95883 matches found
The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the h.265 Libde265 implementation lies in the execution of operations outside the buffer in memory, which allows an attacker to cause a service failure.
The vulnerability of the h.265 Libde265 implementation is related to the execution of operations outside the buffer in memory when processing the variable ctbinfo.log2unitSize. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Exim mail server, related to the lack of initialization of resources, allows attackers to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the Exim mail server is related to the lack of initialization of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...
The vulnerability of the _.unset and _.omit functions in the Lodash library, which allows an attacker to compromise data integrity
The vulnerability of the unset and omit functions in the Lodash library is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...
The vulnerability of the implementation of security policies for the console-based graphic editor ImageMagick, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the ImageMagick console-based graphic editor’s security implementation is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Nokogiri library, related to an incorrect limitation on XML references to external objects, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Nokogiri library is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the fs/xattr component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the fs/xattr component in the Linux operating system’s kernel is related to uncontrolled memory consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.
The vulnerability of the netfilter component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the backup server of the Veeam Backup & Replication software allows a perpetrator to execute arbitrary code. This vulnerability targets systems for cloud, virtual, and physical environments.
The vulnerability of the backup server of the Veeam Backup & Replication software for cloud, virtual, and physical systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the HeifPixelImage::overlay() function in the libheif library allows a hacker to induce a service failure.
The vulnerability of the HeifPixelImage::overlay function in the libheif library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Printing component in the Google Chrome browser allows a hacker to bypass the sandboxing protection mechanism.
The vulnerability of the Printing component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism through the created HTML page...
The vulnerability of the golang-x-image package, a programming language, allows attackers to trigger a service failure.
The vulnerability of the golang-x-image package, a programming language, is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the magick/profile.c file, a console-based image editor from ImageMagick, allows a hacker to execute arbitrary code.
The vulnerability of the magick/profile.c file, a console-based image editing tool from ImageMagick, is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the stratix10_svc_probe() function in the drivers/firmware/stratix10-svc.c file of the Linux kernel firmware driver allows a malicious actor to cause a service failure remotely.
The vulnerability of the stratix10svcprobe function in the drivers/firmware/stratix10-svc.c file of the Linux kernel firmware driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the ip_tunnel_info structure in the ERSPAN technology of Linux kernel allows a attacker to cause a service failure.
The vulnerability of the iptunnelinfo structure in the ERSPAN technology of Linux operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the lpfc_create_port() function in the drivers/scsi/lpfc/lpfc_init.c file of the Linux operating system’s SCSI device driver, which allows a hacker to cause a service failure.
The vulnerability of the lpfccreateport function in the drivers/scsi/lpfc/lpfcinit.c file of the Linux SCSI device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the JBIG decoder in the console-based image editing software ImageMagick allows a hacker to induce a service failure.
The vulnerability of the JBIG decoder in the ImageMagick console-based graphics editor is related to the lack of checking for the returned value. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the MVG decoder in the console-based image editing software ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the MVG format decoder in the console-based image editing software ImageMagick is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the af_unix component in the Linux operating system kernel allows a hacker to trigger a service failure.
The vulnerability of the afunix component in the Linux operating system kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the drivers/net/macvlan.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the drivers/net/macvlan.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `pic_parameter_set::set_derived_values()` function in the h.265 Libde265 codec implementation allows a attacker to cause a service failure.
The vulnerability of the picparameterset::setderivedvalues function in the h.265 Libde265 codec implementation is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the IPTCTEXT mechanism in the console-based ImageMagick graphic editor allows a hacker to trigger a service failure.
The vulnerability of the IPTCTEXT mechanism in the console-based ImageMagick graphic editor is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the UHDR encoder in the console-based image editing software ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the UHDR encoder in the console-based image editing software ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the login() function in Tenda router software allows a hacker to gain full access to the device’s web interface.
The vulnerability of the login function in Tenda router software-based microprogramming systems is related to the presence of undocumented configuration commands. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device’s web interface...
The vulnerability of the compile() function in the Handlebars template creation tool allows a attacker to cause a service failure.
The vulnerability of the compile function in the Handlebars template creation tool is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the MSSQL plugin on the Grafana monitoring and observation platform allows a hacker to bypass security restrictions and cause a service failure.
The vulnerability of the MSSQL plugin platform for Grafana monitoring and observation is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and cause service failures...
Vulnerability of the amdgpu_cs_fence_to_handle_ioctl() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c file – This driver is part of the Linux operating system’s Direct Rendering Infrastructure (DRI) support for AMD GPU cores. It allows a hacker to trigger a service failure.
Vulnerability of the amdgpucsfencetohandleioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file – The Linux driver for AMD GPU cores supporting Direct Rendering Infrastructure DRI is vulnerable to security vulnerabilities. Exploiting this vulnerability could allow an attacker to cause ...
The vulnerability in the net/core/skbuff.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/core/skbuff.c module of the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the net/netfilter/ipset component of the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the net/netfilter/ipset component of the Linux operating system’s kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the hclgevf_knic_setup() function in the drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c file of the Linux operating system’s Ethernet network adapter driver module allows a hacker to cause a service failure.
The vulnerability of the hclgevfknicsetup function in the drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevfmain.c file of the Linux kernel’s Ethernet network adapter driver is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the Linux operating system’s kernel component “perf”, related to the expiration of a resource lifespan, allows attackers to trigger a service failure.
The vulnerability of the perf component in the Linux operating system’s kernel is related to the expiration of a resource’s lifespan. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the xe_oa_set_no_preempt() function in the drivers/gpu/drm/xe/xe_oa.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the xeoasetnopreempt function in the drivers/gpu/drm/xe/xeoa.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a...
The vulnerability of the Docker image configuration of the Git repository management system Gitea allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Docker image configuration of the Git repository management system Gitea is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the amdgpu_cs parser_init() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver code allows a hacker to cause a service failure in AMD GPU-based Linux operating system DRI infrastructure.
The vulnerability of the amdgpucs parserinit function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver module relates to the pointer manipulation in the AMD GPU kernel support for Linux operating systems. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the read_global_param() function in the FFmpeg multimedia library allows a hacker to cause a service failure.
The vulnerability of the readglobalparam function in the FFmpeg multimedia library relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the automated information system “K ” and the software package “K ” stems from an incorrect limitation on the name of the path to the catalog. This allows a perpetrator to gain unauthorized access to protected information.
...
The vulnerability of the DefaultLevelDBSerializer class in the Apache Camel LevelDB Java framework allows a attacker to execute arbitrary code.
The vulnerability of the Camel-LevelDB DefaultLevelDBSerializer class in the Apache Camel LevelDB Java framework is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the jbd2_journal_get_create_access() function in the fs/jbd2/transaction.c file of the Linux kernel’s file system allows a attacker to cause a service failure.
The vulnerability of the jbd2journalgetcreateaccess function in the fs/jbd2/transaction.c file of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service failures...
The vulnerability of the ACL::hasPrivilege() function in the OPNsense operating system allows a hacker to bypass security restrictions and gain access to read, modify, or delete data.
The vulnerability of the ACL::hasPrivilege function in the OPNsense operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to read, modify, or delete data...
The vulnerability of the ext4_get_journal inode() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4getjournal inode function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability in Node.js’ follow-redirects module, related to information disclosure, allows attackers to gain access to confidential data.
The vulnerability in Node.js’ follow-redirects module is related to the exposure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability of the dvb_create_media_entity() function in the drivers/media/dvb-core/dvbdev.c file of the Linux operating system’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dvbcreatemediaentity function in the drivers/media/dvb-core/dvbdev.c file of the Linux kernel’s multimedia device driver is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the mport_cdev_open() function in the drivers/rapidio/devices/rio_mport_cdev.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mportcdevopen function in the drivers/rapidio/devices/riomportcdev.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the qlcnic_sriov_init() function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic_sriov_common.c file of the Ethernet network adapter driver for Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qlcnicsriovinit function in the drivers/net/ethernet/qlogic/qlcnic/qlcnicsriovcommon.c file of the Ethernet network adapter driver for Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the parse_report_descriptor() function in the USB HID protocol analyzer of Wireshark allows a hacker to induce a service failure.
The vulnerability of the parsereportdescriptor function in the USB HID protocol analyzer of Wireshark, a computer network traffic analyzer, is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the read_cli_parser_preference() function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.
The vulnerability of the readcli parserpreference function in the NTS-KE protocol analyzer for computer network traffic analysis tool Wireshark is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the RF4CE protocol discoverer, a traffic analyzer for computer networks by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the RF4CE protocol discoverer and the Wireshark network traffic analyzer involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the tcf_ife_dump() function in the net/sched/act_ife.c module of the network/sched/control subsystem of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the tcfifedump function in the net/sched/actife.c module of the net/sched/actife subsystem of the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Node.js WebSocket library, related to the use of uninitialized resources, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Node.js WebSocket library is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...