The vulnerability in the kernel module drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c kernel of the Linux operating system is related to improper checking of power conditions and hardware states. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication device allows a perpetrator to gain unauthorized access to protected information and perform cross-site attacks.

The vulnerability of the web interface for managing Cisco Identity Services Engine ISE and the virtual authentication data collection device Cisco ISE Passive Identity Connector ISE-PIC is related to the lack of security measures taken to protect the web page structure. Exploiting this...

The vulnerability of the page_pool_recycle_in_ring() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pagepoolrecycleinring function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the application software of the Central Medical Information System of the State Health Information System (GIS SZ), related to the unencrypted storage of critical information, allows a perpetrator to disclose identification data.

The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...

The vulnerability of the kmem_cachedestroy() function in the dswstate.c module of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the kmemcacheDestroy function in the dswstate.c module of Linux kernel systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rescan_work_func() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the rescanworkfunc function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), which is used for collecting user authentication data, allows a perpetrator to execute arbitrary commands.

The vulnerability of the application software interface of the Cisco Identity Services Engine ISE and the Cisco ISE Passive Identity Connector ISE-PIC, which are devices for collecting user authentication data, exists due to the lack of measures to neutralize specific elements. Exploiting this...

The vulnerability in the `drivers/net/phy/mscc/mscc_ptp.c` module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/phy/mscc/msccptp.c module of the Linux kernel lies in the lack of memory release after the effective lifespan of the module has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `cifs_signal_cifsd_for_reconnect()` function in the `fs/smb/client/cifsglob.h` and `fs/smb/client/connect.c` files, which are part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifssignalcifsdforreconnect function in the fs/smb/client/cifsglob.h and fs/smb/client/connect.c files, which are part of the SMB client support in Linux kernel, is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the usbnet_read_cmd() function in the include/linux/etherdevice.h library of Linux kernel allows a hacker to induce a service failure.

The vulnerability of the usbnetreadcmd function in the include/linux/etherdevice.h library of Linux kernel operating systems is a flaw in error handling. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of Fortinet FortiClient Windows security devices, which stems from the use of a strictly encrypted cryptographic key, allows attackers to gain unauthorized access to protected information.

The vulnerability of Fortinet FortiClient Windows protection lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the pathInfo URI component of the Apache Tomcat application server allows attackers to circumvent existing security restrictions.

The vulnerability of the pathInfo URI component of the Apache Tomcat application server is related to improper handling of registrations. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of D-Link DHP-W310AV router’s microprogramming software lies in its ability to bypass the authentication mechanism, allowing attackers to execute a “man-in-the-middle” attack.

The vulnerability of D-Link DHP-W310AV router microprogramming software is related to the possibility of bypassing the authentication mechanism. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability in the WasmToJSException script of the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS allows attackers to execute arbitrary code and trigger a service failure.

The vulnerability of the WasmToJSException script in Safari browsers on macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures within the browser context...

The vulnerability of the Managed Configuration component for macOS operating systems allows attackers to increase their privileges.

The vulnerability of the Managed Configuration component for macOS operating systems is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the mbedtls_lms_import_public_key() function in Mbed TLS software allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the mbedtlslmsimportpublickey function in Mbed TLS involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or expose sensitive information...

The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to errors in the certificate validation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. This vulnerability allows a perpetrator to cause service interruptions.

The vulnerability of the ASUS DriverHub tool for installing and updating drivers is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to trigger service failures through specially crafted HTTP requests...

The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the distribution and transaction optimization software in the Apache Seata microservice architecture, related to shortcomings in the deserialization mechanism, allows attackers to trigger service failures.

The vulnerability of distribution software and the improvement of transaction performance in the architecture of Apache Seata microservices is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to trigger service failures through a...

The vulnerability of the IBM Aspera Faspex file-sharing application, related to incorrect session expiration times, allows attackers to compromise the integrity of the protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information from a remote location...

The vulnerability of the system() function in the bin/goahead software for D-Link DIR-816 A2 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the system function in the bin/goahead microprogramming software for D-Link DIR-816 A2 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the microprogramming software of the Aitemi M300 wireless signal amplifiers (MT02) arises from the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the microprogramming software of the Aitemi M300 MT02 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the SSID identifier. Exploiting this vulnerability can allow a remote attacker...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in their dependence on the reverse DNS resolver, which allows a hacker to cause a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the dependence of critical operations on the reverse DNS solution. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

The vulnerability of the Extensions component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Extensions component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications, exposes security flaws in access control for personal information. Exploiting this vulnerability could allow unauthorized actors to gain unauthorized access to...

The vulnerability of the CFNetwork component allows attackers to escalate their privileges on operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS.

The vulnerability of the CFNetwork component in operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems allows a perpetrator to execute arbitrary commands.

The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

The vulnerability of the Find My function in macOS and iPadOS systems allows a perpetrator to disclose protected information.

The vulnerability of the Find My function in macOS and iPadOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer limit of memory, allows a hacker to gain unauthorized access to information.

The vulnerability of the console-based graphic editor ImageMagick is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. This allows attackers to gain unauthorized access to protected information, elevate their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, enhance their privileges, execute...

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol stack allows a hacker to circumvent existing security restrictions and create a L2CAP channel.

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and create a L2CAP channel...

The vulnerability of the formdumpeasysetup() function (/goform/formdumpeasysetup) in D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formdumpeasysetup function /goform/formdumpeasysetup in D-Link DIR-619L router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the mcp-remote proxy server lies in its failure to eliminate special elements used in the operating system command, allowing attackers to execute arbitrary commands.

The vulnerability of the mcp-remote proxy server is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the cloud integrated development environment (IDE) Atheos relates to an incorrect restriction on the path to the restricted access directory. This allows a perpetrator to execute arbitrary files on the server.

The vulnerability of the cloud integrated development environment IDE Atheos is related to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary files on the server remotely...

The vulnerability of the mcp dev tool for testing and debugging MCP servers, MCP Inspector, allows a attacker to perform a CSRF attack.

The vulnerability of the mcp dev tool for testing and debugging MCP servers, MCP Inspector, is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a remote attacker to perform a CSRF attack...

The vulnerability of the control interface of the Citrix NetScaler Application Delivery Controller (formerly Citrix ADC) and the access control system for the virtual environment, Citrix NetScaler Gateway (formerly Citrix Gateway), allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the control plane of the Citrix NetScaler Application Delivery Controller previously Citrix ADC and the access control system for the virtual environment, Citrix NetScaler Gateway previously Citrix Gateway, is related to incorrect input of configuration data. Exploiting this...

The vulnerability of the /pppoe_base.asp file of the jhttpd component of D-link DI-8100 router software allows a hacker to execute arbitrary code.

The vulnerability of the /pppoebase.asp file of the jhttpd component of D-link DI-8100 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the microprogrammed software of D-Link DIR-823-Pro wireless routers allows a intruder to gain unauthorized access to Telnet services.

The vulnerability of D-Link DIR-823-Pro wireless routers’ microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to Telnet services...

The vulnerability of the formSetWizard1() function in the /goform/formSetWizard1 file of the D-Link DIR-619L router’s microprogramming system, which allows a hacker to cause a service failure.

The vulnerability of the formSetWizard1 function in the /goform/formSetWizard1 file of the D-Link DIR-619L router’s microprogramming system is related to the issue where the operation’s output goes beyond the buffer in memory when processing the curTime parameter. Exploiting this vulnerability...

The vulnerability of the software for programming operator panels of the VT series, such as VT-Designer, arises from writing beyond buffer boundaries, allowing a hacker to execute arbitrary code.

The vulnerability of the software for programming operator panels of the VT series, such as VT-Designer, lies in the writing beyond buffer boundaries when processing PM3 files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the INVT HMITool software for developing and managing HMI applications lies in its ability to perform arbitrary code execution when writing data beyond the buffer boundaries.

The vulnerability of the INVT HMITool software for developing and managing HMI applications lies in the issue of buffer overflows during the processing of VPM files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the stack for implementing Profinet RT-Labs P-Net devices lies in the lack of verification of input data during cyclic operations, which allows a malicious actor to trigger a service failure.

The vulnerability of the stack for implementing Profinet RT-Labs P-Net devices is related to the lack of verification of input data for cyclic operations. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted RPC packet...

The vulnerability of the path.normalize() function in the Node.js software platform allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the path.normalize function in the Node.js platform is related to incorrect restrictions on the path name of a directory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the ipsec_road_asp() function in D-Link DI-8200 router software allows a attacker to cause a service failure.

The vulnerability of the ipsecroadasp function in D-Link DI-8200 router microprogramming software is related to buffer overflows in the stack when processing the hostip parameter. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Parameter Handler component in the downloadpass.html file of the FTP server Wing allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Parameter Handler component in the downloadpass.html file of the FTP server Wing is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by introducing malicious...

The vulnerability of D-Link DCS-960L IP camera’s microprogramming software allows a intruder to execute arbitrary code by bypassing the authentication process using an alternative path or channel.

The vulnerability of D-Link DCS-960L IP camera software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Honeywell OneWireless Wireless Device Manager (WDM) and the micro-programming software for Honeywell Experion PKS programmable logic controllers arises from the occurrence of an operation outside the buffer in memory, allowing a intruder to execute arbitrary code.

The vulnerability of Honeywell OneWireless Wireless Device Manager WDM and the micro-programmed software of Honeywell Experion PKS programmable logic controllers lies in the fact that operation outputs go beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execu...