5254 matches found
The vulnerability of Okular’s PDF viewing software lies in the insufficient validation of input data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.
The vulnerability of Okular’s PDF viewing software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browser allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially created HTML page...
The vulnerability of DCE/RPC DNS software for communicating with Samba network drives relates to default access rights settings, allowing a perpetrator to cause service failure.
The vulnerability of the DCE/RPC DNS software component for communicating with Samba network drives is related to an error in the RPC dnsserver communication channel, which allows for changes to DNS records and zones. Exploiting this vulnerability can enable a remote attacker to cause service...
The vulnerability of Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for verifying the size of copied data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity...
The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the Google Chrome browser’s presentation API involves the use of a memory area after it is freed. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome browser’s presentation API relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the TFTP microprogramming software used in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices allows a intruder to cause service interruptions.
The vulnerability of the TFTP microprogramming software used in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability affects the implementation of the COOKIE-ECHO extension for WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android. This vulnerability allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the COOKIE-ECHO extension implementation in WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure or...
The vulnerability in the web interface for managing microprogramming software on Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 routers allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the web-based management interfaces for Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 VPN routers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by sending specially...
The vulnerability of the Mojo messaging library in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the WordPress website content management system lies in the lack of a mechanism for managing privileges. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WordPress website content management system is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the Samba networking communication package lies in the reading of data beyond the allowed buffer size, allowing an attacker to cause a service failure.
The vulnerability of the Samba networking communication package is related to an error where “log level = 3” is displayed when the character conversion fails. This error results in a string from the user being printed. Exploiting this vulnerability can allow a remote attacker to cause service...
The vulnerability of the MuPDf PDF viewer program, related to the operation exceeding the allowed buffer data limits, allows a hacker to trigger a service failure.
The vulnerability of the MuPDf PDF viewer program is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the xbean-reflect/JNDI library component from Jackson-databind allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the xbean-reflect/JNDI library component related to Jackson-databind involves the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of Blink’s web page display mechanism in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the GPU Display Driver’s graphical driver API involves unsafe management of privileges, allowing attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the GPU Display Driver’s graphics driver API is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...
(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems allows a hacker to cause a service failure or gain increased privileges.
The vulnerability of the iSCSI subsystem in Linux operating systems relates to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause system failures or increase their privileges through specially created Netlink messages...
The vulnerability of the is_blog_installed function (wp-includes/functions.php) in the WordPress content management system involves a lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.
The vulnerability of the isbloginstalled function in the WordPress content management system’s functions.php file is related to improper checking of whether the WordPress system has been installed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromi...
The vulnerability of the Yaws WebDAV server implementation lies in the improper restriction of XML links to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Yaws WebDAV server implementation is related to XXE injections. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...