CVE Brief Security Intelligence

An incorrect use of privileged APIs in Unity Parsec on Windows hosts leads to a potential elevation of privilege.

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute arbitrary code over a network.

A use-after-free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

A use-after-free vulnerability in Microsoft Edge (Chromium-based) enables an unauthenticated remote attacker to execute arbitrary code.

A use-after-free vulnerability in Microsoft Edge (Chromium-based) allows an unauthenticated attacker to perform remote code execution.

An integer overflow or wraparound vulnerability in Microsoft Edge (Chromium-based) allows an unauthenticated attacker to execute code remotely.

An improper authorization flaw in Microsoft Edge allows an unauthenticated remote attacker to bypass critical security features.

An improper authorization vulnerability in Microsoft Edge enables unauthenticated remote attackers to achieve arbitrary code execution.

A type confusion vulnerability in Microsoft Edge allows unauthenticated remote attackers to execute arbitrary code.

A type confusion vulnerability in Microsoft Edge allows unauthorized attackers to bypass security features via network exploitation.

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing attacks over a network.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing attacks via network exploitation.

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

External control of file paths in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

A malformed SSH sub-verb allows unauthenticated attackers to bypass LFS authentication, resulting in unauthorized read access to private repositories.

A vulnerability in the Gitea workflow approval mechanism allows users to bypass the designated approval gate for permanent fork pull requests.

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system, potentially leading to full system compromise.

A vulnerability exists in Keras version 3 that may expose the machine learning framework to security risks.

A vulnerability in Gitea versions starting from 1 may allow for unauthorized access or security compromise of the Git server environment.

A security vulnerability affects Gitea versions up to and including 1, potentially exposing the Git server to unauthorized actions or data access.

Gitea versions up to and including 1 contain a security vulnerability. Technical details are limited, requiring users to consult the official vendor advisory for specific scope and impact.

The Picklescan utility, used for scanning Python pickle files, contains a vulnerability in versions before 0. Users must update to the latest version to mitigate potential risks.

A security vulnerability exists in Picklescan versions prior to 0, necessitating an immediate update to protect against potential exploitation.

A security vulnerability exists in picklescan that may allow for unauthorized operations. The specific nature of the flaw is currently identified as requiring further vendor clarification.

A security vulnerability exists in picklescan that may allow for unauthorized operations. The specific nature of the flaw is currently identified as requiring further vendor clarification.

A security vulnerability exists in picklescan that may allow for unauthorized operations. The specific nature of the flaw is currently identified as requiring further vendor clarification.

A security vulnerability exists in Picklescan, potentially allowing for unauthorized exploitation due to insufficient security controls within the software.

A security vulnerability exists in Picklescan, potentially allowing for unauthorized exploitation due to insufficient security controls within the software.

A security vulnerability exists in Picklescan, potentially allowing for unauthorized exploitation due to insufficient security controls within the software.

A vulnerability exists in picklescan that may allow for unauthorized code execution. Users are advised to verify their current version against vendor security updates.

A vulnerability exists in picklescan that may allow for unauthorized code execution. Users are advised to verify their current version against vendor security updates.

A vulnerability exists in picklescan that may allow for unauthorized code execution. Users are advised to verify their current version against vendor security updates.

A security vulnerability exists in picklescan that may allow for unauthorized code execution or system compromise.

A security vulnerability in the picklescan utility may permit unauthorized exploitation of the host environment.

The Picklescan utility is affected by a security vulnerability that may allow for unauthorized system compromise.

A security vulnerability exists in Picklescan that may allow for unauthorized code execution or system compromise.

A security vulnerability in Picklescan may allow for unauthorized system compromise, necessitating immediate administrative attention.

A high-severity vulnerability in the Gitea Git server may allow for unauthorized access or system impact.

A security vulnerability exists in Gitea Open Source Git Server that may allow unauthorized actions.

A security vulnerability in Gitea Open Source Git Server has been identified that may facilitate unauthorized system interaction.

A security vulnerability in the NLTK library has been identified that may allow for unauthorized processing or system impact.