514 matches found
The vulnerability of the E-Staff automated recruitment process system, related to data filtering errors, allows a perpetrator to compromise the integrity and accessibility of the protected information.
The vulnerability of the E-Staff recruitment automation system is related to errors in data filtering. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity and accessibility of the protected information...
Vulnerability of the tcmu_try_get_block_page() function in the drivers/target/target_core_user.c module – The TCM driver for the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the tcmutrygetblockpage function in the drivers/target/targetcoreuser.c module – The TCM driver for the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
Vulnerability of the pps_gpio_probe() function in the drivers/pps/clients/pps-gpio.c module – This driver for Linux kernel’s PPS client support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the pps gpioprobe function in the drivers/pps/clients/pps-gpio.c module – The Linux kernel’s PPS client driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Vulnerability of the fsl_mc_bus_remove() function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the fslmcbusremove function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in Linux kernel is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the SAP NetWeaver software integration platform, related to the lack of authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the SAP NetWeaver software integration platform is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability in browser extensions for Safari on operating systems macOS, iOS, iPadOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability in the software for optimizing and deploying AI-based application solutions from AMD Ryzen AI, related to integer overflow, allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of software for optimizing and deploying AI-based applications related to AMD Ryzen AI is associated with a numerical overflow condition. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...
The vulnerability of the MongoDB database management system server, related to the absence of authentication procedures, allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the MongoDB database management system server is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...
The vulnerability of the BmpInput::read_native_scanline() function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the BmpInput::readnativescanline function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the `btrfs_encoded_read_endio()` function in the `fs/btrfs/inode.c` module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the btrfsencodedreadendio function in the fs/btrfs/inode.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the dbAdjTree() function in the fs/jfs/jfs_dmap.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dbAdjTree function in the fs/jfs/jfsdmap.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Vulnerability of the pvr2_context_exit() function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file – This driver is a Linux kernel-based driver for supporting multimedia devices connected via USB. It allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the pvr2contextexit function in the drivers/media/usb/pvrusb2/pvrusb2-context.c module – The Linux kernel’s USB multimedia device driver architecture relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the amdgpudebugfs regs_smc_read() function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the amdgpudebugfs regssmcread function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c module of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...
The vulnerability of the zram_meta_alloc() function in the zram module of Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the zrammetaalloc function in the zram module of Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the SCADAPack RemoteConnect configuration tool lies in its deserialization mechanism’s flaws, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SCADAPack RemoteConnect configuration tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by loading a malicious...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the improper assignment of permissions to critical resources. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerabilities in the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP are related to the improper assignment of permissions to critical resources. Exploiting these vulnerabilities can allow attackers, operating remotely, to...
The vulnerability of the git-upload-pack method of the go-git library allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the git-upload-pack method in the go-git library is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...
The vulnerability of Veeam Backup & Replication’s virtual and physical systems arises from the limited ability to restrict the path name to the restricted access directory. This allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of Veeam Backup & Replication virtual and physical systems is related to the limited ability to access the directory. Exploiting this vulnerability can allow a malicious actor to influence the integrity and accessibility of the protected information...
The vulnerability of the pkcs15-init personalization utility and the libopensc library, which are part of the software tools and libraries for working with smart cards in OpenSC, allows a violator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pkcs15-init personalization utility and the libopensc library related to the OpenSC software suite involves the use of uninitialized variables due to incorrect checks on the return values of functions. Exploiting this vulnerability could allow an attacker to compromise th...