3797 matches found
The vulnerability of the snapd package management tool, related to improper validation of input data, allows a malicious actor to trigger a service failure.
The vulnerability of the snapd package management tool is related to improper file type checking during the extraction of snap packages. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability in the `arch/s390/boot/decompressor.c` component of the Linux operating system, related to copying buffers without checking the input data, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in the arch/s390/boot/decompressor.c component of the Linux operating system involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the GIMP graphic editor arises from the possibility of an operation exceeding the buffer boundaries in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the GIMP graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures due to the malicious file...
The vulnerability of the `createNewClientSessionWithId()` function in the `GenericMediaServer` component of the streaming multimedia Live555 library lies in its reliance on memory management after it is freed. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the createNewClientSessionWithId function in the GenericMediaServer component of the streaming multimedia Live555 library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise i...
The vulnerability of the miEnumattr() function in the fs/ntfs3 component of the Linux operating system, which allows for buffer copying without checking input data. This vulnerability enables an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the miEnumattr function in the fs/ntfs3 component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...
The vulnerability of the Parse function in the Go programming language, which allows a hacker to trigger a service failure
The vulnerability of the Parse function in the Go programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the decode_deliver() function in the OFono mobile communication interface, related to the issue of operations going beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the decodedeliver function in the OFono mobile communication interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...
The vulnerability of the Samba networking communication package and the ldb database, related to uncontrolled resource consumption, allows a hacker to cause service failures.
The vulnerability of the Samba networking communication package and the ldb database is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the universal monitoring system Zabbix, related to the distribution of resources without any restrictions or regulations, allows a intruder to trigger a service failure.
The vulnerability of the Zabbix universal monitoring system is related to the use of excessive resources without proper restrictions or controls. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the software for implementing network routing on Unix-like systems is related to improper validation of the specified data type. This allows a malicious actor to cause service failures.
The vulnerability of the FRRouting software implementation for Unix-like systems is related to improper validation of the specified data type. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird relates to the use of the NULL pointer pointer, which allows an attacker to trigger a service failure.
The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to the use of the NULL pointer. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Clojure programming language interpreter, related to the deserialization of unreliable data, allows attackers to trigger a service failure.
The vulnerability of the Clojure programming language interpreter is related to the deserialization of unreliable data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the dispose_list function in the vfs component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the disposelist function in the vfs component of the Linux operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Python Library Django 4.2.x < 4.2.16 / 5.0.x < 5.0.9 / 5.1.x < 5.1.1 Multiple Vulnerabilities
The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.16, 5.0.x prior to 5.0.9 or 5.1.x prior to 5.1.1. It is, therefore, affected by multiple vulnerabilities as disclosed in Django's September 3rd 2024 security advisory: - urlize and urlizetrunc were subject to a...
kernel: mm/huge_memory: don't unpoison huge_zero_folio
A vulnerability was found in the Linux kernel's memory management component in the unpoisonmemory function, where it involves improper handling of hugezerofolio when memory failures occur, which can lead to a kernel panic due to an erroneous reference count...
kernel: mm/huge_memory: don't unpoison huge_zero_folio
A vulnerability was found in the Linux kernel's memory management component in the unpoisonmemory function, where it involves improper handling of hugezerofolio when memory failures occur, which can lead to a kernel panic due to an erroneous reference count...
The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms for corporate information lies in improper validation or processing of exceptional conditions, allowing attackers to trigger service failures.
The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to the improper handling of requests originating from unauthorized IP addresses. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
WordPress WC Marketplace Plugin <= 4.2.0 is vulnerable to Privilege Escalation
Software WC Marketplace Type Plugin Vulnerable versions = 4.2.0 Fixed in 4.2.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-8289 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 9025ce00a31d Credits wesley...
The vulnerability of the rfbClientCleanup() function in the cross-platform library LibVNCServer allows a attacker to cause a service failure.
The vulnerability of the rfbClientCleanup function in the cross-platform library LibVNCServer component of libvncclient is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
PT-2024-31489
Name of the Vulnerable Software and Affected Versions Django versions 4.2.16, 5.0.9, and 5.1.1 Description An issue was discovered in the django.contrib.auth.forms.PasswordResetForm class, which allows remote attackers to enumerate user e-mail addresses by sending password reset requests and...