92298 matches found
The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.
The vulnerability of the ShareFile content-sharing software’s storage controller relates to the unlimited download of files of a malicious nature. Exploiting this vulnerability could allow an attacker to remotely alter system configurations and execute arbitrary code...
The vulnerability of the jinja2.Environment() function in the serving_rerank.py file of the high-performance LLM service framework SGLang allows a attacker to execute arbitrary code.
The vulnerability of the jinja2.Environment function in the servingrerank.py file of the high-performance LLM service framework SGLang is related to incorrect code generation practices. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the Keycloak identity and access management software lies in improper behavior patterns, allowing unauthorized users to gain unauthorized access to confidential information.
The vulnerability of the Keycloak identity and access management software is related to an incorrect sequence of actions: authentication occurs before syntactic analysis and canonization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...
The vulnerability of the iconv() function in the GNU C Library, which allows a hacker to trigger a denial-of-service attack
The vulnerability of the iconv function in the GNU C Library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the /api/v1/attachments component of the software platform for creating custom interfaces based on Language Models (LLMs) from Flowise allows a malicious actor to gain access to the ability to upload any files.
The vulnerability of the /api/v1/attachments component of the software platform for creating user interfaces based on Language Models LLM from Flowise is related to the ability to download files of a dangerous type without restrictions. Exploiting this vulnerability could allow an attacker...
The vulnerability of the software platform for configuring GIGABYTE Control Center (GCC) lies in the ability to write beyond the buffer boundaries, allowing an attacker to execute arbitrary code.
The vulnerability of the software platform for configuring GIGABYTE Control Center GCC is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the fromSetCfm() function in Tenda F456 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetCfm function in Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing parameters funcname and funcpara1. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...
The vulnerability of the query_regdb_file() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the queryregdbfile function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mISDN_register_device() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mISDNregisterdevice function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
The vulnerability of the elem_size() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the elemsize function in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the find_compatible_node() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the offindcompatiblenode function in the Linux operating system’s kernel is related to improper manipulation of the reference count of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the kfd_process_device_init_vm() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the kfdprocessdeviceinitvm function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the percpu_init_rwsem() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the percpuinitrwsem function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component in Linux operating systems is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s Wi-Fi kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s Wi-Fi kernel component is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the imx component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the imx component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `of_node_put()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the ofnodeput function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fuse_uring_start() function in the library for creating and using libfuse virtual file systems allows a attacker to execute arbitrary code.
The vulnerability of the fuseuringstart function in the library for creating and using the libfuse virtual file system is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands, provided that the user opens a specially crafted file...
The vulnerability of the JavaScript-based Thymeleaf engine arises from the lack of measures taken to neutralize special elements used in the expression language operator, allowing attackers to execute arbitrary code.
The vulnerability of the JavaScript-based Thymeleaf engine is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ibmvnic component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ibmvnic component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ioctl() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ioctl function in the Linux operating system’s kernel is related to the handling of zero pointers. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the octeontx2-vf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the octeontx2-vf component in the Linux operating system is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the run_bpf_prog() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the runbpfprog function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of artificial intelligence servers for applications based on large language models like BricksLLM arises from the failure to protect the SQL query structure when processing the parameter customId. This allows attackers to access protected information or execute arbitrary code.
The vulnerability of the artificial intelligence server for applications based on BricksLL language models relates to the lack of protection for the SQL query structure when processing the customId parameter. Exploiting this vulnerability can allow an attacker to gain access to protected...
The vulnerability of the sendmsg() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the sendmsg function in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the in_atomic() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the inatomic function in the Linux operating system’s kernel is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mwifiex_process_mgmt_packet() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mwifiexprocessmgmtpacket function in the Linux operating system is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the follow_automount() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the followautomount function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the acpi_get_dsd_graph() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the acpigetdsdgraph function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ppr_get() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the pprget function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the AddPortMapping() function in the miniupnpd component of D-Link DIR-825 router software allows a hacker to execute arbitrary code.
The vulnerability of the AddPortMapping function in the miniupnpd component of D-Link DIR-825 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...
The vulnerability of the sendmsg() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the sendmsg function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework lies in the uncontrolled distribution of memory resources, which allows a malicious actor to trigger a service failure.
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the importWrappedKey() function in the StrongBox component for Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the importWrappedKey function in the StrongBox component of Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the XkbSetCompatMap() function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to induce a service failure.
The vulnerability of the XkbSetCompatMap function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to a numerical reduction in significance. Exploiting this vulnerability can allow an...
The vulnerability of the miSyncTriggerFence() function in the XSYNC component of the Wayland protocol for X.Org XWaylan, as well as in the implementation of the X.Org Server, allows a attacker to trigger a service failure.
The vulnerability of the miSyncTriggerFence function in the XSYNC component of the Wayland protocol for X.Org XWaylan, as well as in the implementation of the X.Org Server, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service...
The vulnerability of the lzma_indexAppend() function in the XZ compression data compression package allows a hacker to execute arbitrary code.
The vulnerability of the lzmaindexAppend function in the XZ Utils data compression package is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the j1939_send_one() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the j1939sendone function in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the isl29028_remove() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the isl29028remove function in the Linux operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ext4_unlink() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the ext4unlink function in the Linux operating system’s kernel is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the shared_cpu_map function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the sharedcpumap function in the Linux operating system relates to reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Metabase data visualization and reporting software, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.
The vulnerability of the Metabase data visualization and reporting software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted YAML file...
The vulnerability of the BTRequestGetSmartConnectStatus() function in the Linksys MR9600 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the BTRequestGetSmartConnectStatus function in the Linksys MR9600 router’s microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the fmt.Sprintf function in AI-based applications using BricksLLM, which allows a hacker to access protected information or execute arbitrary code.
The vulnerability of the fmt.Sprintf function in the AI server for applications based on BricksLL language models relates to the lack of protection for the SQL query structure when processing the keyId parameter. Exploiting this vulnerability allows an attacker to gain access to protected...