Linux kernel DoS

The vulnerability of the Linux operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Huawei CV81-WDM FW DoS

The vulnerability of the microprogramming software in Huawei CV81-WDM FW multifunctional devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created malware package...

ImageIO Component Unauthenticated Access DoS

The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS operating systems, iCloud for Windows service, and the multimedia player iTunes for Windows lies in its ability to read data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain...

LibXfont Symbolic Link DoS

The vulnerability of the LibXfont library is related to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability allows an attacker to cause service failures...

LibRaw dcraw_common.cpp Heap Buffer Overflow DoS

The vulnerability of the dcrawcommon.cpp component in the LibRaw image processing library is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, an...

Qualcomm Embedded Kernel Code Execution

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to improper processing of parallel operations by the supervisor for enabling or disabling IRQ signals. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

DNS Library Parse Component Confidential Data Compromise

The vulnerability of the parse.c component in the DNS LDNS library is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Libgit2 Path Traversal DoS

The vulnerability of the path.c component in the Git method implementation in the C language using Libgit2 involves the use of a name with an incorrect reference. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and caus...

Ethernet encapsulation protocol MITM

The vulnerability of the Ethernet encapsulation protocol lies in the ability to combine headers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or execute a “Man-in-the-Middle” attack...

LibRaw internal/dcraw_common.cpp Heap Buffer Overflow DoS

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Linux kernel binder.c Buffer Overflow DoS

The vulnerability of the binder.c component in Linux operating systems is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Vim Command Line Access

The vulnerability of the Vim text editor’s command line interface is related to the lack of measures to clean input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Cron Pointer Arithmetic DoS

The vulnerability of the Cron task scheduler in UNIX-like operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a perpetrator to cause service failures...

Linux drivers/infiniband/core/ucma.c Buffer Overflow DoS

The vulnerability in the Linux operating system’s kernel component, drivers/infiniband/core/ucma.c, relates to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...

Vim findfile.c Data Compromise

The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

NetKit-rsh Remote Execution

The vulnerability of the NetKit-rsh remote execution program lies in the fact that it only performs a superficial check on the object’s return value. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the malicious rsh server...

Ghostscript Buffer Overflow DoS

The vulnerability of the Ghostscript document processing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Dpkg Dpkg::Source::Archive Confidential Data Compromise

The vulnerability of the Dpkg::Source::Archive component of the package manager Dpkg is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

LibRaw rollei_load_raw() Heap Buffer Overflow DoS

The vulnerability of the rolleiloadraw function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and caus...

GPSd Buffer Overflow DoS

The vulnerability of the tracking demon for GPS receivers, GPSd, is related to buffer overflow in the stack. Exploiting this vulnerability allows a hacker to access confidential data, compromise its integrity, and cause service failures...