The vulnerability of the Handlebars template creation tool lies in insufficient checking of unusual or exceptional states, allowing a violator to trigger a service failure.

The vulnerability of the Handlebars template creation tool is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the parse_handshake_header() function in the GnuTLS cryptographic library allows a attacker to induce a service failure.

The vulnerability of the parsehandshakeheader function in the GnuTLS cryptographic library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the gvs_tuple_is_normal() function in the glib/gvariant-serialiser.c file of the Glib library allows a attacker to disclose protected information.

The vulnerability of the gvstupleisnormal function in the glib/gvariant-serialiser.c library in the Glib library is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that ...

The vulnerability of the rzg2l_adc_probe() function in the drivers/iio/adc/rzg2l_adc.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the rzg2ladcprobe function in the drivers/iio/adc/rzg2ladc.c module of the Linux kernel is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to cause service failures...

The vulnerability of the av_bprint_finalize() function in the zmqsend utility of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the avbprintfinalize function in the zmqsend utility of the FFmpeg multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the `zipfile.is_zipfile()` function in the Python programming language’s pip module allows a hacker to write arbitrary files.

The vulnerability of the zipfile.iszipfile function in the Python programming language involves unlimited downloading of files of a dangerous type. Exploiting this vulnerability could allow an attacker to download any type of files...

The vulnerability of the Rust library for session management in Rack applications: Rack::Session, which allows attackers to cause a service failure.

The vulnerability of the Rust library for session management in Rack applications is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the setOutFilterStartsWith() function in the Camel-Mail component of the Apache Camel Java framework allows a attacker to execute arbitrary code.

The vulnerability of the setOutFilterStartsWith function in the Camel-Mail component of the Apache Camel framework is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the lib/precompiler.js component, a tool for creating Handlebars templates, allows a hacker to cause a service failure.

The vulnerability of the lib/precompiler.js component, which is part of the Handlebars template creation tool, is related to the lack of security measures for handling web page structures. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the skl_int3472_register_regulator() function in the drivers/platform/x86/intel/int3472/clk_and_regulator.c file of the Linux operating system’s X86 kernel device driver allows a attacker to cause a service failure.

The vulnerability of the sklint3472registerregulator function in the drivers/platform/x86/intel/int3472/clkandregulator.c file of the Linux operating system’s X86 kernel device driver is related to the reclamation of memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the zmqsend utility in the FFmpeg multimedia library allows a hacker to induce a service failure.

The vulnerability of the zmqsend utility in the FFmpeg multimedia library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the usbhs_remove() function in the drivers/usb/renesas_usbhs/common.c driver module allows a hacker to cause a service failure.

The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c file of the Linux device driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server implementation in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ConsulRegistryUtils.deserialize method in the ConsulRegistry class of the Java framework Apache Camel allows a attacker to execute arbitrary code.

The vulnerability of the ConsulRegistryUtils.deserialize method in the ConsulRegistry class of the Java framework Apache Camel is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

The vulnerability of the lpddr2_nvm_probe() function in the drivers/mtd/lpddr/lpddr2_nvm.c module of the Linux operating system’s memory driver, which allows a hacker to cause a service failure.

The vulnerability of the lpddr2nvmprobe function in the drivers/mtd/lpddr/lpddr2nvm.c module of the Linux operating system’s memory driver lies in the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the functions get_perf_level_count() and cppc_get_cpu_power() in the driver/cpufreq/cppc_cpufreq.c module, a frequency scaling driver for Linux processors, allows a hacker to trigger a service failure.

The vulnerability of the getperflevelcount and cppcgetcpupower functions in the drivers/cpufreq/cppccpufreq.c driver for scaling kernel frequency in Linux operating systems is related to copying buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability...

The vulnerability of the JWT Ruby JWT implementation lies in the authentication process’s flaws, which allow attackers to trigger a service denial.

The vulnerability of the JWT Ruby implementation is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the `tracing_buffers_mmap_close()` function in the kernel/trace/trace.c module, which supports Linux operating system’s kernel tracing functionality, allows a hacker to cause a service failure.

The vulnerability of the tracingbuffersmmapclose function in the kernel/trace/trace.c module, which supports Linux operating system’s kernel tracing mechanism, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can...

The vulnerability of the msimg32.dll library in the Mobatek MobaXterm remote administration software allows a perpetrator to execute arbitrary code.

The vulnerability of the msimg32.dll library in the Mobatek MobaXterm remote administration software is related to an uncontrolled search path element. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

The vulnerability of the dpu_core_irq_callback_handler() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_hw Interrupts.c file of the DRI support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the dpucoreirqcallbackhandler function in the drivers/gpu/drm/msm/disp/dpu1/dpuhw Interrupts.c file of the DRI support driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __scm_smc_call() function in the drivers/firmware/qcom/qcom_scm-smc.c driver, a Linux kernel support driver, allows a hacker to trigger a system failure.

The vulnerability of the scmsmccall function in the drivers/firmware/qcom/qcomscm-smc.c driver for Linux kernel-based operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the dwc3_host_init() function in the drivers/usb/dwc3/host.c file of the driver module allows a hacker to cause a service failure in the DesignWare USB3-based controller-based Linux operating system.

The vulnerability of the dwc3hostinit function in the drivers/usb/dwc3/host.c file of the DesignWare USB3 controller support driver in the Linux operating system is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pca9450_i2c_probe() function in the drivers/regulator/pca9450-regulator.c file of the Linux kernel’s voltage and current regulator driver module allows a hacker to cause a service failure.

The vulnerability of the pca9450i2cprobe function in the drivers/regulator/pca9450-regulator.c file of the Linux kernel’s voltage and current regulator driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a syste...

The vulnerability of the Addressable URI library implementation allows a perpetrator to trigger a service failure.

The vulnerability of the URI library’s implementation is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the modular interface between web servers and web applications in Rack, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the modular interface between web servers and Rack web applications is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the `resolvePartial()` and `invokePartial()` functions in the `lib/handlebars/runtime.js` component, a tool for creating Handlebars templates, allows a malicious actor to cause a service failure.

The vulnerability of the resolvePartial and invokePartial functions in the lib/handlebars/runtime.js component, which is used for creating Handlebars templates, is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the rmapremove() function in the KVM virtualization subsystem of the Linux operating system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the rmapremove function in the KVM virtualization subsystem of the Linux operating system is related to the use of memory after it is freed, as a result of a pointer that has reached its expiration time. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) relates to the occurrence of operations outside the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...

The vulnerability of the ipv6_rpl_srh_rcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv6rplsrhrcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow a remote attacker to compromise t...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device is related to authentication procedures that allow unauthorized access by attackers to protected information.

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device are related to deficiencies in the authentication process. Exploiting this vulnerability could allow a maliciou...

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures usi...

The vulnerability of the ColdFusion software platform, related to the unlimited loading of dangerous type files, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Internal Operations component of the Oracle HR Intelligence system, which is used for collecting and analyzing company personnel data. This component is part of the Oracle E-Business Suite, a business automation solution. This vulnerability allows attackers to gain full control over the application.

The vulnerability of the Internal Operations component of the Oracle HR Intelligence system, which is used for collecting and analyzing employee data, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain full control over the application using...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in a faulty path name limitation in the catalog access. This allows attackers to execute arbitrary commands or cause service failures.

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to an incorrect limit on the path name to the directory. Exploiting this vulnerability could allow a...

The vulnerability of the Business Logic Infrastructure Security component of the JD Edwards EnterpriseOne Resource Management System allows a hacker to gain full control over the application.

The vulnerability of the Business Logic Infrastructure Security component of the JD Edwards EnterpriseOne Tools system for resource management involves insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using th...

The vulnerability of the OpenSearch software package, related to insufficient protection of service data, allows a hacker to trigger a service failure.

The vulnerability of the OpenSearch software package is related to insufficient protection of service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the DLS component in the OpenSearch software package allows a intruder to gain unauthorized access to protected information.

The vulnerability of the DLS component in the OpenSearch software package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the HTTP response processing flow application interface in the Urllib3 library for Python programming language allows a attacker to cause a service failure.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Mattermost instant messaging application, related to a breach of data protection mechanisms, allows attackers to circumvent existing security measures.

The vulnerability of the Mattermost instant messaging application is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

The vulnerability of the xhci_free_virt_device() function in the drivers/usb/host/xhci-mem.c driver for USB devices in Linux kernels allows a hacker to cause a service failure.

The vulnerability of the xhcifreevirtdevice function in the drivers/usb/host/xhci-mem.c module of the Linux device driver framework is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vmw_kms_cursor_snoop() function in the drivers/gpu/drm/vmwgfx/vmwgfx_kms.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the vmwkmscursorsnoop function in the drivers/gpu/drm/vmwgfx/vmwgfxkms.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the HostMatchList.checkIP method in the Git repository management system Gitea, which allows a hacker to perform an SSRF attack

The vulnerability of the HostMatchList.checkIP method in the Git repository management system Gitea is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

The vulnerability of the execute_sql_query() function in the pgAdmin 4 database management tool’s AI assistant allows a hacker to gain access to modify data or execute arbitrary code.

The vulnerability of the executesqlquery function in the pgAdmin 4 database management tool’s AI assistant involves a lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker to gain access to modify data or execute arbitrary code...

The vulnerability of the HTTPConnection.urlopen() method in the HTTP library of the Urllib3 Python programming language, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the NVIDIA deep learning experiment management library runx, related to the failure to take measures to neutralize special elements, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the NVIDIA Deep Learning Experiment Management Library relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Core component of the Oracle Enterprise Command Center Framework allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle Enterprise Command Center Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP network protocol...

The vulnerability of the CoAP Handler Block1 in the open-source implementation of the LightWeight Machine-to-Machine (LwM2M) protocol, Eclipse Wakaama, allows a attacker to cause a service failure.

The vulnerability of the CoAP Block1 handler in the open-source implementation of the LightWeight Machine-to-Machine LwM2M protocol, Eclipse Wakaama, involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the RAW-printing service of the microprogramming software for the multifunctional device EPSON L14150 allows a perpetrator to cause a service failure.

The vulnerability of the RAW-printing function of the Microprogramming Software for the EPSON L14150 multifunctional device lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the device...

The vulnerability of the check_session_buf_not_used() function in the tls-crypt-v2 software of OpenVPN allows a malicious individual to gain unauthorized access to protected information, cause service failures, or execute arbitrary code.

The vulnerability of the checksessionbufnotused function in the tls-crypt-v2 software of OpenVPN allows for the use of memory after it is freed. Exploiting this vulnerability could enable a remote attacker to cause a service failure or execute arbitrary code...

The vulnerability in the web interface of the Cisco Crosswork Network Controller (CNC) allows a attacker to execute arbitrary commands.

The vulnerability of the web-based interface for controlling the Cisco Crosswork Network Controller CNC is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...