2269 matches found
The vulnerability of the system administration utility is related to insecure management of privileges, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the system administration utility is related to an error during the normalization of umask. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the `re_parse_char_escape` function in the `re-parser.c` component of the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform, related to buffer overflow attacks, allows attackers to access sensitive data, compromise its integrity, and cause service failures.
The vulnerability of the reparsecharescape function in the re-parser.c component of the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the lys_node_free() function in the syntax analyzer and modeling tool of the YANG Libyang language, related to the insufficient use of the assert() function, allows attackers to trigger a service failure.
The vulnerability of the lysnodefree function in the syntax analyzer and modeling tool of the YANG Libyang language is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the lyxml_parse_mem() function in the syntax analyzer and data modeling tool YANG Libyang, related to an uncontrolled recursion, allows attackers to cause service failures.
The vulnerability of the lyxmlparsemem function, a syntax analyzer and tool for data modeling in the YANG Libyang language, is related to an uncontrolled recursion in the lyxmlparseelem function. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the GPL eXosip library, related to pointer dereferencing errors, allows a violator to trigger a service failure.
The vulnerability of the GPL eXosip library is related to errors in processing certain 3xx redirect responses. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the autoindex module of the NGINX server, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the NGINX server’s autoindex module is related to incorrect processing of years with four or more digits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of TheFuck programming language package, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity and cause service failures.
The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...
The vulnerability of the Drupal CMS system’s kernel, related to improper authentication, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Drupal CMS system’s kernel is related to incorrect authorization when read-only mode is set to FALSE via jsonapisettings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Handlebars template creation tool is related to errors in code generation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Handlebars template creation tool is related to errors in code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the gray_split_cubic function in the Rlottie animation-generation library, related to buffer-out writing, allows attackers to compromise data integrity and cause service failures.
The vulnerability of the graysplitcubic function in the Rlottie animation playback library is related to the writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause service failures due to the malicious animated sticker...
The vulnerability in the `lit_read_code_unit_from_utf8` function of the `lit-strings.c` component in the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform, related to buffer-overflow writing, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the litreadcodeunitfromutf8 function in the lit-strings.c component of the JavaScript IoT scripting engine for IoTScript and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to sensitive data,...
The vulnerability of the SSL-Proxy function of the anonymous web browser Tor allows a perpetrator to trigger a service failure.
The vulnerability of the SSL-Proxy function of the anonymous web browser Tor is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Prism syntax extraction tool, related to errors in resource release, allows a perpetrator to cause a service failure.
The vulnerability of the Prism syntax extraction tool is related to errors in resource release. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP implementations allows a attacker to cause service failures.
The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP protocols is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IP packets...
The vulnerability of the Addressable library, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Addressable library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the getMultipartRequestHandler method in the Apache Struts software framework allows a hacker to induce a service failure.
The vulnerability of the getMultipartRequestHandler method in the Apache Struts software framework is related to resource release errors. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Azure Sphere operating system, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of the Azure Sphere operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the Vijeo Designer software lies in the insufficient checking of unusual or exceptional states, which allows a perpetrator to trigger a service failure.
The vulnerability of the Vijeo Designer software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application, which arises due to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of the graphic editor application for the Adobe Creative Cloud Desktop Application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...