92298 matches found
The vulnerability of the ath11k_wmi_send_peer_assoc_cmd() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ath11kwmisendpeerassoccmd function in the Linux operating system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the DNS Client component for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the DNS Client component for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows a hacker to gain access to and upload arbitrary files.
The vulnerability of the Mattermost instant messaging application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to and upload arbitrary files...
Уязвимость компонента Chromoting браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Chromoting браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
The vulnerability of the Gimp image processing library, related to integer overflow, allows attackers to execute arbitrary code or cause system failures.
The vulnerability of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...
The vulnerability of the Universal Plug and Play (UPnP) Device Host Service in Windows operating systems allows a hacker to enhance their privileges.
The vulnerability of the Universal Plug and Play UPnP Device Host Service in Windows operating systems is related to unreliable pointer reassignments. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the RDP client FreeRDP, related to the use of memory after it is freed, allows a hacker to trigger a service failure.
The vulnerability of the RDP client FreeRDP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the hci_conn_unlink() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the hciconnunlink function in the net/bluetooth/hciconn.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the goform/SetIpMacBind file in the Tenda TX3 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the goform/SetIpMacBind function in the Tenda TX3 router microprogramming system lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibili...
The vulnerability of Adobe InDesign’s computer design automation tool, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, provided that the user opens a specially crafted file...
The vulnerability of the Substance 3D Stager software lies in its inability to handle buffer overflow attacks, allowing attackers to execute arbitrary code.
The vulnerability of the Substance 3D Stager software lies in its susceptibility to execution outside the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Dnsmasq DNS server, related to errors in the implementation of security checks for standard elements, allows attackers to compromise the integrity of data.
The vulnerability of the Dnsmasq DNS server is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
The vulnerability of the browser’s Background Fetch API programming interface in Google Chrome allows attackers to disclose protected information.
The vulnerability of the Google Chrome browser’s Background Fetch API programming interface is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to disclose sensitive information through a specially created HTM...
The vulnerability of Airoha Technology’s Custom Protocol Bluetooth-chip-based TWS earphones allows a hacker to circumvent existing security restrictions.
The vulnerability of Airoha Technology’s Custom Protocol Bluetooth-chip TWS headphones is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...
The vulnerability of the OpenCode artificial intelligence-based software development agent lies in the lack of authentication for a critical function, allowing attackers to execute arbitrary code.
The vulnerability of the OpenCode artificial intelligence-based software development agent lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the JWT Signing Key Handler component in the OneLogin software, which allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the JWT Signing Key Handler component in the OneLogin AD Connector software allows unauthorized access to protected information in the error-prone data area. Exploiting this vulnerability can enable a malicious actor to gain unauthorized access to sensitive data...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the lack of authentication procedures. This allows attackers to gain access to read profile parameters.
The vulnerabilities of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow attackers to gain read access to profile parameters...
The vulnerability of the WAGO Software Device Sphere centralized control software and the WAGO Software Solution Builder process optimization software lies in the lack of authentication for a critical function, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the WAGO Software Device Sphere centralized control software and the WAGO Software Solution Builder process optimization software lies in the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...
The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool allows a hacker to execute arbitrary code.
The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ARP protocol implementation in TP-Link AX10 and AX1500 router software allows a attacker to execute arbitrary code.
The vulnerability of the ARP protocol implementation in TP-Link AX10 and AX1500 router microprogramming systems is related to information disclosure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the formSetSambaConf() function in the Tenda AC9 router microprogramming software allows a attacker to execute arbitrary commands.
The vulnerability of the formSetSambaConf function in the Tenda AC9 router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the usb.samba.guest.user parameter. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the rtnl_create_link function in the include/net/netdev_lock.h library of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtnlcreatelink function in the include/net/netdevlock.h library of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ui_get_input_value() function in Netgear WG302v2 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the uigetinputvalue function in Netgear WG302v2 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...
The vulnerability of the get_cur_lang_ver() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getcurlangver function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the software for deploying and executing AI models with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to the execution of operations outside of the buffer in memory. This vulnerability allows a malicious actor to execute arbitrary code.
The vulnerability of the software for deploying and executing AI models in NVIDIA Triton Inference Server previously known as TensorRT Inference Server relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitra...
The vulnerability of the Kerberos Helper component in operating systems like macOS, which allows a perpetrator to trigger a service failure.
The vulnerability of the Kerberos Helper component in operating systems like macOS is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a attacker to cause service interruptions...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, related to insufficient protection of registration data, allows attackers to disclose protected information.
The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the ext4_mb_init_backend() function in the fs/ext4/mballoc.c module of the Ext4 file system support module for Linux’s kernel allows a attacker to cause a service failure.
The vulnerability of the ext4mbinitbackend function in the fs/ext4/mballoc.c module of the Ext4 file system support module in the Linux operating system is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the `ice_sriov_set_msix_vec_count()` function in the `drivers/net/ethernet/intel/ice/ice_sriov.c` file of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the icesriovsetmsixveccount function in the drivers/net/ethernet/intel/ice/icesriov.c file of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibili...
The vulnerability of the web server of the Nuance Digital Engagement Platform’s operating system Windows allows a attacker to perform XSS attacks.
The vulnerability of the Windows operating system-based version of the Nuance Digital Engagement Platform’s web server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
The vulnerability of the built-in web server boa (/boafrm/formWlanRedirect) of the TOTOLINK X15 router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...
The vulnerability of the built-in web server boa (/boafrm/formDosCfg) of the TOTOLINK X15 router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the built-in web server boa /boafrm/formDosCfg of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the submit-url parameter. Exploiting this vulnerability allows a remote...
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to execute arbitrary code.
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the SAP NetWeaver Application ABAP software integration platform’s server, related to improper code generation management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the SAP NetWeaver Application ABAP software integration platform is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the `property.c` component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the property.c component in the Linux operating system’s kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the CreateLog method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, as well as in the TeleControl Server Basic, allows a hacker to circumvent security restrictions, read and write arbitrary files, and execute arbitrary code.
The vulnerability of the CreateLog method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security...
The vulnerability of Microprogrammed Software for Intel Arc A-series Graphics and Intel Arc Pro A-series Graphics lies in insufficient testing of exception states, allowing attackers to trigger service failures.
The vulnerability of microprogrammed software for Intel Arc A-series graphics processors and Intel Arc Pro A-series graphics processors is related to insufficient testing of exception states. Exploiting this vulnerability can allow attackers to cause system failures...
The vulnerability of the ice_prepare_for_reset() function in the Intel Ethernet driver for Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the iceprepareforreset function in the Intel Ethernet network adapter driver for Linux operating systems is related to the swapping of pointers L. Exploiting this vulnerability can allow attackers to cause a service failure...
The vulnerability of the macOS operating system’s Shortcuts component allows a hacker to bypass existing security restrictions and execute arbitrary code.
The vulnerability of the macOS operating system’s Shortcuts component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code by sending specially crafted...
The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the send parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the verbose parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory when processing the prompt parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the function in gf_m2ts_process_pmt of the multimedia platform GPAC, which allows a intruder to cause a service failure
The vulnerability in the gfm2tsprocesspmt function of the multimedia platform GPAC involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the PSDInput::read_native_scanline() function in the src/psd.imageio/psdinput.cpp module of the OpenImageIO library allows a malicious actor to access protected information or cause a service failure.
The vulnerability of the PSDInput::readnativescanline function in the src/psd.imageio/psdinput.cpp module of the OpenImageIO library is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause...
The vulnerability of Prisma Access Browser lies in the lack of authentication checks for a critical function, allowing attackers to escalate their privileges.
The vulnerability of Prisma Access Browser is related to the lack of authentication checks for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
The vulnerability of the multi-platform SCADA system KROON-TM, related to the use of a rigidly encrypted cryptographic key for the SSL certificate, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the multi-platform SCADA system KROON-TM is related to the use of a rigidly encrypted cryptographic key for the SSL certificate. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the E-Staff automated recruitment process system, related to errors in data filtering during file recording, allows a perpetrator to execute arbitrary commands.
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering during the writing of information into files. Exploiting this vulnerability can allow a malicious actor to reset the administrator’s credentials and execute arbitrary commands...
The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, allows attackers to cause system failures or gain unauthorized access to protected information.
The vulnerability of the kernel mode driver nvlddmkm.sys of NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain unauthorized...