7849 matches found
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the read_samples() function in the voc.c component of the SoX sound processing software allows a hacker to cause a service failure.
The vulnerability of the readsamples function in the SoX sound processing component voc.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the vhost_user_set_inflight_fd() function in the set of libraries and drivers for DPDK’s fast packet processing allows a attacker to cause a service failure.
The vulnerability of the vhostusersetinflightfd function in the set of libraries and drivers for the DPDK fast packet processing framework is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the startread() function in the wav.c component of the SoX sound processing program allows a hacker to cause a service failure.
The vulnerability of the startread function in the SoX sound processing component wav.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...
The vulnerability of the PDO::quote function in the ext/pdo_sqlite/sqlite_driver.c component of the PHP programming language is related to integer overflow. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the PDO::quote function in the ext/pdosqlite/sqlitedriver.c component of the PHP programming language is related to integer overflow. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability in the alloc.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability in the alloc.c component of the Vim text editor relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the WebSQL component in Microsoft Edge and Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the WebSQL component in Microsoft Edge and Google Chrome relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially create...
The vulnerability of Intel Microcode processors lies in the default access settings, which allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Intel Microcode processors relates to the default access rights settings. Exploiting this vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the mark.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the mark.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the put_qpel_fallback() function in the h.265 Libde265 implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the putqpelfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of Microsoft Edge and Google Chrome browsers, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the split_cmdline() function in the Git distributed version control system allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the splitcmdline function in the distributed version of Git’s version control system is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause...
The vulnerability of the lsx_read_w_buf() function in the formats_i.c component of the SoX sound processing program allows a hacker to cause a service failure.
The vulnerability of the lsxreadwbuf function in the formsi.c component of the SoX sound processing program is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created file...
The vulnerability of the web page rendering module in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Web page rendering module in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...
BIT-ENVOY-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy
Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...
CVE-2024-45806
Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...
CVE-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy
Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...
Denial Of Service (DoS)
vLLM library is vulnerable to Denial of Service DoS. The vulnerability is caused due to improper handling of completions API requests with an empty prompt, which allows an attacker to crash the server, resulting in service disruption...
The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service failures.
The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a malicious actor to cause...