1737 matches found
The vulnerability of the dashboard component of the application scaling framework for AI and Python Ray applications, which allows a hacker to execute arbitrary commands.
The vulnerability of the dashboard framework for scaling AI and Python Ray applications exists due to the failure to address the issues related to the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
The vulnerability of the CMS system Grav CMS, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the CMS system Grav CMS is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created data...
The vulnerability of the lines_with_leading_tabs_expanded() function in the strings.py file of the Python coding formatting tool Black allows a attacker to cause a service failure.
The vulnerability of the lineswithleadingtabsexpanded function in the strings.py file of the Python coding formatting tool Black is related to the use of a regular expression c with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to trigger a service...
CVE-2024-29433
CVE-2024-29433 affects Alldata v0.4.6 via a deserialization vulnerability in the FASTJSON component, allowing attackers to execute arbitrary commands by supplying crafted data. Documents confirm the vulnerable software/version and the underlying cause; no details on exploitation methods beyond th...
CVE-2024-29433
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of Windows operating system kernels is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...
The vulnerability of the Windows Standards-Based Storage Management service in Windows operating systems allows a hacker to cause a service failure.
The vulnerability of the Windows Standards-Based Storage Management service in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created data...
The vulnerability in the implementation of the QUIC network protocol on Windows operating systems allows a attacker to cause a service failure.
The vulnerability of the QUIC network protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created data...
SUSE CVE-2024-1441
An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of...
PT-2024-2246
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The issue is related to insufficient input validation in the Windows Kernel, which can be exploited to cause a denial-of-service condition using specially crafted data. This allows...
AZL-35848 CVE-2024-1441 affecting package libvirt for versions less than 7.10.0-8
An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of...
BIT-PHPMYADMIN-2020-10803
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results in tblgetfield.php and libraries/classes/Display/Results.php. The attacker must be able to insert...
BIT-POSTGRESQL-2023-5869 Postgresql: buffer overrun from integer overflow in array modification
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...
PT-2024-2717
Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description The issue is related to an off-by-one error flaw in the udevListInterfacesByStatus function in libvirt. This flaw occurs when the number of interfaces exceeds the size of the names array. An...
Trimble SketchUp SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...
RICOH Multiple Products Stack Buffer Overflow (CVE-2021-33945)
RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpasupplicant.conf. This vulnerabili...
CVE-2024-22519
An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...
CVE-2024-22520
An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets...
