74701 matches found
The vulnerability of the `dm_update_mst_vcpi_slots_for_dsc()` function in the Direct Rendering Infrastructure (DRI) driver for AMD kernel-based Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the dmupdatemstvcpislotsfordsc function in the Direct Rendering Infrastructure DRI driver for AMD kernel-based Linux operating systems is related to insufficient validation of input data during division by zero. Exploiting this vulnerability can allow an attacker to cause a...
The vulnerability of the z_erofs_gbuf_growsize() function in the Linux kernel file system allows a hacker to trigger a service failure.
The vulnerability of the zerofsgbufgrowsize function in the Linux kernel file system is related to reading beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ADI web interface of the Verve Asset Manager software allows a perpetrator to execute arbitrary commands within the context of the Agentless Device Inventory.
The vulnerability of the ADI web interface of the Verve Asset Manager software solution is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands within the...
The vulnerability of the transformMiddleware function in the @fs mechanism of the local development server for Vite allows a hacker to read arbitrary files.
The vulnerability of the transformMiddleware function in the @fs mechanism of the local development server for Vite applications is related to incorrect processing of special symbols in input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files by sending a special...
The vulnerability of the get_work_pool() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the getworkpool function in the Linux operating system’s kernel is related to integer overflow or cyclic shift attacks. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the nfsd4_deleg_getattr_conflict() function of the Linux kernel’s network file system allows a attacker to cause a service failure.
The vulnerability of the nfsd4deleggetattrconflict function in the Linux kernel’s network file system is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the mlx5ehandle Rx_cqe_mpwrq_shampo() function in the Ethernet adapter driver of Mellanox’s Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mlx5ehandlerxcqempwrqshampo function in the Mellanox Ethernet network adapter driver for Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the __btrfs_cow_block() function in the Btrfs file system of Linux kernels allows a attacker to cause a service failure.
The vulnerability of the btrfscowblock function in the Btrfs file system of Linux operating systems is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the psi/zbfont.c file in the software suite for processing, transforming, and generating Ghostscript documents allows a perpetrator to execute arbitrary code.
The vulnerability of the psi/zbfont.c file in the software for processing, converting, and generating Ghostscript documents is related to the copying of buffers without checking the size of the input data, as a result of incorrect conversion of glyphs to Unicode. Exploiting this vulnerability can...
The vulnerability of the Type 4 function in the PDF processing, conversion, and generation software for Ghostscript allows a hacker to execute arbitrary code.
The vulnerability of Type 4 function in the software suite for processing, converting, and generating Ghostscript documents is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a speciall...
The vulnerability of the contrib/japanese/gdevnpdl.c file, which is part of the NPDL Device software suite for processing, transforming, and generating Ghostscript documents, allows a perpetrator to execute arbitrary code.
The vulnerability of the contrib/japanese/gdevnpdl.c file, which is part of the NPDL Device software suite for processing, transforming, and generating Ghostscript documents, stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an...
The vulnerability of the files base/write_t1.c and psi/zfapi.c, which are components of the DollarBlend software suite for processing, transforming, and generating Ghostscript documents, allows a perpetrator to execute arbitrary code.
The vulnerability in the files base/writet1.c and psi/zfapi.c of the DollarBlend software component, which is part of the software suite for processing, transforming, and generating Ghostscript documents, involves copying buffers without checking the size of the input data. Exploiting this...
The vulnerability of the txt_get_unicode() function in the devices/vector/doc_common.c file of the Ghostscript document processing, conversion, and generation software allows a hacker to execute arbitrary code.
The vulnerability of the txtgetunicode function in the devices/vector/doccommon.c file of the Ghostscript document processing, conversion, and generation software set is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...
The vulnerability of the bj10v_print_page() function in the contrib/japanese/gdev10v.c file of the BJ10V Device component of the software development kit for processing, transforming, and generating Ghostscript documents, allowing a malicious individual to execute arbitrary code or cause a service failure.
The vulnerability of the bj10vprintpage function in the contrib/japanese/gdev10v.c file of the BJ10V Device component of the software development kit for processing, transforming, and generating Ghostscript documents is related to the copying of buffers without checking the size of the input data...
The vulnerability of the uprobe_write_opcode() function in the kernel/events/uprobes.c module of Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the uprobewriteopcode function in the kernel/events/uprobes.c module of Linux operating systems is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nvmet_tcp_install_queue() function in the drivers/nvme/target/tcp.c module of the Linux kernel driver allows a attacker to cause a service failure.
The vulnerability of the nvmettcpinstallqueue function in the drivers/nvme/target/tcp.c module of the Linux kernel driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gp_open_scratch_file_impl() function in the files base/gp_mswin.c and base/winrtsup.cpp of the Ghostscript processing, conversion, and generation software suite allows a malicious actor to read arbitrary files.
The vulnerability of the gpopenscratchfileimpl function in the base/gpmswin.c and base/winrtsup.cpp files of the Ghostscript processing, conversion, and generation software suite is related to an incorrect path name limitation. Exploiting this vulnerability could allow a remote attacker to read...
The vulnerability of the numbers.ct file in the libxslt library allows a hacker to execute arbitrary code.
The vulnerability of the numbers.ct file in the libxslt library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the inet_create() function in the net/ipv4/af_inet.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the inetcreate function in the net/ipv4/afinet.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the `ieee802154_create()` function in the `net/ieee802154/socket.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ieee802154create function in the net/ieee802154/socket.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the bpf_link_show_fdinfo() function in the kernel/bpf/syscall.c module of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the bpflinkshowfdinfo function in the kernel/bpf/syscall.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected...
The vulnerability of the btrfs_ref_tree_mod() function in the fs/btrfs/ref-verify.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the btrfsreftreemod function in the fs/btrfs/ref-verify.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the parse_st() function in the UPnP service’s microprogramming software for Netgear WNR854T allows a hacker to execute arbitrary code.
The vulnerability of the parsest function in the UPnP service of Netgear’s WNR854T router software lies in the fact that the operation outside the buffer is allowed when processing the M-SEARCH request header value. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...
The vulnerability of the taprio_dump() function in the net/sched/sch_taprio.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tapriodump function in the net/sched/schtaprio.c module of the Linux operating system’s kernel is related to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...
The vulnerability of the traceprobe_parse_event_name() function in the kernel/trace/trace_probe.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the traceprobeparseeventname function in the kernel/trace/traceprobe.c file of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...
Vulnerability of the qla2x00_process_els() function in the drivers/scsi/qla2xxx/qla_bsg.c module – This driver provides support for SCSI devices in the Linux operating system. It can be exploited by attackers to cause service failures.
Vulnerability of the qla2x00processels function in the drivers/scsi/qla2xxx/qlabsg.c module – The Linux system’s SCSI device support driver is vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the acpi_processor_power_exit() function in the driver/acpi/processor_idle.c module – The ACPI support driver for the Linux kernel’s processor idle state provides a mechanism for allowing attackers to access protected information or cause system failures.
Vulnerability of the acpiprocessorpowerexit function in the driver/acpi/processoridle.c module – The ACPI support driver for the Linux kernel involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow an attacker to access protected information or cause...
Vulnerability of the pvr2_context_exit() function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file – This driver is a Linux kernel-based driver for supporting multimedia devices connected via USB. It allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the pvr2contextexit function in the drivers/media/usb/pvrusb2/pvrusb2-context.c module – The Linux kernel’s USB multimedia device driver architecture relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the accountablemapping() function in the mm/mmap.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the accountablemapping function in the mm/mmap.c module of the Linux kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the e_show() function in the fs/nfsd/export.c module of the Linux kernel’s Network File System support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the eshow function in the fs/nfsd/export.c module, which is part of the NFS network file system support in Linux kernels, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
The vulnerability of the jfs_readdir() function in the fs/jfs/jfs_dtree.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jfsreaddir function in the fs/jfs/jfsdtree.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the __fpu__restore_sig() function in the arch/x86/kernel/fpu/signal.c module, which supports Linux’s x86 kernel-based operating system, allows a hacker to trigger a service failure.
The vulnerability of the fpurestoresig function in the arch/x86/kernel/fpu/signal.c module of the Linux operating system’s kernel support for the x86 platform is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the virtnet_probe() function in the drivers/net/virtio_net.c module of the Linux kernel allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the virtnetprobe function in the drivers/net/virtionet.c module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...
The vulnerability of the OBN component of the SAP NetWeaver Enterprise Portal software integration platform lies in the lack of authenticity verification for a critical function. This allows attackers to circumvent existing security restrictions.
The vulnerability of the OBN component in the SAP NetWeaver Enterprise Portal software integration platform is related to the lack of authenticity verification for a critical function. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...
The vulnerability of the ovl_lookup() function in the fs/overlayfs/namei.c module of the Linux file system allows a hacker to gain access to protected information.
The vulnerability of the ovllookup function in the fs/overlayfs/namei.c module of the Linux file system supports the kernel’s file system support. This vulnerability is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability can allow an...
The vulnerability of the am65_cpsw_ndo_bpf() function in the Linux kernel driver allows a hacker to induce a service failure.
The vulnerability of the am65cpswndobpf function in the Linux kernel driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the f2fs_submit_page_write() function in the fs/f2fs/data.c module of the F2FS file system support module for Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the f2fssubmitpagewrite function in the fs/f2fs/data.c module of the F2FS file system support in Linux operating systems is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Vulnerability of the ice_bridge_setlink() function in the drivers/net/ethernet/intel/ice/ice_main.c module – A driver for supporting Ethernet network adapters in Intel-based Linux operating systems, which allows a hacker to cause a service failure.
Vulnerability of the icebridgesetlink function in the drivers/net/ethernet/intel/ice/icemain.c module – The driver for supporting Ethernet network adapters in Linux operating systems is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacke...
Vulnerability of the lpfc_cmpl_els_logo() function in the drivers/scsi/lpfc/lpfc_els.c module – The SCSI device support driver for the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the lpfccmplelslogo function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device driver module is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the eDocument Cockpit component of the SAP Electronic Invoicing for Brazil software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the eDocument Cockpit component of the SAP Electronic Invoicing for Brazil software relates to the absence of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system allows a perpetrator to execute arbitrary commands.
The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system exists because measures to neutralize its special elements have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the CLI component of the FortiMail email security system allows a hacker to execute arbitrary codes or commands.
The vulnerability of the CLI component of the FortiMail email security system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or commands...
The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system allows a perpetrator to execute arbitrary code or commands.
The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands using specially created HTTP...
The vulnerability of the email notification sending function in Netgear WNR854T router software allows a hacker to execute arbitrary commands.
The vulnerability of the email notification sending function in Netgear WNR854T router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the emailaddress parameter. Exploiting this vulnerability allows ...
The vulnerability of the inet6_create() function in the net/ipv6/af_inet6.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the inet6create function in the net/ipv6/afinet6.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Vulnerability of the md_check_recovery() function in the drivers/md/md.c module – The driver for supporting multiple devices (RAID and LVM) in the Linux kernel allows a hacker to trigger a service failure.
Vulnerability of the mdcheckrecovery function in the drivers/md/md.c module – The Linux kernel’s device support driver for multiple devices such as RAID and LVM is vulnerable due to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause system...
The vulnerability of the nilfs_segctor_prepare_write() function in the fs/niljs2/segment.c module of the NILFS2 file system support in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the nilfssegctorpreparewrite function in the fs/nilfs2/segment.c module of the NILFS2 file system support in the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigge...
The vulnerability of the SAP BusinessObjects Business Intelligence Platform, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP BusinessObjects Business Intelligence Platform is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the do_set_mempolicy() function in the mm/mempolicy.c file of the Linux kernel’s memory management subsystem allows a attacker to trigger a service failure.
The vulnerability of the dosetmempolicy function in the mm/mempolicy.c file of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the `skb_set_owner_w()` function in Linux operating system kernels, which allows a hacker to cause a service failure
The vulnerability of the skbsetownerw function in Linux operating systems is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...