92298 matches found
The vulnerability of the `ef100_process_design_param()` function in the `drivers/net/ethernet/sfc/ef100_nic.c` file of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the ef100processdesignparam function in the drivers/net/ethernet/sfc/ef100nic.c file of the Linux kernel is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ubi_wl_put_peb() function in the Linux operating system allows a attacker to compromise the accessibility of protected information.
The vulnerability of the ubiwlputpeb function in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the nfs_d_automount() function in the Linux operating system allows a attacker to compromise the accessibility of protected information.
The vulnerability of the nfsdautomount function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the mac80211 component in Linux operating systems allows attackers to compromise the accessibility of protected information.
The vulnerability of the mac80211 component in Linux operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...
The vulnerability of the cfg80211 component in Linux operating systems allows attackers to compromise data accessibility.
The vulnerability of the cfg80211 component in Linux operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to compromise data accessibility...
The vulnerability of the alloc_sk_msg() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.
The vulnerability of the allocskmsg function in Linux operating systems relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the sc_disable() function in Linux operating system kernels, which allows a malicious actor to cause kernel crashes.
The vulnerability of the scdisable function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause kernel crashes...
The vulnerability of the remove() function in Linux operating system kernels, which allows a attacker to compromise the accessibility of protected information
The vulnerability of the remove function in Linux operating system kernels is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the DefaultExchangeHolderUtils.deserialize() function in the Camel Java framework from Apache allows a attacker to execute arbitrary code.
The vulnerability of the DefaultExchangeHolderUtils.deserialize function in the Camel Java framework from Apache Camel is related to defects in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted package...
The vulnerability of the kset_register() function in the lib/kobject.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the ksetregister function in the lib/kobject.c module of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the qcom_cpufreq_probe() function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file of the Linux kernel’s CPU frequency scaling driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qcomcpufreqprobe function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file, a driver for scaling CPU frequency in the Linux operating system, is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability...
The vulnerability of the ctnetlink_exp_id() function in the net/netfilter/nf_conntrack_netlink.c module of the Linux kernel’s netfilter component allows a hacker to induce a service failure.
The vulnerability of the ctnetlinkexpid function in the net/netfilter/nfconntracknetlink.c module of the netfilter component of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the macro-definitions PCIE_LNKCAP_SLS2SPEED and PCIE_LNKCTL2_TLS2SPEED in the drivers/pci/pci.h module of the Linux kernel allow a hacker to cause a service failure.
The vulnerabilities of the macro-definitions PCIELNKCAPSLS2SPEED and PCIELNKCTL2TLS2SPEED in the drivers/pci/pci.h module of the Linux kernel are related to improper initialization of resources. Exploiting these vulnerabilities can allow an attacker to cause service failures...
The vulnerability of the graphical user interface of FortiWeb web applications allows a attacker to trigger a service failure.
The vulnerability of the graphical user interface of FortiWeb web applications is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions through specially crafted HTTP requests...
The vulnerability of the formQuickIndex() function in the httpd daemon of the Tenda F456 microprogramming router allows a hacker to execute arbitrary code and cause a service failure.
The vulnerability of the formQuickIndex function in the httpd daemon of the Tenda F456 microprogramming router lies in the issue of the operation going beyond the buffer in memory when processing the mitlinktype parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrar...
The vulnerability of the CAN bus component in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the CAN core component in Linux operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the moxartprobe() function in the drivers/mmc/host/moxart-mmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the moxartprobe function in the drivers/mmc/host/moxart-mmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
The vulnerability of the `init_mqueue_fs()` function in the `ipc/mqueue.c` module of the Linux kernel’s interprocess communication subsystem allows a attacker to cause a service failure.
The vulnerability of the initmqueuefs function in the ipc/mqueue.c module of the Linux kernel’s interprocess communication subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the arm_trbe_probe_cpuhp() function in the drivers/hwtracing/coresight/coresight-trbe.c file of the Linux kernel’s hardware tracing driver allows a hacker to cause a service failure.
The vulnerability of the armtrbeprobecpuhp function in the drivers/hwtracing/coresight/coresight-trbe.c file of the Linux kernel’s hardware tracing driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the tifm_7xx1_switch_media() function in the drivers/misc/tifm_7xx1.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the tifm7xx1switchmedia function in the drivers/misc/tifm7xx1.c module of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `wpcm450_aic_of_init()` function in the `drivers/irqchip/irq-wpcm450-aic.c` driver for Linux kernel IRQ chips allows a attacker to cause a service failure.
The vulnerability of the wpcm450aicofinit function in the drivers/irqchip/irq-wpcm450-aic.c driver for Linux’s IRQ chips is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the xfrm_update_ae_params() function in the net/xfrm/xfrm_user.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmupdateaeparams function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the genpddebug_add() function in the drivers/base/power/domain.c file of the Linux kernel’s device driver framework allows a hacker to cause a service failure.
The vulnerability of the genpddebugadd function in the drivers/base/power/domain.c file of the Linux kernel’s bus driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the ext4_da_write_end() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4dawriteend function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...
The vulnerability of the nvmet_enable_port() function in the drivers/nvme/target/core.c file of the Linux kernel’s NVME support driver allows a attacker to cause a service failure.
The vulnerability of the nvmetenableport function in the drivers/nvme/target/core.c file of the Linux NVME kernel driver relates to buffer out-of-buffer reading. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the DCB_ATTR_BCN() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.
The vulnerability of the DCBATTRBCN function in Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the finalize_pkvm() function in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the finalizepkvm function in Linux operating systems is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the i915_gem_object_is_framebuffer() function in Linux kernel allows a attacker to compromise the accessibility of protected information.
The vulnerability of the i915gemobjectisframebuffer function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...
The vulnerability of the cdev_device_add() function in the fs/char_dev.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cdevdeviceadd function in the fs/chardev.c file of the Linux kernel file system is related to improper initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the mlx5_ldev_free() function in the drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mlx5ldevfree function in the drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to caus...
The vulnerability of the rtw_usb_probe() function in the driver file drivers/net/wireless/realtek/rtw88/usb.c of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtwusbprobe function in the driver/net/wireless/realtek/rtw88/usb.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failur...
The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code or disclose confidential information.
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the mod_sql module in the ProFTPD FTP server allows a hacker to execute arbitrary commands.
The vulnerability of the modsql module in the ProFTPD FTP server lies in the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the fromNatlimitof() function in the httpd daemon of the Tenda F456 microprogramming router software, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the fromNatlimitof function in the httpd daemon of the Tenda F456 microprogramming router lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code by...
The vulnerability of Google Chrome’s Skia graphic library allows a hacker to trigger memory corruption.
The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption...
The vulnerability of the `unregister_netdevice_many_notify()` function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the unregisternetdevicemanynotify function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the hswep_has_limit_sbox() function in the arch/x86/events/intel/uncore_snbep.c module, which is part of the Linux kernel support for x86 processors, allows a hacker to trigger a service failure.
The vulnerability of the hswephaslimitsbox function in the arch/x86/events/intel/uncoresnbep.c module of the Linux kernel’s x86 platform is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the cupsdDeleteTemporaryPrinters() function on the CUPS printing server allows a attacker to cause a service failure.
The vulnerability of the cupsdDeleteTemporaryPrinters function in a CUPS printing server relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the automated document development program Doczilla is related to the lack of measures taken to protect the structure of the web page...
The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.
The vulnerability of the software storage controller for working with ShareFile content is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to remotely alter system configurations and execute arbitrary code...
The vulnerability of the authorized_keys() function in the OpenSSH cryptographic protection mechanism allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the authorizedkeys function in the OpenSSH cryptographic security tool is related to the improper implementation of stream control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the Livewire PHP framework’s library, which allows attackers to execute arbitrary commands.
The vulnerability of the Livewire PHP framework’s library is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the add-on module for the Control Web Panel (CWP), previously known as CentOS Web Panel, allows a hacker to execute arbitrary commands.
The vulnerability of the add-on module for the Control Web Panel CWP, previously known as CentOS Web Panel, relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a perpetrator to execute arbitrary commands...
The vulnerability of the fs::metadata() function in the tar-reading and writing library for the Rust language allows a attacker to increase their privileges.
The vulnerability of the fs::metadata function in the tar-reading and writing library for the Rust language, tar-rs, is related to the tracking of symbolic references in UNIX systems. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the MultiPartParser() function in the Django web application framework allows a hacker to trigger a denial-of-service attack.
The vulnerability of the MultiPartParser function in the Django web application framework is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Containous Traefik reverse proxy server, related to bypassing authentication through spoofing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Containous Traefik reverse proxy server relates to the bypassing of authentication procedures through spoofing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...