Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request.
Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all ve...
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
Rejected reason: This CVE has the been REJECTED and will not be published by the CNA.
A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to gain...
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unautho...
A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentication prompt can be bypassed. This allows a user with a timed-out session, or an attacker with access to an idle authent...