74701 matches found
The vulnerability of the usbhsc_notify_hotplug() function in the USB driver (drivers/usb/renesas_usbhs/common.c) in Linux kernel allows a hacker to cause a service failure.
The vulnerability of the usbhscnotifyhotplug function in the USB driver drivers/usb/renesasusbhs/common.c in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system is related to incorrect locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the iso.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the iso.c component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the Werkzeug library for developing web applications, related to the manipulation of cross-site requests, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Werkzeug library for developing web applications relates to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to elevate their privileges to a system-level level.
The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their system-level privileges...
The vulnerability of the receive.c component of WireGuard in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the wireguard/receive.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the events_base.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the eventsbase.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the stripTags component and unescapeHTML in the DOM and AJAX Prototype framework allows a hacker to cause a service failure.
The vulnerability of the stripTags and unescapeHTML components in the DOM and AJAX Prototype framework is related to insufficient processing of regular expressions. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Open vSwitch multi-level switch lies in the lack of a mechanism for verifying the source of the connection. This allows an attacker to trigger a service failure.
The vulnerability of the Open vSwitch multi-level switch lies in the lack of a mechanism for verifying the source of the connection. Exploiting this vulnerability allows an attacker to trigger a service failure using specially created BFD packets...
The vulnerability of the stb_vorbis component in the C/C++ Libstb library allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the stbvorbis component in the C/C++ Libstb library is related to the repeated release of memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially creat...
The vulnerability of the C/C++ Libstb library, related to writing beyond buffer boundaries, allows a hacker to trigger a service failure.
The vulnerability of the C/C++ Libstb library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially created file...
The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.
The vulnerability of the C/C++ Libstb library lies in the writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service failures through the use of a specially created file...
The vulnerability of the ec_glob() function in the EditorConfig code library allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the ecglob function in the EditorConfig code library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the nfsd_file_put() function in the filecache.c component of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the nfsdfileput function in the filecache.c component of the Linux kernel lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the command-line tool of the Zstandard data compression library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the command-line tool of the Zstandard data compression library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.
The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the parse_tag() function in the libass/ass_parse.c component of the ASS/SSA subtitle renderer library in Libass allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the parsetag function in the libass/assparse.c component of the ASS/SSA subtitle renderer library in Libass is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its...
The vulnerability of the PLAY command in the Live555 multimedia streaming library, which allows a hacker to cause a service failure.
The vulnerability of the PLAY command in the Live555 multimedia streaming library group is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the AC3 File Handler component in the streaming multimedia processing library of Live555 allows a attacker to cause a service failure.
The vulnerability of the AC3 File Handler component in the Live555 multimedia streaming library is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the OpenSC smart card handling library, related to writing beyond the buffer boundary, allows a violator to trigger a service failure.
The vulnerability of the OpenSC smart card handling library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of Google Chrome, related to errors in the implementation of security checks for standard elements, allows attackers to escalate their privileges.
The vulnerability of Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...
Vulnerability of the destroy_unused_implicit_child_mr() function in the drivers/infiniband/hw/mlx5/odp.c module – This driver is part of the Linux operating system’s InfiniBand kernel support. It allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the destroyunusedimplicitchildmr function in the drivers/infiniband/hw/mlx5/odp.c module – The Linux kernel driver for InfiniBand is vulnerable due to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the MetaSlider plugin in the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the MetaSlider plugin in the WordPress content management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures, allowing attackers to circumvent security restrictions.
The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...
The vulnerability of the `setUpgradeFW` function in TOTOLINK CP450 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the setUpgradeFW function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...
The microprogrammed software for FortiSwitch Ethernet switches, which utilizes a rigidly encoded cryptographic key, allows a intruder to execute any arbitrary code.
The microprogrammed software of FortiSwitch Ethernet switches is related to the use of a rigidly encoded cryptographic key. Exploiting this vulnerability can allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the remote access and replication server of Synology Replication Service, as well as the corporate-level server of Synology Unified Controller for operating systems such as Synology DiskStation Manager (DSM), is related to a single-shift error. This vulnerability allows attackers to execute arbitrary code or trigger a service failure.
The vulnerability of the remote access and replication server of Synology Replication Service, as well as the corporate-level servers of Synology Unified Controller and Synology DiskStation Manager DSM, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the formMapDelDevice function in the microprogramming software for TOTOLINK A3002R allows a intruder to execute arbitrary commands.
The vulnerability of the formMapDelDevice function in the microprogrammed software of TOTOLINK A3002R routers lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.
The vulnerability of embedded software developed for Qualcomm chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Hyper-V hardware virtualization system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its memory management after it is released. This allows attackers to execute arbitrary code.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to deficiencies in the authentication process, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the ColdFusion software platform arises from incorrect restrictions on the path to the restricted catalog, allowing attackers to bypass security restrictions.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
The vulnerability of the Data Manager component of Siemens SENTRON 7KT PAC1260, a multi-functional device for measuring parameters of electrical circuits, allows a hacker to gain unauthorized access to the device.
The vulnerability of the Data Manager component in the microprogramming software for multifunctional measurement devices for measuring electrical network parameters from Siemens SENTRON 7KT PAC1260 is related to the use of rigidly encrypted account data. Exploiting this vulnerability can allow an...
The vulnerability of ESET’s command-line scanner for anti-virus protection allows a hacker to execute arbitrary code.
The vulnerability of ESET’s command-line scanner for anti-virus protection is related to an uncontrolled element in the loading process of the version.dll library. Exploiting this vulnerability can allow a hacker to execute arbitrary code...
Vulnerability of the dw_i3c_common_remove() function in the drivers/i3c/master/dw-i3c-master.c module – The I3C support driver for the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the dwi3ccommonremove function in the drivers/i3c/master/dw-i3c-master.c module – Linux’s I3C driver architecture is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
Vulnerability of the dm9000_drv_remove() function in the drivers/net/ethernet/davicom/dm9000.c module – This driver provides support for Ethernet adapter devices in Linux operating systems. It can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the dm9000drvremove function in the drivers/net/ethernet/davicom/dm9000.c module – The Ethernet adapter driver from Davicom’s Linux kernel has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromi...
The vulnerability of the padata_free_shell() function in the kernel/padata.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the padatafreeshell function in the kernel/padata.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the Samba networking communication package, related to authentication errors, allows a perpetrator to gain access to confidential data.
The vulnerability of the Samba networking communication package is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability in the mm/usercopy.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the mm/usercopy.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the `py.path.svnwc` component, a development and testing utility for Python programs, allows a hacker to trigger a service failure.
The vulnerability of the py.path.svnwc component, a utility for Python program development and testing, is related to insufficient handling of regular expressions. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the imlib_load_image_with_error_return function in the Imlib image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the imlibloadimagewitherrorreturn function in the Imlib image processing library is related to out-of-buffer writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...
The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, an...
The vulnerability of the JPEG2000Codec::DecodeByStreamsCommon function in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the JPEG2000Codec::DecodeByStreamsCommon function, a tool for working with DICOM images in Grassroots DiCoM, is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidenti...
The vulnerability of the NFSD component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the NFSD component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the read_subimage_data function in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the readsubimagedata function in the OpenImageIO image processing library is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...