98239 matches found
Grafana Geomap Panel Code Execution
The vulnerability of the Geomap panel of the Grafana monitoring and observation platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the bondheaderparse function in the Linux operating system’s kernel is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Pillow Buffer Overflow DoS
The vulnerability of the Pillow image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
qs.stringify() DoS
The vulnerability of the qs.stringify function in the string query analysis and conversion library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Gitea XSS
The vulnerability of the Gitea repository management system is related to the lack of measures taken to protect the website structure when processing the extensionsRequired parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks through specially...
Python pip Directory Restriction
The vulnerability of the Python programming language’s pip module is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
Sqlalchemy Mako Path Traversal
The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Unbound DNS Computational Complexity DoS
The vulnerability of the Unbound DNS server is related to the computational complexity of the algorithms involved. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Unbound DNS Resource Exhaustion DoS
The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a malicious actor to cause service failures...
Unbound DNS DoS
The vulnerability of the Unbound DNS server is related to improper blocking of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Linux Kernel Power Netlink DoS
The vulnerability of the devenergymodelnlgetperfdomainsdoit function in the kernel/power/emnetlink.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Linux DEFINE_IDA() Buffer Overflow DoS
The vulnerability of the DEFINEIDA function in the drivers/auxdisplay/line-display.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
drivers/comedi/ni_atmio16d ATMIO16D DoS
The vulnerability of the atmio16dattach function in the drivers/comedi/drivers/niatmio16d.c module relates to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Linux USB Device Driver Heap Buffer Overflow DoS
The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Direct Rendering Infrastructure DRM ioctl Use-After-Free
The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...
Microsoft Office Buffer Overflow Info Disclosure
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these systems...
Microsoft Office Buffer Overflow Info Disclosure
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Oracle WebCenter Content Full Control
Vulnerability of the Core component of the Oracle WebCenter Content application: The Oracle WebCenter Content imaging platform for user interaction involves a lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker to gain full control over the applicati...
GitLab Confidential Header Compromise
The vulnerability of the mechanism for generating headers of confidential issues in a Git-based software platform for collaborative code development on GitLab CE/EE is related to the disclosure of confidential information through metadata. Exploiting this vulnerability could allow an attacker to...
SQLite jsonCacheInsert Heap Buffer Overflow
The vulnerability of the jsonCacheInsert function in the json.c module of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created JSON file...
Cisco Secure FMC Privilege Escalation
The vulnerability in the web-based authentication interface of the Cisco Secure FMC Software for managing network security devices is related to the use of strictly encrypted login credentials. Exploiting this vulnerability can allow a malicious actor to remotely increase their privileges...
Google Chrome FileSystem API DoS
The vulnerability of the Google Chrome browser’s FileSystem API interface is related to the use of a name with an incorrect link. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Google Chrome Navigation Unauthorized Access
The vulnerability of the Google Chrome browser’s Navigation function is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Aura component Code Execution
The vulnerability of the Aura component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Google Chrome Payments DoS
The vulnerability of Google Chrome’s Payments component is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
WebAudio Component Code Execution
The vulnerability of the WebAudio component in the Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
WebRTC Component Code Execution
The vulnerability of the WebRTC component in Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Unbound DNS Resource Exhaustion DoS
The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a malicious actor to cause service failures...
Dulwich Git Path Traversal
The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Vim s:stepmatch() Code Execution
The vulnerability of the s:stepmatch function in the Vim text editor is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
GitPython Command Injection
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
libcaca Buffer Overflow Code Execution
The vulnerability of the libcaca graphic library is related to overflow in the buffer in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Dulwich Git Command Injection
The vulnerability of the Python library for working with Git repositories in Dulwich is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
OpenBao Secret Encryption Management System DoS
The vulnerability of the OpenBao encryption and secret management system is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow an attacker to cause a service failure...
MediaWiki Unauthorized Access
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
UDS Protocol Analyzer DoS
The vulnerability of the UDS protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
dependencies_local_check() method Code Execution
The vulnerability of the dependencieslocalcheck method in the application for setting the REBOOT OS parameter redoswelcome is related to the improper elimination of special elements used in the OS command. Exploiting this vulnerability allows a malicious actor to inject special symbols into the...
Apache Log4j Core XmlLayout Function Data Compromise
The vulnerability of the XmlLayout function in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information from a remote location...
Apache Log4j Core verifyHostName Man-in-the-Middle
The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core logging library is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack remotely...
Bouncy Castle Java FIPS DoS
The vulnerability of Java Cryptographic Libraries, specifically Bouncy Castle for Java FIPS and Bouncy Castle for Java LTS, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...
Bouncy Castle FrodoEngine Java Disclosure
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library relates to the use of hidden time channels for data transmission. Exploiting this vulnerability allows a remote attacker to disclose the protected information...
Bouncy Castle Disclosure
The vulnerability of the bcprov cryptographic library for the Java platform, Bouncy Castle, is related to the failure to take measures to neutralize special elements in the LDAP request. Exploiting this vulnerability can allow a remote attacker to disclose protected information...
lz4-java Information Disclosure
The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...
Thymeleaf Expression Language XSS
The vulnerability of the JavaScript-based Thymeleaf engine is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...
PostCSS XSS
The vulnerability of the PostCSS cascade style sheet transformation library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
YAML Uncontrolled Recursion DoS
The vulnerability of the YAML syntax analysis library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Linux I2C Buffer Overflow DoS
The vulnerability of the amdispdwi2cplatprobe function in the drivers/i2c/busses/i2c-designware-amdisp.c driver for the I2C hardware interface of the Linux operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allo...
Linux kernel netfilter Buffer Overflow
The vulnerability in the net/netfilter/nfconntracknetlink.c module of the Linux kernel’s netfilter component is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...