95883 matches found
The vulnerability of the console-based graphic editor ImageMagick, related to a shift error of one unit, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to a offset error of one unit. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the reading module for FTXT format graphic files in the console-based graphic editor ImageMagick allows a hacker to induce a service failure.
The vulnerability of the FTXT graphic file reading module in the console-based graphic editor ImageMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the __qla2x00_abort_all_cmds() function in the drivers/scsi/qla2xxx/qla_os.c driver of the SCSI device drivers for the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the qla2x00abortallcmds function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the iris_vb2_stop_streaming() function in the drivers/media/platform/qcom/iris/iris_vb2.c file of the Linux kernel-based multimedia device driver module allows a malicious actor to cause a service failure.
The vulnerability of the irisvb2stopstreaming function in the drivers/media/platform/qcom/iris/irisvb2.c file of the Linux multimedia device driver framework is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the net/netfilter/xt_IDLETIMER.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/netfilter/xtIDLETIMER.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the arch_uprobe_copy_ixol() function in the arch/riscv/kernel/probes/uprobes.c module of the module management subsystem for the RISCV architecture of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the archuprobecopyixol function in the arch/riscv/kernel/probes/uprobes.c module of the platform management subsystem for the RISCV architecture of the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could allow an...
The vulnerabilities of the functions sec_alloc_req_id() and sec_free_req_id() in the driver drivers/crypto/hisilicon/sec2/sec_crypto.c of the Linux kernel cryptographic accelerator driver allow a hacker to cause a service failure.
The vulnerabilities of the functions secallocreqid and secfreereqid in the driver drivers/crypto/hisilicon/sec2/seccrypto.c of the Linux kernel cryptographic accelerator driver are related to synchronization errors during interrupt processing. Exploiting these vulnerabilities could allow an...
The vulnerability of the merge_handshake_packet() function in the GnuTLS cryptographic library allows a attacker to trigger a denial-of-service attack.
The vulnerability of the mergehandshakepacket function in the GnuTLS cryptographic library is related to errors in processing parameter values related to input data length. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the FullScreen component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.
The vulnerability of the FullScreen component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code through the created HTML page...
The vulnerability of the Libjxl library, related to the use of an uninitialized resource, allows a hacker to cause a service failure.
The vulnerability of the Libjxl library is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the WriteUHDRImage() function in the ImageMagick console graphics editor’s coders/uhdr.c file allows a hacker to cause a service failure.
The vulnerability of the WriteUHDRImage function in the ImageMagick console graphics editor’s coders/uhdr.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the SIXEL decoder in the console-based image editing software ImageMagick allows a hacker to cause memory corruption and service failures.
The vulnerability of the SIXEL decoder in the console-based image editing software ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the MAP image decoder in the console-based image editing software ImageMagick allows a hacker to gain unauthorized access to protected information or cause service failures.
The vulnerability of the MAP image decoder in the console-based image editing software ImageMagick involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
The vulnerability of the -sample operation in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the -sample command in the console-based image editing tool ImageMagick is related to reading data beyond the allowable range of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the socket.io parser library’s encoder and decoder modules allows attackers to induce a service failure.
The vulnerability of the socket.io parser library’s encoder and decoder relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to cause service failures remotely...
The vulnerability of the socket.io parser library’s encoder and decoder modules allows attackers to induce a service failure.
The vulnerability of the socket.io parser library’s encoder and decoder relates to the allocation of unlimited memory. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created package...
The vulnerability of the Lodash library lies in the uncontrolled modification of prototype attributes, which allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the Lodash library is related to uncontrolled changes to the attributes of the object’s prototype. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity and accessibility of the protected information...
The vulnerabilities of the functions qlcnic_83xx_init() (drivers/net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c) and qlcnic_probe() (drivers.net/ethernet/qlogic/qlcnic/qlcnic_main.c) in the Linux operating system’s Ethernet network adapter drivers allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions qlcnic83xxinit drivers/net/ethernet/qlogic/qlcnic/qlcnic83xxinit.c and qlcnicprobe drivers.net/ethernet/qlogic/qlcnic/qlcnicmain.c in the Linux operating system’s Ethernet network adapter drivers is related to the reuse of previously freed memory. Exploiting thi...
The vulnerability of the iavf_config_rss_reg() function in the driver/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iavfconfigrssreg function in the driver/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the WriteASHLARImage() function in the ImageMagick console graphics editor’s coders/ashlar.c file allows a hacker to cause a service failure.
The vulnerability of the WriteASHLARImage function in the ImageMagick console graphics editor’s coders/ashlar.c file is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the `ntfs_init_from_boot()` function in the `fs/ntfs3/super.c` file of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ntfsinitfromboot function in the fs/ntfs3/super.c file of the NTFS file system in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gs_usb_xmit_callback() function in the drivers/net/can/usb/gs_usb.c file of the Linux kernel’s CAN network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gsusbxmitcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the clone_dtr() function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types (RAID and LVM), which allows a hacker to cause service failure.
The vulnerability of the clonedtr function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ets_qdisc_change() function in the net/sched/sch_ets.c module of the network/sched/sch_ets.c subsystem of the Linux operating system’s networking subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the net/sched subsystem of the Linux kernel’s network management mechanism, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to compromise...
The vulnerabilities of the functions dsa_tree_setup() and dsa_tree_teardown() in the net/dsa/dsa.c module support Linux’s distributed kernel architecture. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the dsatreesetup and dsatreeteardown functions in the net/dsa/dsa.c module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...
The vulnerability of the dsa_switch_parse() function in the net/dsa/dsa.c module allows a hacker to cause a service failure in systems with a distributed kernel architecture of the Linux operating system.
The vulnerability of the dsaswitchparse function in the net/dsa/dsa.c module relates to the improper release of resources in support for Linux’s distributed kernel architecture. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the VIFF format encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the VIFF format encoder in the console-based image editing tool ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the lib/parse.js component in the Node QS string analysis and transformation library allows a attacker to cause a service failure.
The vulnerability of the lib/parse.js component, a library for analyzing and transforming string queries in Node QS, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the __io_openat_prep() function in the io_uring/openclose.c module, an interface for asynchronous input/output in the Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the ioopenatprep function in the iouring/openclose.c module, which is part of the Linux kernel’s asynchronous input/output interface, relates to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to caus...
The vulnerability of the f2fs_rename() function in the fs/f2fs/namei.c file of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the f2fsrename function in the fs/f2fs/namei.c file of the F2FS file system in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the net/netfilter/nf_tables_api.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/netfilter/nftablesapi.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the module for working with the DIB format in the console-based graphic editor ImageMagick allows a hacker to execute arbitrary code, expose protected information, and cause a service failure.
The vulnerability of the module for working with the DIB format in the console-based graphic editor ImageMagick is related to reading data beyond the allowed range of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, disclose sensitive information, and cause...
The vulnerability of the NewXMLTree method in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.
The vulnerability of the NewXMLTree method in the ImageMagick console-based graphics editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the DecodeImage() function in the ImageMagick console-based graphics editor allows a hacker to cause a service failure.
The vulnerability of the DecodeImage function in the console-based image editing tool ImageMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the JPEG encoder in the console-based graphic editor ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the JPEG encoder in console-based image editing software ImageMagick relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created image...
The vulnerability of the dtv5100_i2c_msg() function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver framework allows a hacker to gain access to protected information or cause service failures.
The vulnerability of the dtv5100i2cmsg function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
The vulnerability of the cifs_ses_add_channel() function in the fs/cifs/sess.c file of the Linux kernel file system allows a hacker to cause a service failure.
The vulnerability of the cifssesaddchannel function in the fs/cifs/sess.c file of the Linux kernel file system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the toshsd_probe() function in the drivers/mmc/host/toshsd.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the toshsdprobe function in the drivers/mmc/host/toshsd.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fore200e_open() function in the drivers/atm/fore200e.c file of the Linux kernel’s network adapter driver allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fore200eopen function in the drivers/atm/fore200e.c file of the Linux kernel’s network adapter driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
The vulnerability in the org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator component of the Apache Kafka messaging broker allows a attacker to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator class in the Apache Kafka messaging broker is related to incorrect validation of specified indexes, positions, or offsets in input data. Exploiting this vulnerability could allow an attacker to bypass securi...
The vulnerability of the Lodash library, related to improper handling of code generation, allows attackers to trigger a service failure.
The vulnerability of the Lodash library is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the golang-x-image package, a programming language, arises from incorrect calculations, allowing attackers to trigger a service failure.
The vulnerability of the golang-x-image package, a programming language, is related to incorrect calculations during the processing of WEBP image formats. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the e1000_tbi_should_accept() function in the drivers/net/ethernet/intel/e1000/e1000_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the `vidtv_channel_si_init()` function in the `drivers/media/test-drivers/vidtv/vidtv_channel.c` file of the Linux kernel-based multimedia device driver module allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vidtvchannelsiinit function in the drivers/media/test-drivers/vidtv/vidtvchannel.c file of the Linux kernel multimedia device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
The vulnerability of the kfddebugfs_hang_hws() function in the drivers/gpu/drm/amd/amdkfd/kfd_device.c driver for the Direct Rendering Infrastructure (DRI) of AMD graphics cards in Linux operating systems allows a hacker to cause a system failure.
The vulnerability of the kfddebugfshanghws function in the drivers/gpu/drm/amd/amdkfd/kfddevice.c driver for the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an...
The vulnerability of the SVG file analysis function in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the SVG file analysis function in the console-based graphic editor ImageMagick is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the drivers/gpu/drm/panthor components of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/gpu/drm/ptorh components of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the dual-way inverter series for KACO Blueplanet GridSave storage systems lies in the lack of protective measures for the SQL query structure, allowing attackers to enhance their privileges within the local network.
The vulnerability of the dual-way inverter series for KACO Blueplanet GridSave energy storage systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges within the local network...
The vulnerability of the parser of the console-based graphic editor ImageMagick allows a hacker to execute arbitrary code, gain unauthorized access to confidential information, and cause service failures.
The vulnerability of the console-based graphic editor ImageMagick relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, gain unauthorized access to confidential information, and cause service failures...
The vulnerability of the msl.c file in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the msl.c file in the console-based image editing tool ImageMagick is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...