92298 matches found
The vulnerability of the CamelCoapResourceHandleRequest() function in the camel-coap Java framework by Apache Camel allows a attacker to execute arbitrary code.
The vulnerability of the CamelCoapResourceHandleRequest function in the camel-coap Java framework by Apache Camel is related to deficiencies in the mechanism for controlling modifications to dynamically defined object properties. Exploiting this vulnerability could allow an attacker to execute...
The vulnerability of the corporate version of the GitHub Enterprise Server, related to the lack of measures taken at the management level to clean up data, allows a violator to execute arbitrary code.
The vulnerability of the corporate version of the GitHub Enterprise Server is related to the lack of measures taken at the management level to protect data. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the mt7915_put_hif2() function in the drivers/net/wireless/mediatek/mt76/mt7915/pci.c file of the wireless adapter driver for Mediatek’s Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mt7915puthif2 function in the driver/net/wireless/mediatek/mt76/mt7915/pci.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could...
The vulnerability of the cros_usbpd_notify_init() function in the drivers/platform/chrome/cros_usbpd_notify.c module, which is part of the Chrome OS hardware support for Linux kernel-based devices, allows a hacker to trigger a service failure.
The vulnerability of the crosusbpdnotifyinit function in the drivers/platform/chrome/crosusbpdnotify.c module, which is part of the Chrome OS hardware support for Linux kernel-based operating systems, stems from the lack of checking the return value. Exploiting this vulnerability could allow an...
The vulnerability of the __ibmvnic_open() function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ibmvnicopen function in the drivers/net/ethernet/ibm/ibmvnic.c file of the Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
The vulnerability of the rtw89.Append ProbeReq_ie() function in the driver/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtw89.Append ProbeReqie function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a service...
The vulnerabilities of the functions ism_cmd() and ism_probe() in the driver drivers/s390/net/ism_drv.c file of the network driver for the S390 platform of the Linux operating system allow a malicious actor to cause service failures.
The vulnerabilities of the functions ismcmd and ismprobe in the drivers/s390/net/ismdrv.c file of the S390 network driver for the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...
The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) allows a perpetrator to execute arbitrary code or disclose protected information.
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrar...
The vulnerability of the formQuickIndex() function in the httpd daemon of the Tenda F456 microprogramming router allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the formQuickIndex function in the httpd daemon of the Tenda F456 microprogramming router lies in the issue of the operation going beyond the buffer in memory when processing the mitlinktype parameter. Exploiting this vulnerability allows a malicious actor to cause service...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to increase their privileges
The vulnerability of the Google Chrome browser’s Media component relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to increase their privileges...
The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the insufficient validation of input data, allowing a perpetrator to execute arbitrary code.
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary co...
The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code or disclose confidential information.
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the zstream_buffer_ungets() function in the zlib library, which allows an attacker to trigger a memory corruption.
The vulnerability of the zstreambufferungets function in the zlib library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause memory corruption remotely...
The vulnerability of the debugfs_remove() function in Linux operating systems allows a hacker to compromise the accessibility of protected information.
The vulnerability of the debugfsRemove function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, проводить межсайтовые сценарные атаки XSS...
The vulnerability of the dwc3_qcom_probe() function in the drivers/usb/dwc3/dwc3-qcom.c driver code of the DesignWare-based USB3 controller driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dwc3qcomprobe function in the drivers/usb/dwc3/dwc3-qcom.c file of the DesignWare-based USB3 controller driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the amdgpuirqput() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the amdgpuirqput function in the Linux operating system’s kernel is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fill_frame_info() function in the net/hsr/hsr_forward.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to cause a service failure.
The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module, which is part of the networking functions in the Linux operating system’s kernel, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the io_uring component in Linux operating system kernels allows a hacker to gain unauthorized access to protected information.
The vulnerability of the iouring component in Linux operating system kernels is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the `of_get_dr_timings()` function in the `drivers/memory/of_memory.c` module of the Linux kernel’s memory driver, which allows a hacker to cause a system failure.
The vulnerability of the ofgetdrtimings function in the drivers/memory/ofmemory.c module of the Linux kernel’s memory driver library is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the `sc7180_lpass_init()` function in the sound module/soc/qcom/lpass-sc7180.c, which is part of the Linux operating system’s SoC kernel support for audio, allows a hacker to cause a service failure.
The vulnerability of the sc7180lpassinit function in the sound/soc/qcom/lpass-sc7180.c sound support module of the Linux operating system’s SoC kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the wmt_mci_probe() function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the wmtmciprobe function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the rtsx_usb_sdmmc_drv_probe() function in the mmc/host/rtsx_usb_sdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtsxusbsdmmcdrvprobe function in the mmc/host/rtsxusbsdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the integrity_init_keyring() function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.
The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the md_bitmap_resize() function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mdbitmapresize function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the ti_sci_intr_irq_domain_probe() function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux operating system’s IRQ chip driver module allows a attacker to cause a service failure.
The vulnerability of the tisciintrirqdomainprobe function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux kernel’s IRQ chip driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the mlxsw_m_linecards_init() function in the drivers/net/ethernet/mellanox/mlxsw/minimal.c module of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mlxwminimal.c function in the drivers/net/ethernet/mlnx/mlxsw/minimal.c module of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability...
The vulnerability of the vmbus_disconnect() function in the drivers/hv/connection.c module of the Microsoft HyperV Linux kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the vmbusdisconnect function in the drivers/hv/connection.c module of the Microsoft HyperV Linux operating system kernel is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...
The vulnerability of the __acquires() function in the drivers/md/md-bitmap.c file of the multi-device driver module for Linux operating systems, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the acquires function in the drivers/md/md-bitmap.c file of the Linux device driver module for multiple devices such as RAID and LVM is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the debugfs_lookup() function in Linux operating systems allows a hacker to compromise the accessibility of protected information.
The vulnerability of the debugfslookup function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...
The vulnerability of the debugfs_lookup() function in Linux operating systems allows a hacker to compromise the accessibility of protected information.
The vulnerability of the debugfslookup function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...
The vulnerability of the TTM_TT_FLAG_PRIV_POPULATED() function in Linux operating systems allows a hacker to exploit it to compromise privacy.
The vulnerability of the TTMTTFLAGPRIVPOPULATED function in Linux operating systems is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to cause a breach of privacy...
The vulnerability of the mpi3mrremove() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.
The vulnerability of the mpi3mrremove function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the z_erofs_lzma_head() function in the Linux operating system allows a hacker to compromise the accessibility of protected information.
The vulnerability of the zerofslzmahead function in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the nf_flow_table_free() function in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfflowtablefree function in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...
The vulnerability of the search function in the text editor Notepad++ allows a perpetrator to gain unauthorized access to protected information and cause service failure.
The vulnerability of the search function in the Notepad++ text editor is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information and cause service failures through a specially...
The vulnerability of the hws_pool_buddy_init() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hwspoolbuddyinit function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting...
The vulnerability of the power_supply_get_battery_info() function in the drivers/power/supply/power_supply_core.c file of the Linux kernel’s power management driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the powersupplygetbatteryinfo function in the drivers/power/supply/powersupplycore.c file of the Linux kernel’s power management driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the _rtl8812ae PhySetTxPowerLimit() function in the drivers/net/wireless/realtek/rtlwifi/rtl8821ae/phy.c file of the Realtek wireless driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rtl8812ae PhySetTxPowerLimit function in the drivers/net/wireless/realtek/rtlwifi/rtl8821ae/phy.c file of the Realtek wireless driver for the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an...
The vulnerability of the io_msg_send_fd() function in the io_uring/msg_ring.c module, a component of the Linux kernel’s asynchronous input/output interface, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iomsgsendfd function in the iouring/msgring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
The vulnerability of the hinic_dbg_get_func_table() function in the drivers/net/ethernet/huawei/hinic/hinicdebugfs.c file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.
The vulnerability of the hinicdbggetfunctable function in the drivers/net/ethernet/huawei/hinic/hinicdebugfs.c file of the Linux kernel’s Ethernet network adapter driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the am65_cpsw_nuss_ndo_slave_open() function in the drivers/net/ethernet/ti/am65-cpsw-nuss.c file of the Ethernet network adapter driver for Texas Instruments’ Linux kernel allows a hacker to cause a service failure.
The vulnerability of the am65cpswnussndoslaveopen function in the drivers/net/ethernet/ti/am65-cpsw-nuss.c file of the Ethernet network adapter driver for Texas Instruments’ Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could all...
The vulnerability of the rt6_nlmsg_size() function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to cause a service failure.
The vulnerability of the rt6nlmsgsize function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the tracing-subscriber library, related to the failure to take measures to neutralize special elements, allows attackers to compromise the integrity of the protected information.
The vulnerability of the tracing-subscriber library, related to the failure to take measures to neutralize special elements, allows attackers to compromise the integrity of the protected information...
The vulnerability of the raw_get_next() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the rawgetnext function in the Linux operating system’s kernel is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the uncore kernel driver in Linux operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the uncore kernel driver in Linux operating systems is related to the lack of memory release after the effective lifespan of the driver. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the xas_retry() function in Linux operating systems allows a hacker to induce a service failure.
The vulnerability of the xasretry function in Linux operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions trace_string() and trace_event_rawevent_synth() in the kernel/trace/trace_events_synth.c module, which support Linux’s kernel tracing mechanism, allow a hacker to cause a system failure.
The vulnerability of the tracestring and traceeventraweventsynth functions in the kernel/trace/traceeventssynth.c module, which support kernel tracing in Linux operating systems, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...