The vulnerability of the aiohttp HTTP client, related to insufficient protection of service data, allows attackers to disclose the protected information.

The vulnerability of the aiohttp HTTP client is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerabilities of the functions set_mesh_complete() and set_mesh_sync() in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem allow a malicious actor to cause a service failure.

The vulnerability of the setmeshcomplete and setmeshsync functions in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem lies in the fact that they involve reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the CalculateVMAndRowBytes() function in the drivers/gpu/drm/amd/display/dc/dml/dcn30/display_mode_vba_30.c driver file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the CalculateVMAndRowBytes function in the drivers/gpu/drm/amd/display/dc/dml/dcn30/displaymodevba30.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this...

The vulnerability of the driver cb7210 module’s drivers/staging/gpib/cb7210/cb7210.c in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/staging/gpib/cb7210/cb7210.c module in the Linux operating system’s kernel is related to incorrect initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Lite Agent Feature of the Cisco Enterprise Chat and Email (ECE) messaging service allows a perpetrator to access, modify, add, or delete data.

The vulnerability of the Lite Agent Feature in the Cisco Enterprise Chat and Email ECE messaging service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to access, modify, add, or delete data using a specially created...

Siemens network software vulnerabilities related to pointer swapping allow attackers to trigger service interruptions.

The vulnerability of Siemens network software is related to the swapping of pointers. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...

The vulnerability of the /boafrm/formIpQoS file of TOTOLINK N300RT microprogramming software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /boafrm/formIpQoS microprogramming software for TOTOLINK N300RT routers lies in the fact that the operation’s output escapes the buffer and is stored in memory when processing the parameter entryname. Exploiting this vulnerability allows an attacker to cause service...

The vulnerability of the usb_p910() function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software allows a hacker to execute any command they desire.

The vulnerability of the usbp910 function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotel...

The vulnerability of the sub_40139C() function in the /cgi-bin/firewall.cgi script of the Wavlink WL-WN579X3-C router’s microprogramming system, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sub40139C function in the /cgi-bin/firewall.cgi script of the Wavlink WL-WN579X3-C router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis allows a perpetrator to execute arbitrary code.

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Spell-file processing mechanism in the text editor Vim, which allows a hacker to trigger a service failure.

The vulnerability of the Spell-file processing mechanism in the text editor Vim relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the read_compound() function in the Vim text editor, allowing a hacker to cause a service failure

The vulnerability of the readcompound function in the Vim text editor is related to buffer overflows in dynamic memory when processing the spelllang parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `init_amd_bd()` function in the `arch/x86/kernel/cpu/amd.c` module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the initamdbd function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the decoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the decoder in the ImageMagick console-based graphics editor is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerabilities of the `getImageMetadata()` and `backup.GetInfo()` functions in the container management system and the Incus virtual machine manager allow a attacker to trigger a service failure.

The vulnerabilities of the getImageMetadata and backup.GetInfo functions in the container management system and the virtual machine manager Incus are related to unlimited resource distribution. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...

The vulnerability of the get_sources_from_items() function in the Open WebUI artificial intelligence-based web interface allows a intruder to gain unauthorized access to protected information.

The vulnerability of the getsourcesfromitems function in the Open WebUI AI-based web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the Range Addressing RAG...

The vulnerability of the Open WebUI web interface, related to the lack of authentication, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Open WebUI web interface lies in the lack of authentication when processing the endpoint /api/v1/channels/id/members with a known channel UUID. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the btf_ext_parse_info() function in the tools/lib/bpf/btf.c kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the btfextparseinfo function in the tools/lib/bpf/btf.c module of the Linux kernel is related to the copying of buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the aiohttp HTTP client, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the aiohttp HTTP client is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the CheckRepoScopedToken() function in the Git repository management system Gitea, which allows a hacker to increase their privileges.

The vulnerability of the CheckRepoScopedToken function in the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the software for storing and analyzing distributed tracebacks of Grafana Tempo allows a perpetrator to cause a service failure due to uncontrolled resource consumption.

The vulnerability of the software for storing and analyzing distributed tracebacks of Grafana Tempo is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the gpiochip_add_data_with_key() function in the drivers/gpio/gpiolib.c file of the Linux kernel’s GPIO driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gpiochipadddatawithkey function in the drivers/gpio/gpiolib.c module of the Linux kernel GPIO driver is related to a race condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the c_start() function in the arch/loongarch/kernel/proc.c module, which supports the LoongArch architecture of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the cstart function in the arch/loongarch/kernel/proc.c module, which supports the LoongArch architecture of the Linux operating system, is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the IPv6 packet processing module in the PAN-OS operating system and the Prisma Access cloud security remote access system allows attackers to bypass existing security mechanisms.

The vulnerability of the IPv6 packet processing module in the PAN-OS operating system and the Prisma Access cloud security remote access system is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms...

The vulnerability in the virtual machine of the cloud security platform Palo Alto Networks Cortex XDR Broker VM, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the virtual machine on Palo Alto Networks Cortex XDR Broker VM in cloud security platforms relates to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the network traffic processing module of the PAN-OS operating system, as well as the remote access agent for users to access corporate resources and applications, allows a hacker to cause a service failure.

The vulnerability of the network traffic processing module in the PAN-OS operating system, as well as the remote access agent for users to access corporate resources and applications, involves improper handling of unusual or exceptional states. Exploiting this vulnerability can allow a malicious...

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis in the software for network routing on Unix-like systems allows attackers to cause service interruptions.

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis tools used in Unix-based systems for network routing implementation is related to integer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the built-in data source “grafana-testdata-datasource” of the Grafana monitoring and analytics platform allows a attacker to trigger a service failure.

The vulnerability of the grafana-testdata-datasource data source used in Grafana monitoring and observability solutions relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the SP Page Builder component of the JoomShaper application software allows a hacker to execute arbitrary code.

The vulnerability of the SP Page Builder component of the JoomShape application software involves unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the tcf_idrinfodestroy() function in the net/sched/act_api.c module of the net/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfidrinfodestroy function in the net/sched/actapi.c module of the net/sched subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the svc_rdma_copyInline_range() function in the net/sunrpc/xprtrdma/svc_rdma_rw.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the svcrdmacopyInlinerange function in the net/sunrpc/xprtrdma/svcrdmarw.c module, part of the Linux operating system’s RPC protocol, relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the mdp5_pipe_release() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_pipe.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mdp5piperelease function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent, related to errors in the certificate validation process, allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack...

The vulnerability of the DefaultHttp2FrameReader class in the framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause a service failure.

The vulnerability of the DefaultHttp2FrameReader class in the network application development framework for protocols like Netty relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Libjxl library, related to the execution of operations beyond buffer boundaries in memory, allows attackers to cause a service failure.

The vulnerability of the Libjxl library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Python programming language’s HTTP client module allows attackers to inject arbitrary HTTP headers.

The vulnerability of the Python programming language’s HTTP client module is related to the failure to take measures to neutralize crlf sequences. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

The vulnerability of the fuel_gauge_external_power_changed() function in the drivers/power/supply/axp288_fuel_gauge.c driver of the Linux operating system’s power management driver, which allows a hacker to cause a service failure.

The vulnerability of the fuelgaugeexternalpowerchanged function in the drivers/power/supply/axp288fuelgauge.c file of the Linux kernel’s power management driver is related to the racing scenario. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfsd_open_local_fh() function in the fs/nfsd/localio.c module, which is part of the NFS network file system support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nfsdopenlocalfh function in the fs/nfsd/localio.c module, which is part of the NFS network file system support in Linux kernel, is related to the use of an invalid file descriptor. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the rt6_make_pcpu_route() function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the rt6makepcpuroute function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...

The vulnerability of the `z_erofs_do_map_blocks()` function in the `fs/erofs/zmap.c` file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the zerofsdomapblocks function in the fs/erofs/zmap.c file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the User-ID Terminal Server Agent component of the PAN-OS operating system, as well as the user remote access agent for corporate resources and applications, the Palo Alto Networks Prisma Access Agent, allows a perpetrator to trigger service interruptions or execute arbitrary codes.

The vulnerability of the User-ID Terminal Server Agent component of the PAN-OS operating system, as well as the user remote access agent for corporate resources and applications, namely the Palo Alto Networks Prisma Access Agent, is related to buffer overflow attacks. Exploiting this vulnerabilit...

The vulnerability of the `primehandle_to_fd` function in the `ivpu` component of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the primehandletofd function in the ivpu component of the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the src/filters/dmx_nhml.c component of the GPAC multimedia platform allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the src/filters/dmxnhml.c component of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code...

The vulnerability of the tarfile module in the Python programming language, which allows attackers to compromise the integrity of protected information

The vulnerability of the tarfile module in the Python programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the mathexp.Resample function on the Grafana monitoring and observation platform allows a hacker to cause a service failure.

The vulnerability of the mathexp.Resample function on the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the fuse_uring_req_end() function in the fs/fuse/dev_uring.c file of the Linux kernel operating system allows a attacker to trigger a service failure.

The vulnerability of the fuseuringreqend function in the fs/fuse/devuring.c file of the Linux kernel operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the command-line interface of the PAN-OS operating system, allowing a perpetrator to execute arbitrary commands

The vulnerability of the command-line interface of the PAN-OS operating system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Large Scale VPN (LSVPN) module of the PAN-OS operating system, which allows a intruder to disclose protected information

The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the DLP agent for remote access to corporate resources and applications by Palo Alto Networks Prisma Access Agent allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DLP agent for remote access to corporate resources and applications by Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the file system of Oracle Solaris, which allows a perpetrator to gain unauthorized access to protected information or cause service failures

The vulnerability of the Oracle Solaris operating system’s file system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...