74701 matches found
The vulnerability of the stk1160-video.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the stk1160-video.c component in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the tcp_dctcp.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the tcpdctcp.c component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems occurs when the operation is performed outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Hyper-converged Infrastructure of Microsoft Azure Stack (HCI), which stems from insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of the Hyper-converged Infrastructure of Microsoft Azure Stack HCI is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows Telephony Service on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Windows Telephony Service in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the configuration file default.cfg of the Tenda F1202 router microprogramming system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the configuration file default.cfg of the Tenda F1202 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the `ipc/namespace.c` component of the Linux operating system allows a attacker to trigger a service failure.
The vulnerability in the ipc/namespace.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the fs/ntfs3/inode.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the fs/ntfs3/inode.c component of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mlx5e_tir_builder_alloc() function in the net/mlx5e component of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the mlx5etirbuilderalloc function in the net/mlx5e component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to errors in the implementation of security checks for standard elements, allows attackers to access confidential data and compromise its integrity.
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...
The vulnerability of the `twisted.web.util.redirectTo` function in the Twisted web framework allows a attacker to access confidential data and compromise its integrity.
The vulnerability of the twisted.web.util.redirectTo function in the Twisted web framework is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...
The vulnerability of the max3100.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the max3100.c component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fslog.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the fslog.c component in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the HTTP library Urllib3 in the Python programming language involves authentication process errors, which allow attackers to access sensitive data and compromise its integrity.
The vulnerability of the HTTP library Urllib3 in the Python programming language is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...
The vulnerability of the upnphost.dll library in the Windows operating system, which allows attackers to escalate their privileges
The vulnerability of the upnphost.dll library in the Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the desktop publishing system Adobe Framemaker, related to a countable loss of significance, allows a hacker to execute arbitrary code.
The vulnerability of the desktop publishing system Adobe Framemaker is related to a countable amount of loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to the use of an incomplete blacklist, allows attackers to circumvent security restrictions.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an incomplete blacklist. Exploiting this vulnerability could allow a hacker to bypass security restrictions...
The vulnerability of the ZimbraSyncService service in the corporate email management system, Zimbra Collaboration Suite, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ZimbraSyncService service in the Zimbra Collaboration Suite enterprise email management system exists due to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access t...
The vulnerability in the implementation of the LDAP service protocol for Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Windows Kernel-mode Driver driver allows attackers to increase their privileges.
The vulnerability of the Windows Kernel-Mode Driver driver in the operating system involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of Microsoft Office packages, Excel, and 365 Apps for Enterprise, as well as Microsoft Access, relates to a full-integer overflow issue, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise, as well as Microsoft Access, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...
The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure lies in the exposure of password values in log files, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure is related to the disclosure of password values in log files. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information from ...
The vulnerability of the cppc_get_cpu_cost() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cppcgetcpucost function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the RabbitMQ messaging broker lies in the failure to remove script-related HTML tags from web pages, allowing attackers to compromise data integrity.
The vulnerability of the RabbitMQ messaging broker is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...
The vulnerability of the data.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the data.c component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the cadence_master.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the cadencemaster.c component in the Linux operating system is related to reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the OpenSearch software package, related to the disclosure of information through discrepancies, allows a perpetrator to compromise the integrity of data.
The vulnerability of the OpenSearch software package is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...
The vulnerability of the Kerberos Key Distribution Proxy Service in Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Kerberos Key Distribution Proxy Service in Windows operating systems is related to insufficient resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems occurs when the operation is performed outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges
The vulnerability of the Digital Media component of Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the desktop publishing system Adobe Framemaker lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the desktop publishing system Adobe Framemaker is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially created malicious file...
The vulnerability of the Microsoft 365 Apps for Enterprise package, related to memory usage after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the implementation of the AWS4-HMAC-SHA256 algorithm in the cross-platform FTP server CrushFTP allows a hacker to bypass security restrictions, gain access to the administrator account, and execute arbitrary commands.
The vulnerability of the AWS4-HMAC-SHA256 algorithm implementation in the cross-platform FTP server CrushFTP relates to the bypassing of authentication by using the default crushadmin account. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions, gain access ...
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the formPPPoESetup function in the microprogramming software for routers EDIMAX RE11S allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX RE11S routers stems from copying buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitra...
The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to execute arbitrary code.
The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...
The vulnerability in the driver/driver/usb/musb/musb_gadget.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/usb/musb/musbgadget.c component of the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Kerberos authentication network protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos authentication protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
The vulnerability of the udp_media.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the udpmedia.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to type conversion errors, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Active Directory Certificate Services on Windows operating systems allows attackers to increase their privileges.
The vulnerability of Active Directory Certificate Services on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...
The vulnerability of the tap.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the tap.c component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially created malicious file...
The vulnerability of the NTFS file system of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...
The vulnerability in the web interface for managing Tenda FH1202 micro-program software routers allows a hacker to escalate their privileges.
The vulnerability of the web interface for managing Tenda FH1202 micro-programming software routers is related to deficiencies in access control when processing the /goform/SysToolChangePwd endpoint. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending...