9780 matches found
The vulnerability of the API virConnectListAllNodeDevices in the Libvirt management library, when using the GRID driver, relates to a failure of the operation beyond the buffer boundaries in memory. This vulnerability allows an attacker to trigger a service failure.
The vulnerability of the API virConnectListAllNodeDevices in the Libvirt control library, when using the GRID driver, is related to the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using the virsh...
The vulnerability of the Cyrus IMAP mail server’s annotations relates to the improper assignment of permissions for critical resources, allowing a perpetrator to cause a service failure.
The vulnerability of the server annotation of the Cyrus IMAP mail server is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the `cdf_read_property_info` and `cdf_read_sat` functions in the utility for determining the type of specified files related to integer overflow allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the cdfreadpropertyinfo and cdfreadsat functions, which are used to determine the type of the specified files, is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...
The vulnerability in the `parser_parse_statements` function of the `js-parser-statm.c` component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to trigger a service failure.
The vulnerability of the parserparsestatements function in the js-parser-statm.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform is related to incorrect comparisons. Exploiting this vulnerability could allow a remote attacker to cause a service...
The vulnerability of the `parser_parse_object_initializer` function in the `js-parser-expr.c` component of the JavaScript framework for Internet of Things, JerryScript, and the IoT.js platform, arises due to the insufficient use of the `assert()` function. This allows attackers to trigger a service failure.
The vulnerability of the parserparseobjectinitializer function in the js-parser-expr.c component of the JavaScript engine for Thingscript and the IoT.js platform is related to incorrect comparisons. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the function import_stl() in the import_stl.cc component of the OpenSCAD automated design system, related to writing outside the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the importstl function in the importstl.cc component of the OpenSCAD automated design system is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even caus...
The vulnerability of the testcase_read() function in the src/testcase.c component of the Libsolv library, which is related to buffer overflow in memory, allows a attacker to cause a service failure.
The vulnerability of the testcaseread function in the src/testcase.c component of the Libsolv library is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the ext_get_plugin() function in the syntax analyzer and data modeling tool of YANG Libyang, related to an unvalidated return value, allows a malicious actor to trigger a service failure.
The vulnerability of the extgetplugin function in the syntax analyzer and data modeling tool of the YANG Libyang language is related to the lack of checking for a NULL revision. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the lzma_decompress_buf function in the stream.c component of the Lrzip compression algorithm allows a hacker to cause a service failure after the memory is released.
The vulnerability of the lzmadecompressbuf function in the stream.c component of the Lrzip compression program relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created compressed file...
The vulnerability of the X509_aux_print() function in the OpenSSL library, which allows a hacker to disclose protected information or cause a service failure
The vulnerability of the X509auxprint function in the OpenSSL library is related to reading data beyond the buffer boundaries in memory during the processing of ASN.1 strings. Exploitation of this vulnerability can allow a malicious actor to disclose sensitive information or cause service failure...
The vulnerability of the GetData DBMS, related to the execution of operations outside the buffer in memory, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the GetData database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures due to malicious database...
The vulnerability of the read_yin_container() function in the syntax analyzer and data modeling tool of the YANG Libyang language lies in its unvalidated return value. This allows attackers to trigger a service failure.
The vulnerability of the readyincontainer function in the syntax analyzer and data modeling tool of the YANG Libyang language is related to the lack of checking for NULL values in retval-extr. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the read_yin_leaf() function in the syntax analyzer and tools of the YANG data modeling language Libyang, related to an unvalidated return value, allows attackers to trigger service failures.
The vulnerability of the readyinleaf function in the syntax analyzer and data modeling tool of the YANG Libyang language is related to the lack of checking for NULL values in retval-extr. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the hivex_open function in the Hivex library, which involves reading data beyond the allowed buffer limits, allows an attacker to gain access to confidential data and also trigger a service failure.
The vulnerability of the hivexopen function in the Hivex library involves reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures...
The vulnerability of the `dnn_execute_layer_pad` function in the `libavfilter/dnn/dnn_backend_native_layer_pad.c` file of the FFmpeg multimedia library, related to buffer overflow in memory, allows an attacker to access confidential data, compromise its integrity, and cause a service failure.
The vulnerability of the dnnexecutelayerpad function in the libavfilter/dnn/dnnbackendnativelayerpad.c file of the FFmpeg multimedia library is related to buffer overflows in memory due to insufficient size checking during the memcpy operation. Exploiting this vulnerability can allow an attacker ...
The vulnerability of the ecmaRegexpMatch function in the ecma-regexp-object.c component of the JavaScript for Internet of Things technology, JerryScript, and the IoT.js platform, related to writing beyond buffer boundaries, allows attackers to access sensitive data, compromise its integrity, and cause service failures.
The vulnerability of the ecmaRegexpMatch function in the ecma-regexp-object.c component of the JavaScript for Internet of Things technology, JerryScript, and the IoT.js platform, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to...
The vulnerability in the `parser_parse_function_statement` function of the `js-parser-statm.c` component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to trigger a service failure.
The vulnerability of the parserparsefunctionstatement function in the js-parser-statm.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform is related to incorrect comparisons. Exploiting this vulnerability could allow a remote attacker to cause a...
The vulnerability of the `scanner_literal_is_created` function in the `js-scanner-util.c` component of the JavaScript IoT engine for JerryScript and the IoT.js platform is related to the insufficient use of the `assert()` function. This allows a malicious actor to trigger a service failure.
The vulnerability of the scannerliteraliscreated function in the js-scanner-util.c component of the JavaScript IoT scripting engine, JerryScript, and the IoT.js platform is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote attacker to cause...
The vulnerability of the `xdr_set_page_base` function in the `net/sunrpc/xdr.c` component of the Linux operating system, which is related to the operation of writing data beyond the buffer boundaries, allows a malicious actor to trigger a service failure.
The vulnerability of the xdrsetpagebase function in the net/sunrpc/xdr.c component of the Linux operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a large number o...
The vulnerability of the aresdestroy() and ares_getaddrinfo() functions in the C-ares asynchronous DNS query library involves the use of memory after it is freed, allowing an attacker to cause a service failure.
The vulnerability of the aresDestroy and aresGetAddrInfo functions in the C-ares asynchronous DNS request library is related to the possibility of aresDestroy being called before aresGetAddrInfo has completed. Exploiting this vulnerability could allow a attacker to cause a service failure...