92298 matches found
The vulnerability of the kzalloc() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the kzalloc function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory when processing the “ls” parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory when processing the SIZE parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the multimedia platform GPAC, related to the assignment of the NULL pointer, allows a perpetrator to trigger a service failure.
The vulnerability of the multimedia platform GPAC is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the mcp251x_stop() function in the drivers/net/can/spi/mcp251x.c module – This driver supports network devices of the Linux kernel, which can be exploited by attackers to cause service failures.
Vulnerability of the mcp251xstop function in the drivers/net/can/spi/mcp251x.c module – The Linux kernel’s CAN network device driver relies on the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the formWifiMacFilterSet function in the Tenda i12 wireless access point’s microprogramming software allows a intruder to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formWifiMacFilterSet function in the Tenda i12 wireless access point’s microprogramming software lies in the reading of data outside the buffer in memory when processing the index parameter. Exploiting this vulnerability allows a remote attacker to compromise the...
The vulnerability of the HTTP Header Handler component in the http_request_parse function of the D-Link DAP-1562 wireless access point software allows a attacker to compromise the confidentiality, accessibility, and integrity of the protected information.
The vulnerability of the HTTP Header Handler component in the httprequestparse function of the D-Link DAP-1562 wireless access point’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the octeontx2-pf component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the octeontx2-pf component in the Linux operating system’s kernel is related to resource management errors in the cn10kallocleafprofile function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.
The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the stigdpatomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the SCSI component in the Linux operating system is related to a memory leak in the qedfallocandinitsb function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.
The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the stihqvdpatomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the netdevsim component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the netdevsim component in the Linux operating system’s kernel is related to improper handling of the network packet header in the nsimdevhealthbreakwrite function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of the Server component: The Replication function of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server database management system’s replication component is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Vulnerability of the Server component: The Replication function of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server database management system’s replication component is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the Linux operating system’s kernel tracing component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel tracing component is related to errors in resource management within the function tracingcpumaskwrite. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the igen6_register_mci() function in the drivers/edac/igen6_edac.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the igen6registermci function in the drivers/edac/igen6edac.c module of the Linux kernel is related to reclamation processes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the SSH plugin of the JetBrains Toolbox, a set of development tools, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the SSH plugin in the JetBrains Toolbox suite is related to incorrect verification of the certificate’s authenticity. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...
The vulnerability of the SAP Commerce Cloud platform, related to the transmission of critical information in open text, allows attackers to disclose protected information.
The vulnerability of the SAP Commerce Cloud e-commerce platform lies in the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the SAP NetWeaver software integration platform, related to incorrect authorization, allows a perpetrator to execute arbitrary code.
The vulnerability of the SAP NetWeaver software integration platform is related to incorrect authorization. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the FortiIsolator browser isolation platform arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of the FortiIsolator browser isolation platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created HTTP...
The vulnerability of the web interface of the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to elevate their privileges and execute arbitrary commands.
The vulnerability of the web interface of the microprogrammed software router EDIMAX BR-6478AC is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands...
The vulnerability of the software URL processor for Cisco Webex App allows a perpetrator to execute arbitrary commands.
The vulnerability of the software URL processor for Cisco Webex App relates to the ability to download files from untrusted sources. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands when a user accesses a specially crafted link...
The vulnerability of the net/netfilter/xt_IDLETIMER.c module in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/netfilter/xtIDLETIMER.c module in the Linux operating system is related to incorrect resource blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” involves deficiencies in access control, allowing attackers to elevate their privileges to the root level.
The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to the root level...
The vulnerability of the iSurvey Module component of the software for creating and processing scenarios in Oracle Scripting of the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the system.
The vulnerability of the iSurvey Module component of the software for creating and processing scenarios in Oracle Scripting, a system for automating business activities within the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could all...
The vulnerability of the parse_sec_desc() function in the fs/smb/server/smbacl.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the parsesecdesc function in the fs/smb/server/smbacl.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the structure of const nla_policy nl80211_policy{} in the net/wireless/nl80211.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the const nlapolicy nl80211policy structure in the net/wireless/nl80211.c module of the Linux kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the BIOS microprogramming system in Dell laptops allows a hacker to execute arbitrary code.
The vulnerability of the BIOS microprogramming system in Dell laptops is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vulnerability of the dce110_disable_stream() function in the drivers/gpu/drm/amd/display/dc/dce110/dce110_hw_sequencer.c file – This is a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. It allows attackers to cause service failures.
Vulnerability of the dce110disablestream function in the drivers/gpu/drm/amd/display/dc/dce110/dce110hwsequencer.c module – The driver for AMD GPU Direct Rendering Infrastructure in Linux operating systems is vulnerable to uncontrolled resource consumption. Exploiting this vulnerability could all...
The vulnerability of the hugetlb component of the try_get_folio() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hugetlb component in the trygetfolio function of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the command-line interface (CLI) of the PAN-OS operating system, which allows a perpetrator to gain unauthorized access to protected information
The command-line interface CLI of the PAN-OS operating system has vulnerabilities due to the lack of measures to neutralize specific elements. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information...
The vulnerability of the Linux operating system’s kernel, related to state management errors, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the ethnlreq_getPhydev() function in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the ethnlreqgetPhydev function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications (VSTA) is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.
The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications VSTA is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of Google Chrome and Microsoft Edge browsers, related to the ability to utilize memory after deallocation, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Google Chrome, related to errors in the implementation of security checks for standard elements, allows attackers to escalate their privileges.
The vulnerability of Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...
The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to incorrect authorization, allows a violator to disclose protected information.
The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper authorization. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
The vulnerability of the au_read_header function in the src/au.c component of the Libsndfile library for reading and writing audio files allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the aureadheader function in the src/au.c file of the Libsndfile library, which is used for reading and writing audio files, is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity,...
The vulnerability of the section_nr_to_pfn() function in the include/linux/mmzone.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the sectionnrtopfn function in the include/linux/mmzone.h module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the modTMSM component in the Trend Micro Apex Central security monitoring and management tool allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the modTMSM component in the Trend Micro Apex Central security management and monitoring tool is related to insufficient checking of incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the `ovl_dentry_update_reval()` function in the `fs/overlayfs/copy_up.c` file of the Linux kernel file system allows a attacker to cause a service failure.
The vulnerability of the ovldentryupdatereval function in the fs/overlayfs/copyup.c file of the Linux kernel file system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the bpf_link_show_fdinfo() function in the kernel/bpf/syscall.c module of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the bpflinkshowfdinfo function in the kernel/bpf/syscall.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected...
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition, related to deficiencies in the authentication mechanism, allows a malicious actor to influence the integrity of the protected information.
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the protected information...
Vulnerability of the dsps_probe() function in the drivers/usb/musb/musb_dsps.c module – The driver for supporting USB devices in Linux kernels allows a hacker to cause a service failure.
Vulnerability of the dspsprobe function in the drivers/usb/musb/musbdsps.c module – The Linux kernel’s USB device support driver is vulnerable due to a pointer issue related to NULL pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the numbers.ct file in the libxslt library allows a hacker to execute arbitrary code.
The vulnerability of the numbers.ct file in the libxslt library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the jfs_readdir() function in the fs/jfs/jfs_dtree.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jfsreaddir function in the fs/jfs/jfsdtree.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the WEBGUI component of the SAP NetWeaver Application Server ABAP software integration platform allows a attacker to perform XSS attacks.
The vulnerability of the WEBGUI component of the SAP NetWeaver Application Server ABAP software integration platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of the ip_tunnel_find() function in the net/ipv4/ip_tunnel.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the iptunnelfind function in the net/ipv4/iptunnel.c module of the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure
The vulnerability of the net/mlx5 components in the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...