The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the use of memory after it is freed, allows attackers to cause a service failure.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to copying buffers without checking input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Netmaker’s virtual network platform, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality of protected information.

The vulnerability of Netmaker’s virtual network platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality of the protected information...

The vulnerability of PDF viewing and editing programs such as Acrobat DC and Acrobat Reader DC, particularly in versions like Acrobat 2024, stems from errors in verifying cryptographic signatures. This allows attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, and Acrobat 2024 are related to errors in verifying the cryptographic signature. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of input data. This allows attackers to bypass existing security mechanisms.

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to bypass existing security mechanisms...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

The vulnerability of the developer tool “1C:Library of Regulated Reporting” relates to deficiencies in code generation process management. This allows attackers to manipulate URL parameters in order to gain access to local files and directories on the server.

The vulnerability of the developer tool “1C:Library of Regulated Reporting” relates to deficiencies in code generation process management. Exploiting this vulnerability allows a malicious actor to remotely manipulate URL parameters in order to gain access to local files and directories on the...

The vulnerability of Zyxel network device microprogramming software, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of Zyxel network device microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CISA Thorium analytical platform lies in its incorrect session duration, which allows attackers to bypass existing security mechanisms.

The vulnerability of the CISA Thorium analytical platform is related to an incorrect session duration. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of Fortinet FortiWeb web applications lies in the lack of measures taken to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of Fortinet FortiWeb web applications relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created HTTP request...

The vulnerability of the pythonic_tool_parser.py script from the library for working with large language models (LLMs), vLLM, allows a perpetrator to trigger a service failure.

The vulnerability of the pythonictoolparser.py script, a library for working with large language models LLMs, is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, stems from insufficient restrictions on authentication attempts. This allows a malicious actor to circumvent existing security restrictions.

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can...

The vulnerability of the FortiWeb web application’s network interface programming interface, related to stack-based buffer overflows, allows an attacker to execute arbitrary code.

The vulnerability of the FortiWeb web application’s network interface program interface is related to buffer overflow attacks based on stacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted HTTP requests...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service failures...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass existing security...

The vulnerability of the `venus_helper_alloc_dpb_bufs()` function in the `drivers/media/platform/qcom/venus/helpers.c` file, a driver for supporting multimedia devices in the Linux operating system. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the venushelperallocdpbbufs function in the drivers/media/platform/qcom/venus/helpers.c file, a driver for supporting multimedia devices in the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to...

The vulnerabilities of the functions __msc_buffer_win_free() and msc_buffer_get_page() in the driver/hwtracing/intel_th/msu.c module of the Linux kernel’s hardware tracing driver allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions mscbufferwinfree and mscbuffergetpage in the drivers/hwtracing/intelth/msu.c module of the Linux kernel’s hardware tracing driver is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the mcp_smbus_write() function in the drivers/hid/hid-mcp2221.c module of the user interface subsystem driver for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mcpsmbuswrite function in the drivers/hid/hid-mcp2221.c module of the Linux kernel’s input device subsystem driver relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the xsk_generic_rcv() function in the net/xdp/xsk.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xskgenericrcv function in the net/xdp/xsk.c module of the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the irdmaDestroy_cq() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver for InfiniBand allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irdmaDestroycq function in the drivers/infiniband/hw/irdma/verbs.c module of the Linux kernel’s InfiniBand driver is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the j1939_netdev_notify() function in the net/can/j1939/main.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the j1939netdevnotify function in the net/can/j1939/main.c module of the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smc_clc_send_confirm_accept() function in the net/smc/smc_clc.c module of the CLC-handshaking TCP socket subsystem of the SMC subsystem in the Linux operating system allows a intruder to cause a service failure.

The vulnerability of the smcclcsendconfirmaccept function in the net/smc/smcclc.c module of the CLC-handshaking TCP socket subsystem of the Linux operating system’s SMC kernel is related to the assignment of pointers due to an incorrect update of a reused resource. Exploiting this vulnerability c...

The vulnerability of the v1/fetch-links interface of the software platform for creating user interfaces based on Language Models (LLMs) like Flowise allows a attacker to perform an SSRF attack.

The vulnerability of the v1/fetch-links interface of the software platform for creating user interfaces based on Language Models LLMs from Flowise is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF...

The vulnerability of the `ksmbd_smb2_check_message()` function in the `fs/smb/server/smb2misc.c` module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c module, which is part of the SMB server support in Linux operating systems, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the smb2_set_ea() function in the fs/smb/server/smb2pdu.c module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smb2setea function in the fs/smb/server/smb2pdu.c module of the SMB server software in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an...

The vulnerability of the damon_get_intervals_score() function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a system failure.

The vulnerability of the damongetintervalsscore function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem is related to insufficient checking of input data when dividing by zero. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

The vulnerability of the an30259a_probe() function in the drivers/leds/leds-an30259a.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the an30259aprobe function in the drivers/leds/leds-an30259a.c file of the Linux kernel is related to incorrect initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the reuseport_stop_listen_sock() function in the net/core/sock_reuseport.c module exposes support for network functions in the Linux kernel, allowing a hacker to trigger a service failure.

The vulnerability of the reuseportstoplistensock function in the net/core/sockreuseport.c module related to Linux kernel network functions is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions sf_pdma_alloc_desc() and sf_pdma_desc_residue() in the drivers/dma/sf-pdma/sf-pdma.c module of the Linux kernel’s DMA driver software allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions sfpdmaallocdesc and sfpdmadescresidue in the drivers/dma/sf-pdma/sf-pdma.c module of the Linux kernel’s DMA driver lies in the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerabilities of the functions prepare_threshold_block(), amd_threshold_interrupt(), and mce_threshold_create_device() in the arch/x86/kernel/cpu/mce/amd.c module, which are part of the Linux operating system’s x86 kernel support, allow attackers to cause system failures.

The vulnerabilities of the functions preparethresholdblock, amdthresholdinterrupt, and mcethresholdcreatedevice in the arch/x86/kernel/cpu/mce/amd.c module of the Linux operating system’s x86 kernel support are related to integer overflow or cyclic shift vulnerabilities. Exploitation of these...

The vulnerability of the mlx5e_rq_to_ready() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5erqtoready function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect resource. Exploiting this vulnerability could allow a attacker to caus...

The vulnerability of the phy_config_inband() function in the drivers/net/phy/phy.c file of the Linux physical layer network driver kernel module allows a hacker to cause a service failure.

The vulnerability of the phyconfiginband function in the drivers/net/phy/phy.c file of the Linux physical layer network driver is related to mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of Flowise Cloud, a software platform for creating user interfaces based on Language Models (LLMs), allows a hacker to gain access to confidential information.

The vulnerability of Flowise Cloud, a software platform for creating user interfaces based on Language Models LLMs, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to confidential information...

The vulnerability of the init_amd_zen2() function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the initamdzen2 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux kernel support for x86 processors, is related to incorrect support for AMD Zen2 processors. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the `netfs_pgpriv2_begin_copy_to_cache()` function in the `fs/netfs/read_pgpriv2.c` module of the Linux kernel’s network file system support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the netfspgpriv2begincopytocache function in the fs/netfs/readpgpriv2.c module of the Linux kernel’s network file system support module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the iommu_table_clear() function in the arch/powerpc/kernel/iommu.c module of the PowerPC platform allows a hacker to cause a service failure.

The vulnerability of the iommutableclear function in the arch/powerpc/kernel/iommu.c module of the Linux operating system’s PowerPC platform is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fbtft_framebuffer_alloc() function in the drivers/staging/fbtft/fbtft-core.c module, which supports additional hardware devices in Linux, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the fbtftframebufferalloc function in the drivers/staging/fbtft/fbtft-core.c module, which supports additional hardware devices in Linux, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the snd_pcm_oss_sync() function in the sound/core/oss/pcm_oss.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the sndpcmosssync function in the sound/core/oss/pcmoss.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the panfrost_ioctl_create_bo() function in the drivers/gpu/drm/panfrost/panfrost_drv.c driver for the Direct Rendering Infrastructure (DRI) component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panfrostioctlcreatebo function in the drivers/gpu/drm/panfrost/panfrostdrv.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker...

The vulnerability of the do_getHW_stats() function in the drivers/infiniband/hw/mlx5/counters.c module of the Linux operating system’s InfiniBand driver allows a hacker to cause a service failure.

The vulnerability of the dogetHWstats function in the drivers/infiniband/hw/mlx5/counters.c module of the Linux operating system’s InfiniBand driver is related to memory writing beyond the allowed buffer data size limits. Exploiting this vulnerability could allow a attacker to cause a service...

The vulnerability of the spi_mem_calc_op_duration() function in the drivers/spi/spi-mem.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spimemcalcopduration function in the drivers/spi/spi-mem.c file of the Linux operating system’s SPI device driver relates to a division by zero error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the FreeBSD operating system’s kernel, which allows a hacker to gain access to the file system

The vulnerability of FreeBSD operating systems lies in the insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to gain access to the file system...

The vulnerability of the xrx200_alloc_buf() function in the drivers/net/ethernet/lantiq_xrx200.c file of the Linux kernel’s network adapter driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xrx200allocbuf function in the drivers/net/ethernet/lantiqxrx200.c module of the Linux Ethernet network adapter driver is related to the unrestricted and unregulated distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the...

The vulnerability of the rtsock_msg_buffer() function in the operating system kernel of FreeBSD, which allows a hacker to cause a service failure

The vulnerability of the rtsockmsgbuffer function in the kernel of the FreeBSD operating system is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerabilities of the functions drm_sched_entity_kill_jobs_cb() and drm_sched_entity_kill_jobs() in the drivers/gpu/drm/scheduler/sched_entity.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allow a malicious actor to cause a service failure.

The vulnerabilities of the functions drmschedentitykilljobscb and drmschedentitykilljobs in the drivers/gpu/drm/scheduler/schedentity.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel are related to improper memory release mechanisms memory leaks. Exploiting these...

The vulnerability of the get_nodes() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getnodes function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the usbremove_hcd() function in the drivers/usb/core/hcd.c file of the Linux operating system’s USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbremovehcd function in the drivers/usb/core/hcd.c file of the Linux operating system’s USB device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of the `dw_pcie_ep_set_bar()` function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver module allows a hacker to cause a service failure.

The vulnerability of the dwpcieepsetbar function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for Linux operating systems involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `brcmfmac/pcie.c` function in the `driver/net/wireless/broadcom/brcm80211/brcmfmac` module of the Broadcom wireless adapter driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the brcmfpcieinitRingbuffers function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c file of the Broadcom wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...