The vulnerability of the ApacheCookieParse method in FortiWeb web applications allows attackers to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the ApacheCookieParse method in FortiWeb web applications relates to the reliance on cookie files without any checks to verify their authenticity and integrity. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary...

The vulnerability of the WebML component in the Google Chrome browser, which allows a hacker to trigger a service failure.

The vulnerability of the WebML component in Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created web page...

Vulnerability of the Graphics component: Text browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to execute arbitrary code.

Vulnerability of the Graphics component: The text-based browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Google Chrome browser’s CSS component, which allows a hacker to trigger a service failure

The vulnerability of the Google Chrome browser’s CSS component is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to cause a service failure by loading a specially created extension...

The vulnerability of the iFrameSandbox component in Google Chrome allows a hacker to bypass security restrictions.

The vulnerability of the iFrameSandbox component in Google Chrome is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

The vulnerability of the LibSoup library for HTTP servers stems from deficiencies in HTTP request processing, allowing attackers to induce service failures.

The vulnerability of the HTTP server-based LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the md4sum() function in the NTLM component of the access library for HTTP servers allows a hacker to cause a service failure.

The vulnerability of the md4sum function in the NTLM component of the HTTP server access library LibSoup is related to the escape of an operation beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerabilities of the `png_write_image_16bit()` and `png_write_image_8bit()` functions in the library for working with PNG bitmap graphics allow attackers to gain unauthorized access to protected information.

The vulnerability of the pngwriteimage16bit and pngwriteimage8bit functions in the PNG bitmap graphics handling library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the io_uring_show_fdinfo() function in the io_uring/fdinfo.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iouringshowfdinfo function in the iouring/fdinfo.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the Create/Edit Conference function in the TrueConf Server software allows a hacker to execute arbitrary code.

The vulnerability of the “Create/Edit Conference” function in the TrueConf Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user opens a specially...

The vulnerability of the user_mem_abort() function in the arch/arm64/kvm/mmu.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the usermemabort function in the arch/arm64/kvm/mmu.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Telnet service provided by NETGEAR’s PR2000 microprogrammable router allows a intruder to execute arbitrary commands.

The vulnerability of the Telnet service provided by NETGEAR’s PR2000 microprogrammable routers lies in the use of undocumented functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the kfence_protect_page() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kfenceprotectpage function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the via_sd_probe() function of the drivers/mmc/host/via-sdmmc.c module of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the viasdprobe function in the drivers/mmc/host/via-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE involves incorrect input of configuration data, allowing an attacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The software for deploying and executing AI models in NVIDIA Triton Inference Server is vulnerable due to incorrect conversion of numerical value types. This vulnerability allows attackers to trigger service failures.

The vulnerability of NVIDIA Triton Inference Server’s deployment and AI model execution software is related to incorrect conversion of numerical value types. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE arises from incorrect input of configuration data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the dpcm_get_be() function in the sound module/soc/soc-pcm.c file in Linux’s SoC-based operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dpcmgetbe function in the sound/soc/soc-pcm.c module of the Linux operating system’s sound support library is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerabilities of the functions srpt_refresh_port() and srpt_cm_req_recv() in the drivers/infiniband/ulp/srpt/ib_srpt.c module of the server and client driver for the Linux operating system’s RTRS kernel, which allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions srptrefreshport and srptcmreqrecv in the drivers/infiniband/ulp/srpt/ibsrpt.c module of the server and client driver for the Linux operating system are related to the reutilization of previously released memory. Exploiting these vulnerabilities could allow an...

The vulnerability of the oop4_sram_init() function in the arch/arm/mach-omap2/omap4-common.c file, which is part of the Linux operating system’s platform support module for ARM cores, allows a hacker to cause a service failure.

The vulnerability of the op4sraminit function in the arch/arm/mach-omap2/omap4-common.c file, which is part of the Linux operating system’s ARM platform support module, is related to errors during link time. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the topology_name_read() function in the sound/soc/intel/avs/pcm.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the topologynameread function in the sound/soc/intel/avs/pcm.c file, which is part of the Linux operating system’s audio support for SoC cores, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the vdpasim_blk_dev_add() function in the drivers/vdpa/vdpa_sim/vdpa_sim_blk.c module of the vDPA device driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vdpasimblkdevadd function in the drivers/vdpa/vdpasim/vdpasimblk.c module of the vDPA device driver in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE, related to improper code generation management, allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to improper management of code generation. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality of protected information...

The vulnerabilities of the functions get_phb_number() and pcibios_alloc_controller() in the arch/powerpc/kernel/pci-common.c module, which are part of the PowerPC platform support in the Linux operating system, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions getphbnumber and pcibiosalloccontroller in the arch/powerpc/kernel/pci-common.c module, which are part of the PowerPC platform support in the Linux operating system, are related to synchronization errors when using shared resources. Exploiting these...

The vulnerability of the dw9714_probe() function in the drivers/media/i2c/dw9714.c file of the Linux kernel’s multimedia device support driver allows a attacker to cause a service failure.

The vulnerability of the dw9714probe function in the drivers/media/i2c/dw9714.c file of the Linux multimedia device support driver module is related to incorrect data processing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Create/Edit Conference function in the TrueConf Server software allows a hacker to gain access to authentication data.

The vulnerability of the “Create/Edit Conference” function in the TrueConf Server software is related to the lack of measures taken to protect the structure of the web page during the processing of the “meetingRoom” parameter. Exploiting this vulnerability can allow a malicious actor, operating...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to deficiencies in error handling. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of the distributed database management system Apache Cassandra, related to uncontrolled resource consumption, allows attackers to influence privacy, integrity, and accessibility of the data.

The vulnerability of the distributed database management system Apache Cassandra is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to compromise privacy, integrity, and accessibility of the data...

The vulnerability of the ila_xlat_nl_cmd_get_mapping() function in the net/ipv6/ila/ila_xlat.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ilaxlatnlcmdgetmapping function in the net/ipv6/ila/ilaxlat.c module of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ntfs_update_mftmirr() function in the fs/ntfs3/fsntfs.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfsupdatemftmirr function in the fs/ntfs3/fsntfs.c module of the NTFS 3 file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the hclge_misc_irq_init() function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c file of the Ethernet adapter support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the hclgemiscirqinit function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet adapter support driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

The vulnerability of the io_queue_iowq() function in the io_uring/io_uring.c module, an interface for asynchronous input/output in the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the ioqueueiowq function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `osdmap_apply_incremental()` function in the `net/ceph/osdmap.c` module of the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...

The vulnerability of the cm3605_probe() function in the drivers/iio/light/cm3605.c file of the Linux kernel’s sensor driver module allows a hacker to cause a service failure.

The vulnerability of the cm3605probe function in the drivers/iio/light/cm3605.c file of the Linux kernel’s sensor driver module is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ext4_rename() function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4rename function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the xhci_alloc_stream_info() function in the drivers/usb/host/xhci-mem.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the xhciallocstreaminfo function in the drivers/usb/host/xhci-mem.c module of the Linux device driver for USB devices is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the ice_vc_fdir_parse_raw() function in the drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icevcfdirparseraw function in the drivers/net/ethernet/intel/ice/icevirtchnlfdir.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the rtw_joinbss_event_prehandle() function in the drivers/staging/r8188eu/core/rtw_mlme.c file of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the rtwjoinbsseventprehandle function in the drivers/staging/r8188eu/core/rtwmlme.c file of the Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the show_cpuinfo() function in the arch/um/kernel/um_arch.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the showcpuinfo function in the arch/um/kernel/umarch.c module of the Linux operating system is related to buffer overflows based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the bgmac_dma_tx_add() function in the drivers/net/ethernet/broadcom/bgmac.c module of the Ethernet network adapter driver from Broadcom’s Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bgmacdmatxadd function in the drivers/net/ethernet/broadcom/bgmac.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability in the `intel_context_migrate_copy()` function of the `drivers/gpu/drm/i915/gt/intel_migrate.c` driver file of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the intelcontextmigratecopy function in the drivers/gpu/drm/i915/gt/intelmigrate.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could...

The vulnerability of the WebML component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of Firefox browsers, Firefox ESR, and Thunderbird email clients, Thunderbird ESR, are related to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.

The vulnerability in browsers Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the TrueConf Server software lies in the lack of mechanisms to neutralize elements related to CSV files, allowing attackers to gain access and modify any arbitrary files.

The vulnerability of the TrueConf Server software is related to the lack of mechanisms for neutralizing elements in CSV files. Exploiting this vulnerability allows a malicious actor to gain access and modify any file at will...

The vulnerability of the nvm_download() function in the Node.js Node Version Manager (nvm) allows a hacker to execute arbitrary commands.

The vulnerability of the nvmdownload function in the Node.js Node Version Manager nvm lies in the improper elimination of special elements during the processing of the NVMAUTHHEADER variable. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the hugetlbfs_parse_param() function in the fs/hugetlbfs/inode.c file of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the hugetlbfsparseparam function in the fs/hugetlbfs/inode.c file of the Linux kernel file system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions xp_init_dma_info() and xp_dma_map() in the net/xdp/xsk_buff_pool.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions xpinitdmainfo and xpdmamap in the net/xdp/xskbuffpool.c module of the Linux kernel are related to improper initialization. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the buffer_prepare() function in the drivers/media/pci/cx88/cx88-video.c file of the Linux operating system’s multimedia device driver for PCI bus cores allows a hacker to cause a service failure.

The vulnerability of the bufferprepare function in the driver/media/pci/cx88/cx88-video.c file of the Linux operating system’s multimedia device driver library is related to the pointer assignment. Exploiting this vulnerability could allow an attacker to cause a service failure...