Vulnerability of TCP components of Linux operating system’s kernel, allowing attackers to cause service failures

The vulnerability of TCP components in Linux operating systems is related to the operation of data out of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Vulnerability of components of Linux operating systems with PowerPC/32-core processors, allowing attackers to cause system failures

The vulnerability of the powerpc/32 kernel components of the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the s390/cio components of Linux kernel, which allow a hacker to trigger a service failure

The vulnerability of the s390/cio components of the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mm/slab components of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/slab components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerabilities of riscv and bpf components in Linux operating systems allow attackers to trigger system failures.

The vulnerability of riscv and bpf components in Linux operating systems is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Media components in Microsoft Edge and Google Chrome allows attackers to compromise privacy, integrity, and accessibility.

The vulnerability of the Media components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise privacy, integrity, and accessibility through a specially crafted HTML page...

Race Condition Attacks against LLMs

These are two attacks against the system components surrounding LLMs: We propose that LLM Flowbreaking, following jailbreaking and prompt injection, joins as the third on the growing list of LLM attack types. Flowbreaking is less about whether prompt or response guardrails can be bypassed, and mo...

编号撤回

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. This CVE number has been withdrawn...

XML External Entity (XXE) Injection

HAPI FHIR is vulnerable to XML External Entity XXE Injection. The vulnerability is due to insecure XML parsing by HAPI FHIR, specifically within the XSLT parsing components, which improperly handle external entity references in XML files. It allows attackers to inject malicious XML content, such ...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

Malicious code in react-domain-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c514bbaadbc88d9b8e95127869e308b2cc8e239d85380ab86c3c7c49706fb891 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11027 Malicious code in ads-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293ac90d50dec59b81bca66b9d0a5d8c0cda050590e84031f86b85671cdcc494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ads-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293ac90d50dec59b81bca66b9d0a5d8c0cda050590e84031f86b85671cdcc494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-pro-components-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a506553d493492c9666be45b4f75b99c3f0a1df10d1c0f3d7296cca695b29787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10999 Malicious code in react-pro-components-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a506553d493492c9666be45b4f75b99c3f0a1df10d1c0f3d7296cca695b29787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10978 Malicious code in icf-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8361b152fc7c673dc95e4055a36459ced57bfc88a733b5e9543c2dc07914156a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icf-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8361b152fc7c673dc95e4055a36459ced57bfc88a733b5e9543c2dc07914156a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the virtual learning environment Moodle, related to the absence of an authentication process that prevents unauthorized access to system elements.

The vulnerability of the virtual learning environment Moodle is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to system components...

The vulnerability of the virtual learning environment Moodle, related to deficiencies in authentication procedures, allows unauthorized users to gain access to system elements.

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to system components...