The vulnerability of the Moby container isolation system creation software lies in its uncontrolled search element, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Moby containerization system’s software lies in an uncontrolled element of the search process when unpacking xz or gzip compressed archives. Exploiting this vulnerability can allow a perpetrator to enhance their privileges and execute arbitrary code...

The vulnerability of the etree.iterparse() and ETCompatXMLParser() functions in the Lxml library for processing XML and HTML markup allows attackers to read arbitrary files.

The vulnerability of the etree.iterparse and ETCompatXMLParser functions in the Lxml library for processing XML and HTML markup is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to read arbitrary files...

The vulnerability of the svg_parse_strings() and gf_svg_parse_attribute() functions on the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the svgparsestrings and gfsvgparseattribute functions on the GPAC multimedia platform is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sub_41EC14() function in the ssi service of TRENDnet TEW-821DAP wireless access points allows a hacker to execute arbitrary code.

The vulnerability of the sub41EC14 function in the ssi service of TRENDnet TEW-821DAP wireless access points is related to the execution of an operation outside the buffer in memory when processing the nslookuptarget parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the document converter in Markdown syntax in HTML RDiscount, related to the operation of writing beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the futex_key_to_node_opt() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the futexkeytonodeopt function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the svgin_process() function on the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the svginprocess function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the contains_dotdot() function in the RDP client FreeRDP allows a hacker to read and write arbitrary files.

The vulnerability of the contains.dot function in the RDP client FreeRDP is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to read and write arbitrary files remotely...

The vulnerability of the formCertListInfo() function in the Tenda CH22 router software allows a hacker to execute arbitrary code.

The vulnerability of the formCertListInfo function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

The vulnerability of the tee_shm_register_user_buf() function in the drivers/tee/tee_shm.c module of the Linux kernel’s trusted execution environment allows a attacker to cause a service failure.

The vulnerability of the teeshmregisteruserbuf function in the drivers/tee/teeshm.c module of the Linux kernel’s trusted execution environment is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `tap_get_user()` function in the `drivers/net/tap.c` file of the Linux kernel’s network device driver module allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tapgetuser function in the drivers/net/tap.c file of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the Scheduler component in the microprogramming software for the routing and switching platform RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 allows a attacker to execute arbitrary commands.

The vulnerability of the Scheduler component in the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 lies in the lack of measures to neutralize specific elements. Exploiting this...

The vulnerability of the setDmzCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software, allowing a malicious user to execute arbitrary commands.

The vulnerability of the setDmzCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the MQTT 5 framework for developing network applications, servers, and clients using Netty protocol allows a hacker to cause a service failure.

The vulnerability of the MQTT 5 framework for developing network applications, servers, and client protocols related to Netty involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability in the Open WebUI web interface, related to improper session management, allows a malicious actor to gain access to read, modify, and delete data.

The vulnerability in the Open WebUI artificial intelligence-based web interface is related to improper session management. Exploiting this vulnerability can allow a malicious actor to gain read, modify, and delete access to data...

The vulnerability of the nmk_pinctrl_dt_subnode_to_map() function in the drivers/pinctrl/nomadik/pinctrl-nomadik.c driver module, which is used by the PINCTRL output controller in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the nmkpinctrldtsubnodetomap function in the drivers/pinctrl/nomadik/pinctrl-nomadik.c driver for Linux kernel-based GPIO controllers is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `dc_state_destruct()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcstatedestruct function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the formgponConf function in the /boaform/admin/formgponConf file of the Tenda HG3 router’s microprogramming system, which allows a hacker to execute arbitrary code.

The vulnerability of the formgponConf function in the /boaform/admin/formgponConf file of the Tenda HG3 router’s microprogramming system is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ota_new_upgrade() function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software allows a hacker to execute arbitrary commands.

The vulnerability of the otanewupgrade function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the X.509 Certificate Handler component of the cryptographic C++ Botan library allows a perpetrator to forge OCSP responses.

The vulnerability of the X.509 Certificate Handler component of the C++ Botan cryptographic library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to forge OCSP responses remotely...

The vulnerability of the `cachefiles_prepare_write_subreq()` function in the `fs/cachefiles/io.c` module of the Linux kernel file system support module allows a attacker to cause a service failure.

The vulnerability of the cachefilespreparewritesubreq function in the fs/cachefiles/io.c module of the Linux kernel’s file system support module is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __iov_iter_get_pages_alloc() function in the lib/iov_iter.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the iovitergetpagesalloc function in the lib/ioviter.c module of the Linux operating system’s kernel is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the containerd execution environment, related to insecure management of privileges, allows a perpetrator to circumvent existing security restrictions or enhance their privileges.

The vulnerability of the containerd execution environment is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions or enhance their privileges...

The vulnerability of the gnutls_pkcs11_token_set_pin() function in the lib/pkcs11_write.c file of the GnuTLS cryptographic library allows a attacker to cause a service failure.

The vulnerability of the gnutlspkcs11tokensetpin function in the lib/pkcs11write.c file of the GnuTLS cryptographic library is related to a buffer out-of-bounds exception due to a pointer that has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function nameconstraints_node_list_intersect() in the lib/x509/name_constraints.c file, lines 726-727, of the cryptographic library GnuTLS, allows a attacker to perform a MIT attack.

The vulnerability of the nameconstraintsnodelistintersect function in the lib/x509/nameconstraints.c file, lines 726-727, of the cryptographic library GnuTLS is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to perform a MITM attack...

The vulnerability of the aa_simple_write_to_buffer() function in the security/apparmor/apparmorfs.c module of the AppArmor security component for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the aasimplewritetobuffer function in the security/apparmor/apparmorfs.c module of the AppArmor security component of the Linux operating system’s kernel is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could...

The vulnerability of the rockchip_spi_config() function in the drivers/spi/spi-rockchip.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipspiconfig function in the drivers/spi/spi-rockchip.c module of the Linux system’s SPI device driver relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the mod_proxy_ftp module in the Apache HTTP Server allows attackers to perform cross-site scripting attacks.

The vulnerability of the modproxyftp module in the Apache HTTP Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the /boaform/formCountrystri file in the microprogramming software for the Tenda HG3 router allows a hacker to execute arbitrary code.

The vulnerability of the /boaform/formCountrystri file of the Tenda HG3 router microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the M.read() function in the neovim text editor’s View Branch component allows a hacker to execute arbitrary code.

The vulnerability of the M.read function in the neovim text editor’s View Branch component is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the mtd_check_of_node() function in the drivers/mtd/mtdcore.c file of the memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mtdcheckofnode function in the drivers/mtd/mtdcore.c file of the Linux operating system’s memory driver module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the amdgpudebugfs_vm_infoShow() function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c driver module allows a hacker to cause a system failure. This vulnerability is related to AMD GPU cores in Linux operating systems that support Direct Rendering Infrastructure (DRI).

The vulnerability of the amdgpudebugfsvminfoShow function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c driver module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hash-table implementation of the Slot-Based Execution (SBE) mechanism in the MongoDB database management system allows a hacker to induce a service failure.

The vulnerability of the Slot-Based Execution SBE hash table implementation in the MongoDB database management system is related to a mistake in releasing memory that has already been released. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Open WebUI web interface, related to the lack of authentication, allows a perpetrator to gain access to read, modify, and delete data.

The vulnerability of the Open WebUI web interface relates to the lack of authorization during the processing of the final endpoint /api/v1/retrieval/process/web. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, and delete data...

The vulnerability of the gnutls_x509_crt_check_hostname2() function in the lib/x509/hostname-verify.c file, lines 111,245–265, of the GnuTLS cryptographic library allows a attacker to replace the server and gain unauthorized access to protected information.

The vulnerability of the gnutlsx509crtcheckhostname2 function in the lib/x509/hostname-verify.c file at line 111,245-265 of the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to replace the server and...

The vulnerability of the `virtio_gpu_get_caps_ioctl()` function in the `drivers/gpu/drm/virtio/virtgpu_ioctl.c` driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the virtiogpugetcapsioctl function in the drivers/gpu/drm/virtio/virtgpuioctl.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of pointers L. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the sheet_to_html() function in the artificial intelligence-based web interface Open WebUI allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the sheettohtml function in the Open WebUI artificial intelligence-based web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotel...

The vulnerability of the gnutls_pkcs12_bag_set_data() function in the GnuTLS cryptographic library allows a attacker to damage memory or cause service failures.

The vulnerability of the gnutlspkcs12bagsetdata function in the GnuTLS cryptographic library is related to a single-precision shift error. Exploiting this vulnerability could allow an attacker to corrupt memory or cause service failures...

The vulnerability of the setStorageCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the setStorageCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the npm library extract-zip’s mechanism for processing symbolic links allows a hacker to execute arbitrary code.

The vulnerability of the npm library extract-zip’s mechanism for handling symbolic links is related to errors in link processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the Management Daemon (MGD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to induce a service failure.

The vulnerability of the Management Daemon MGD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the dlfb ops mmap() function in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the dlfb ops mmap function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cow_file_range() function in the fs/btrfs/inode.c module of the file system Btrfs in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the cowfilerange function in the fs/btrfs/inode.c module of the btrfs file system in the Linux kernel lies in the absence of resource locking in case of errors. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the `secure_boot_fuse_state_show()` function in the `drivers/platform/mellanox/mlxbf-bootctl.c` kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the securebootfusestateshow function in the drivers/platform/mellanox/mlxbf-bootctl.c kernel module of the Linux operating system is related to the copying of a buffer without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

The vulnerability of the splunkd component of the Splunk Enterprise platform for operational analytics allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the splunkd component of the Splunk Enterprise platform relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `io.netty.handler.codec.redis.RedisEncoder` component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to inject arbitrary commands.

The vulnerability of the io.netty.handler.codec.redis.RedisEncoder component in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper code generation. Exploiting this vulnerability allows a remote attacker to inject arbitrary...

The vulnerability of the DTLS implementation of the GnuTLS cryptographic library allows a attacker to induce a service failure.

The vulnerability of the DTLS protocol implementation of the GnuTLS cryptographic library is related to unpredictable behavior of functions due to inconsistencies in parameter values. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerabilities of the functions ParseConfigYamlFile() and backup.GetInfo() in the container management system and the virtual machine manager Incus allow a hacker to trigger a service failure.

The vulnerabilities of the functions ParseConfigYamlFile and backup.GetInfo in the container management system and the virtual machine manager Incus are related to the use of a null pointer. Exploiting these vulnerabilities could allow an attacker to cause service interruptions...

The vulnerability of the aiohttp HTTP client, related to incorrect pathname restrictions for directories, allows attackers to disclose protected information.

The vulnerability of the aiohttp HTTP client is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by the system...