92298 matches found
The vulnerability of the imlib2 graphic library, caused by integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of the imlib2 graphic library for 32-bit platforms arises from integer overflows memory writes beyond the boundaries of the memory buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created large-sized image...
The vulnerability of the libhevc library of the Android Media Framework service allows a hacker to execute arbitrary code.
The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...
The vulnerability of the libhevc library of the Android Media Framework service allows a hacker to execute arbitrary code.
The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process remotely...
The vulnerability of the Adobe XMP-Toolkit-SDK software, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to circumvent the ASLR protection mechanism and gain unauthorized access to protected information.
The vulnerability of the Adobe XMP-Toolkit-SDK lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information...
The vulnerability of the magick-distribute-cache service in the console-based image editing tool ImageMagick allows a hacker to disclose protected information.
The vulnerability of the magick-distribute-cache service in the console-based image editing tool ImageMagick is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Mediaserver application’s libhevc service in the Android operating system allows a hacker to cause a service failure.
The vulnerability of the Mediaserver application’s libhevc service stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure memory corruption by using a specially created file...
The vulnerability of the IPTC metadata writing module in the console-based image editing tool ImageMagick allows attackers to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the IPTC writing module in the console-based image editing tool ImageMagick is related to the escape of operations from the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected...
The vulnerability of the console-based graphic editor ImageMagick, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the API CONSUMER_GROUP_DESCRIBE mechanism used by the Apache Kafka messaging broker allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the API CONSUMERGROUPDESCRIBE mechanism used by the Apache Kafka messaging broker is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Ollama’s system for launching and managing large language models, related to the exposure of system data to unauthorized individuals, allows a violator to trigger a service failure.
The vulnerability of Ollama’s system for running and managing large language models is related to the exposure of system data to unauthorized individuals. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the decoder in the MSL console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the MSL decoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the ASHLAR encoder in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the decoder in the console-based ImageMagick graphics editor allows a hacker to trigger a service failure.
The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the permitted range in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the raw image format component in the console-based graphic editor ImageMagick allows a hacker to exploit it to disclose protected information.
The vulnerability of the raw image format component of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the MSL encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor allows a hacker to trigger a service failure.
The vulnerability of the magick-distribute-cache service in the console-based imageMagick graphics editor is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick allows a hacker to induce a service failure.
The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the WaveletDenoiseImage method in the console-based image editing tool ImageMagick, which allows attackers to trigger a service denial.
The vulnerability of the WaveletDenoiseImage method in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the console-based graphic editor ImageMagick, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Vulnerability in the media framework (libhevc) of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability in the Android operating system’s Media Framework libhevc is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the console-based graphic editor ImageMagick, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.
The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...
The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mechanism for displaying discussions about commit messages and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the mechanism for displaying commit discussions and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the mirroring mechanism of the Git-based software platform for collaborative code development, GitLab EE, allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the repository mirroring mechanism of the Git-based software platform for collaborative code development in GitLab CE/EE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...
The vulnerability of the console-based graphic editor ImageMagick lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the mechanism used by Git to resolve programmatic platform names for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the mechanism for resolving Git-link names in the software platform based on Git for collaborative code development in GitLab CE/EE is related to the use of a name with an incorrect link. Exploiting this vulnerability could allow a malicious actor to compromise the integrity ...
The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab EE allows a violator to compromise the confidentiality of the protected information.
The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...
The vulnerability of the console-based graphic editor ImageMagick, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.
The vulnerability of the console-based graphic editor ImageMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the console-based graphic editor ImageMagick, related to pointer manipulation, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the use of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the console-based graphic editor ImageMagick, related to executing a loop with an unavailable exit condition, allows a hacker to cause a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the CheckPrimitiveExtent function in the console-based graphic editor ImageMagic allows a hacker to cause a service failure.
The vulnerability of the CheckPrimitiveExtent function in the console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the console-based graphic editor ImageMagick, related to uncontrolled recursion, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to induce a service failure.
The vulnerability of the libhevc library in the Media Framework component of the Android operating system is related to improper error handling during memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the FileHandler component in the Open Asset Import Library (Assimp) library allows a hacker to execute arbitrary code.
The vulnerability of the FileHandler component in the Open Asset Import Library Assimp library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the gplotMakeOutput function in the Leptonica image processing library allows a hacker to execute any command they desire.
The vulnerability of the gplotMakeOutput function in the Leptonica image processing library is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to execute any command remotely using the argument gplot rootname...
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимость платформы для мониторинга и наблюдения Grafana связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...
Уязвимость компонента libtiff/tif_open.c библиотеки libtiff, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимость компонента libtiff/tifopen.c библиотеки libtiff связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
The vulnerability of the Traffic Management User Interface (TMUI) of BIG-IP application protection tools allows a hacker to execute arbitrary commands, create or delete files.
The vulnerability of the Traffic Management User Interface TMUI of BIG-IP application protection tools is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands, create or delete files remotely...
The vulnerabilities of OPC UA data transfer protocol implementations in industrial networks, related to uncontrolled resource consumption, allow attackers to cause service failures.
The vulnerability of implementations of data transfer specifications in industrial networks OPC UA is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Zabbix Agent 2 component of the Zabbix IT-infrastructure monitoring system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Zabbix Agent 2 component of the Zabbix IT infrastructure monitoring system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the libhevc library of the Android Media Framework service allows a hacker to execute arbitrary code.
The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the modular IRC server InspIRCd, which allows a intruder to trigger a service failure
The vulnerability of the modular IRC server InspIRCd arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the library for creating and editing PDF documents in OpenPDF, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.
The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
The vulnerability of the hxxx_AnnexB_to_xVC() function in the Videolan VLC media player allows a hacker to execute arbitrary code.
The vulnerability of the hxxxAnnexBtoxVC function in the Videolan VLC media player lies in its ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the playback of specially crafted videos...
The vulnerability of the `psf_binheader_writef` function in the `common.c` file of the `libsndfile` library in the Astra Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data, or cause service failures.
The vulnerability of the psfbinheaderwritef function in the common.c file of the libsndfile library in the Astra Linux operating system is related to a buffer overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of Google Chrome’s SwiftShader library allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s SwiftShader library is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome’s user interface allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s user interface relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...