The vulnerability of Okular’s PDF viewing software lies in the insufficient validation of input data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.

The vulnerability of Okular’s PDF viewing software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the Samba networking communication package lies in the reading of data beyond the allowed buffer size, allowing an attacker to cause a service failure.

The vulnerability of the Samba networking communication package is related to an error where “log level = 3” is displayed when the character conversion fails. This error results in a string from the user being printed. Exploiting this vulnerability can allow a remote attacker to cause service...

The vulnerability of the xbean-reflect/JNDI library component from Jackson-databind allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xbean-reflect/JNDI library component related to Jackson-databind involves the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the TFTP microprogramming software used in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices allows a intruder to cause service interruptions.

The vulnerability of the TFTP microprogramming software used in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Google Chrome browser’s presentation API involves the use of a memory area after it is freed. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s presentation API relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the WordPress website content management system lies in the lack of a mechanism for managing privileges. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WordPress website content management system is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the GPU Display Driver’s graphical driver API involves unsafe management of privileges, allowing attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GPU Display Driver’s graphics driver API is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the MuPDf PDF viewer program, related to the operation exceeding the allowed buffer data limits, allows a hacker to trigger a service failure.

The vulnerability of the MuPDf PDF viewer program is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of Blink’s web page display mechanism in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Mojo messaging library in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability in the web interface for managing microprogramming software on Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 routers allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the web-based management interfaces for Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 VPN routers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by sending specially...

The vulnerability affects the implementation of the COOKIE-ECHO extension for WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android. This vulnerability allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the COOKIE-ECHO extension implementation in WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure or...

The vulnerability of microprogrammed software in programmable logic controllers such as CompactLogix 5370 L1, CompactLogix 5370 L2, CompactLogix 5370 L3, Compact GuardLogix 5370, ControlLogix 5570, and GuardLogix 5370, related to the execution of a loop with an unavailable exit condition, allows a intruder to cause a service failure.

The vulnerability of microprogrammed software in programmable logic controllers such as CompactLogix 5370 L1, CompactLogix 5370 L2, CompactLogix 5370 L3, Compact GuardLogix 5370, ControlLogix 5570, and GuardLogix 5370, related to the execution of a loop with an unreachable exit condition...

(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems allows a hacker to cause a service failure or gain increased privileges.

The vulnerability of the iSCSI subsystem in Linux operating systems relates to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause system failures or increase their privileges through specially created Netlink messages...

The vulnerability of the is_blog_installed function (wp-includes/functions.php) in the WordPress content management system involves a lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.

The vulnerability of the isbloginstalled function in the WordPress content management system’s functions.php file is related to improper checking of whether the WordPress system has been installed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromi...

The vulnerability of the Yaws WebDAV server implementation lies in the improper restriction of XML links to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Yaws WebDAV server implementation is related to XXE injections. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Brotli data compression algorithm lies in the lack of a mechanism to verify the size of the copied data. This allows attackers to compromise the integrity of the data and also cause service failures.

The vulnerability of the Brotli data compression algorithm is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the data and also cause service interruptions...

The vulnerability of the prive/formulaires/configurer_preferences.php component of the SPIP content management system, related to a lack of mechanism for managing code generation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the prive/formulaires/configurerpreferences.php component of the SPIP content management system is related to a lack of mechanisms for managing code generation. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity...

CVE-2021-27275

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...