2810 matches found
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.SparseTensorDenseAdd causes a nullptr during kernel execution , triggering a denial of service attack...
jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes
pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...
CVE-2021-0155
Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2021-0155
Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
kernel: drm/amdkfd: NULL pointer dereference in kfd_parse_subtype_iolink()
An issue was discovered in the Linux kernel through 5.16-rc6. kfdparsesubtypeiolink in drivers/gpu/drm/amd/amdkfd/kfdcrat.c lacks check of the return value of kmemdup...
kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...
kernel: drm/amdkfd: NULL pointer dereference in kfd_parse_subtype_iolink()
An issue was discovered in the Linux kernel through 5.16-rc6. kfdparsesubtypeiolink in drivers/gpu/drm/amd/amdkfd/kfdcrat.c lacks check of the return value of kmemdup...
kernel: sfc_ef100: NULL pointer dereference in ef100_update_stats()
An issue was discovered in the Linux kernel through 5.16-rc6. ef100updatestats in drivers/net/ethernet/sfc/ef100nic.c lacks check of the return value of kmalloc...
The vulnerability of the QuerySet.explain() function implementation in the Django web application framework allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the QuerySet.explain function implementation in the Django web application framework is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...
GeoServer Input Validation Error Vulnerability
GeoServer is written in Java open source software server . GeoServer has an input validation error vulnerability that can be exploited by an attacker to perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and lead to arbitrary code execution...
The vulnerability of the vlc_input_attachment_New component in the VLC Media Player software allows a hacker to gain access to confidential data and also cause a service failure.
The vulnerability of the vlcinputattachmentNew component in the VLC Media Player software is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a speciall...
The vulnerability of the __Parse_indx component in the VLC Media Player allows a attacker to access confidential data and also cause a service failure.
The vulnerability of the Parseindx component in the VLC Media Player lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a specially created .avi file...
CVE-2022-24847 Improper Input Validation in GeoServer
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The GeoServer security mechanism can perform an unchecked JNDI lookup, which in turn can be used to perform class deserialization and result in arbitrary code execution. The same can...
CVE-2022-24818
GeoTools is an open source Java library that provides tools for geospatial data. The GeoTools library has a number of data sources that can perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and result in arbitrary code execution. Similar to the Log4J case,...
CVE-2022-24818
CVE-2022-24818 – GeoTools is an open‑source Java library for geospatial data. It is affected by unchecked JNDI lookups that can lead to class deserialization and arbitrary code execution when JNDI names are user‑provided. The vulnerability requires admin‑level login to trigger, and is mitigated b...
GeoServer 输入验证错误漏洞
GeoServer is written in Java open source software server . GeoServer has an input validation error vulnerability that can be exploited by an attacker to perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and lead to arbitrary code execution...
The vulnerability of the RTP decoder, a component for decoding MPEG-4 multimedia platforms like GPAC, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the RTP decoder used for decoding MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...
PT-2022-3142 · Unknown · Igss Data Server
Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22073 Description: A buffer copy without checking the size of the input issue exists, potentially leading to a stack-based buffer overflow and remote code execution when an...
The vulnerability of the config_input function in the libavfilter/vf_gblur.c component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the configinput function in the libavfilter/vfgblur.c file of the FFmpeg multimedia library involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the get_line function in the read.c component of the Fig2dev file-formatting utility allows a attacker to cause a service failure.
The vulnerability of the getline function in the read.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure remotely...