilege Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Adobe Lightroom Classic Buffer Overflow Code Execution

The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Lightroom Classic Buffer Overflow Code Execution

The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Lightroom Classic Buffer Overflow Code Execution

The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Lightroom Classic Buffer Overflow Code Execution

The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Lightroom Classic Auth Bypass RCE

The vulnerability of Adobe Lightroom Classic’s graphic editor is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Microsoft SharePoint Server

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to perform spear-phishing...

Win32k.sys Privilege Escalation

The vulnerability of the Win32k.sys component in Windows operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft .NET Framework Privilege Escalation

The vulnerability of the Microsoft .NET Framework software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow attackers to enhance their privileges...

DD-WRT UPnP DoS

The vulnerability of the UPnP microprogramming software for routers with DD-WRT is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests through the UDP port...

Go Verify Unauthorized Access

The vulnerability of the Verify function in the Go programming language is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Go NewKeyring Unauthorized Access

The vulnerability of the NewKeyring function in the Go programming language is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Tenda AC12 Router set_wl_guest_iplist fromSetWifiGusetBasic buffer overflow DoS

The vulnerabilities of the functions setwlguestiplist and fromSetWifiGusetBasic of the Tenda AC12 router are related to the occurrence of operations outside the buffer in memory. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiality, integrity, and...

GitPython Diffable.diff File Write

The vulnerability of the Diffable.diff method in the Python library for interacting with git repositories in GitPython relates to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to re-write any files in the system remotely...

Screen Sharing macOS Full Control

The vulnerability of the Screen Sharing service in Apple macOS operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain full control over the system...

GitLab Code Generation Code Execution

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE stems from improper code generation management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and execute arbitra...

Data Hub Adapter Authentication Client Code Execution

The vulnerability of the standard authentication client for Data Hub Adapters in the SAP Commerce Cloud platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, leading to a complete compromise of the system...

GitLab EE/CE Git Manipulation Code Execution

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted GET requests...

GitPython Code Execution

The vulnerability of the checkunsafeoptions mechanism in the Python library for interacting with Git repositories, GitPython, is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to rewrite any files in the system remote...

Linux arizona-core.c DoS

The vulnerability of the arizona-core.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the net/core/filter.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the cpcap-battery.c component in the Linux operating system is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the sca3000probe function in the sca3000.c component of the Linux kernel lies in the fact that resources are not released after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Powerpc Eeh DoS

The vulnerability of the powerpc/eeh component of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux ext4 Heap Buffer Overflow DoS

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to incomplete recognition of the internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rtonextcpu function in the sched/rt.c component of the Linux kernel’s scheduler is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux driver net usb catc Heap Buffer Overflow DoS

The vulnerability of the drivers/net/usb/catc.c component in the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...