5443 matches found
The vulnerability of the CurrDir component in the microprogramming software for programmable logic controllers AutomationDirect P3-550E allows a intruder to trigger a service failure.
The vulnerability of the CurrDir component in the AutomationDirect P3-550E programmable logic controllers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the jffs2_del_ino_cache() function in the JFFS2 file system of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the jffs2delinocache function in the fs/jffs2/readinode.c file of the JFFS2 file system in the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pep_ioctl() function in the PhoNet protocol implementation in Linux kernel allows a hacker to cause a service failure.
The vulnerability of the pepioctl function in the net/phonet/pep.c module of the PhoNet protocol implementation in the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability can allow a attacker to cau...
The vulnerability of the ax25_dev_device_down() function in the implementation of the Amateur Radio X.25 PLP (Rose) protocol in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ax25devdevicedown function in the net/ax25/ax25dev.c module, which is part of the Amateur Radio X.25 PLP Rose protocol implementation in the Linux operating system, relates to the reutilization of previously freed memory due to concurrent access to resources. Exploiting...
The vulnerability of the `vidtv_s302m_encoder_init()` function in the `drivers/media/test-drivers/vidtv/vidtv_s302m.c` file of the Vidtv driver for the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the vidtvs302mencoderinit function in the drivers/media/test-drivers/vidtv/vidtvs302m.c file of the Vidtv driver for the Linux operating system is related to the lack of code checks for the vzalloc function’s return value. Exploiting this vulnerability could allow an attacker...
The vulnerabilities of the MONGO and ZigBee TLV traffic analyzer in computer networks can be exploited by attackers, causing service interruptions.
The vulnerability of the MONGO and ZigBee TLV traffic analyzer in Wireshark relates to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted packets...
The vulnerability of the Simphony POS component of the Oracle Hospitality Simphony sales management platform allows a perpetrator to gain access to modify, add, or delete data, or to trigger a service failure.
The vulnerability of the Simphony POS component of the Oracle Hospitality Simphony sales management platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions...
Tomcat: WebSocket DoS with incomplete closing handshake
A denial of service DoS vulnerability present in the Apache Tomcat package arises from an incomplete cleanup process. Specifically, WebSocket clients can perpetuate WebSocket connections without proper termination, thereby causing a sustained drain on system resources. This vulnerability...
The vulnerability of Microsoft.NET software platforms and Microsoft Visual Studio development tools is related to buffer overflow attacks, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft.NET software platforms and Microsoft Visual Studio development tools is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
CVE-2024-3761 Missing Authorization on Delete Datasets in lunary-ai/lunary
In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at packages/backend/src/api/v1/datasets is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability allows any user, even those without a valid token, to delete a datas...
CVE-2024-3761
In lunary-ai/lunary, version 1.2.2 contains an unauthorized deletion vulnerability on the DELETE endpoint at packages/backend/src/api/v1/datasets due to missing authorization/authentication. This allows any user (no token required) to delete a dataset, potentially causing data loss or service dis...
CVE-2024-3761 Missing Authorization on Delete Datasets in lunary-ai/lunary
In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at packages/backend/src/api/v1/datasets is vulnerable to unauthorized dataset deletion due to missing authorization and authentication mechanisms. This vulnerability allows any user, even those without a valid token, to delete a datas...
Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows attackers to trigger service failures or disclose protected information.
The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...
Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
Vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
U.S. Dept Of Defense: Out-Of-Bounds Memory Read on ███
Vulnerability description not provided...
The vulnerability of the amdgpu_mca_smu_get_mca_entry() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c driver for the amdgpu core of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the amdgpumcasmugetmcaentry function in the drivers/gpu/drm/amd/amdgpu/amdgpumca.c driver for the Linux operating system’s kernel is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the function ath11kdebugfs_remove_interface(), located in the driver drivers/net/wireless/ath/ath11k/debugfs.c of the wireless adapter ath11k driver for the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the function ath11kdebugfsremoveinterface in the drivers/net/wireless/ath/ath11k/debugfs.c file of the wireless adapter ath11k driver in the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability in the implementation of the SMC kernel of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the implementation of the SMC kernel of the Linux operating system relates to reading memory beyond the boundaries of the allocated buffer. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...