The vulnerability of the LoadPartitionTable function in the gpt.cc component of the GPT disk partitioning tool allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the LoadPartitionTable function in the gpt.cc component of the GPT disk partitioning tool, fdisk, is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the `resize_packet` function in the `fuzz_rfc1035.c` component of the DNS server Dnsmasq allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the resizepacket function in the fuzzrfc1035.c component of the DNS server Dnsmasq is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the check_bad_address function in the Dnsmasq DNS server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the checkbadaddress function in the Dnsmasq DNS server is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the hufUncompress function in the /IlmImf/ImfHuf.cpp component of the OpenEXR image storage software allows a attacker to cause a system failure.

The vulnerability of the hufUncompress function in the /IlmImf/ImfHuf.cpp component of the OpenEXR image storage software, which supports wide dynamic range brightness, is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a...

The vulnerability of the mrwimage.cpp component in the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the mrwimage.cpp component in the Exiv2 metadata management library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Exiv2 metadata management library commands, related to executing a loop with an unreachable exit condition, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library commands is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created image file...

Design/Logic Flaw

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service...

CVE-2023-24837 HGiga PowerStation - Command Injection

HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operation or disrupt service...

CVE-2023-24835 Softnext SPAM SQR - Code Injection

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to perform arbitrary system operation or disrupt service...

CVE-2023-24841

CVE-2023-24841 affects HGiga MailSherlock (MailSherlock query function for connection logs). The vulnerability stems from insufficient filtering of user input, enabling a authenticated remote attacker with administrator privileges to inject and execute arbitrary system commands, potentially perfo...

The vulnerability of the packet processing and fragmentation mechanism in Cisco IOS XE tunnel protocol allows a attacker to trigger a service failure.

The vulnerability of the packet processing and fragmentation mechanism in Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the mc_chroma function (motion.cc) in the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the mcchroma function in the h.265 Libde265 video codec implementation is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failure by using a specially created file...

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. This allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of the sr_do_ioctl() function in the Linux operating system allows a hacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the srdoioctl function in the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure or potentially have other adverse effects...

The vulnerability of the Security Support Provider Interface (SSPI) and the implementation of the Server Message Block (SMB) network protocol in the Squid proxy server allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Security Support Provider Interface SSPI and the implementation of the Server Message Block SMB network protocol in the Squid proxy server is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensiti...

The vulnerability of the ovl_write_iter() function in the file system implementation of overlayfs in Linux kernels allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the ovlwriteiter function in the file system implementation of overlayfs in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

The vulnerability of the SAP NetWeaver AS for Java software platform, related to deficiencies in authentication procedures, allows attackers to gain read, modify, or delete access to data, or to cause service interruptions.

The vulnerability of the SAP NetWeaver AS for Java software platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data, or cause service interruptions...

The vulnerability in the implementation of the TIPC protocol (Transparent Inter-Process Communication) in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the TIPC protocol’s implementation in the Linux operating system is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the brcmf_get_assoc_ies() function in the driver drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c of the Linux kernel allows a attacker to access protected information or cause a service failure.

The vulnerability of the brcmfgetassocies function in the driver drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected...

The vulnerabilities of the functions module_gzip_decompress() and module_xz_decompress() in the kernel/module/decompress.c module of the Linux operating system’s kernel module loading subsystem allow a hacker to cause a service failure.

The vulnerability of the functions modulegzipdecompress and modulexzdecompress in the kernel/module/decompress.c module of the Linux operating system’s kernel module loading subsystem is related to improper checking of error values for pointers. Exploiting this vulnerability could allow an attack...