92434 matches found
The vulnerability in the amdgpu_cs_vm_handling() function of the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the amdgpucsvmhandling function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...
The vulnerability of the btrfs_validate_super() function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system allows a hacker to trigger a service failure.
The vulnerability of the btrfsvalidatesuper function in the fs/btrfs/disk-io.c file of the btrfs file system in Linux kernel is related to incorrect handling of error situations. Exploiting this vulnerability can allow an attacker to cause a service failure...
The software for deploying and executing AI models by NVIDIA Triton Inference Server has vulnerabilities related to integer overflow. This allows attackers to trigger a service failure.
The vulnerability of NVIDIA Triton Inference Server’s deployment and AI model execution software is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ext4_write_info() function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4writeinfo function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the pointer assignment. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `osdmap_apply_incremental()` function in the `net/ceph/osdmap.c` module of the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.
The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...
The vulnerability of the cm3605_probe() function in the drivers/iio/light/cm3605.c file of the Linux kernel’s sensor driver module allows a hacker to cause a service failure.
The vulnerability of the cm3605probe function in the drivers/iio/light/cm3605.c file of the Linux kernel’s sensor driver module is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of Firefox browsers, Firefox ESR, and Thunderbird email clients, Thunderbird ESR, is related to writing beyond the buffer limit, allowing an attacker to execute arbitrary code.
The vulnerability of Firefox browsers, Firefox ESR, and Thunderbird email clients, Thunderbird ESR, is related to writing beyond the buffer limit. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE involves a lack of authentication, which allows attackers to disclose protected information.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose the protected information...
The vulnerability in the `meson_drv_probe()` function of the drivers/gpu/drm/meson/meson_drv.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the mesondrvprobe function in the drivers/gpu/drm/meson/mesondrv.c driver module of the Direct Rendering Infrastructure DRI infrastructure of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an...
The vulnerabilities of the functions sti_dvo_connector_mode_valid() (drivers/gpu/drm/sti/sti_dvo.c), sti_hda_connector_mode_valid() (drivers/gpu/drm/sti/sti_hda.c), and sti_hdmi_connector_mode_valid() (drivers/gpu/drm/sti/sti_hdmi.c) in the Linux kernel’s Direct Rendering Infrastructure (DRI) driver libraries allow a hacker to cause a service failure.
The vulnerabilities of the functions stidvoconnectormodevalid drivers/gpu/drm/sti/stidvo.c, stihdaconnectormodevalid drivers/gpu/drm/sti/stihda.c, and stihdmiconnectormodevalid drivers/gpu/drm/sti/stihdmi.c in the Linux kernel’s Direct Rendering Infrastructure DRI driver libraries are related to...
The vulnerability of the `oppsdss_init_fbdev()` function in the `arch/arm/mach-omap2/display.c` file, which is part of the ARM platform support for the Linux operating system, allows a hacker to cause a system failure.
The vulnerability of the oppsdssinitfbdev function in the arch/arm/mach-omap2/display.c file, which is part of the ARM platform support for the Linux operating system, is related to errors during link time. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the iavf_init_get_resources() function in the drivers/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iavfinitgetresources function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise t...
The vulnerability of the WebML component in the Google Chrome browser, which allows a hacker to trigger a service failure.
The vulnerability of the WebML component in Google Chrome relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the `bnxt_start_xmit()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Broadcom Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the bnxtstartxmit function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an...
The vulnerability of the fsi_spi_transfer_data() function in the drivers/spi/spi-fsi.c module of the Linux kernel’s SPI device support driver allows a attacker to cause a service failure.
The vulnerability of the fsispitransferdata function in the drivers/spi/spi-fsi.c module of the Linux kernel’s SPI device support driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the sco_recv_frame() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the scorecvframe function in the Linux operating system is related to a violation of the count of links to pages displayed in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
The vulnerability of the Telnet service in the microprogramming software of Tenda AX12 wireless routers allows a hacker to enhance their privileges and gain full control over the device.
The vulnerability of the Telnet service provided by the microprogramming software of the Tenda AX12 wireless routers lies in the use of strictly encrypted authentication data. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full control over the device...
The vulnerability of the netiucv_close() function in the drivers/s390/net/netiucv.c driver module on the S390 platform of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the netiucvclose function in the drivers/s390/net/netiucv.c driver module of the S390 Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the s3fb_set_par() function in the drivers/video/fbdev/s3fb.c driver for kernel-based frame buffer devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the s3fbsetpar function in the drivers/video/fbdev/s3fb.c driver for kernel-based frame buffer devices in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker t...
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE allows a perpetrator to trigger a service failure due to incorrect configuration data input.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the ntfs_read_mft() function in the fs/ntfs3/inode.c module of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ntfsreadmft function in the fs/ntfs3/inode.c module of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the clone_fs_devices() function in the fs/btrfs/volumes.c module of the Linux file system’s kernel allows a attacker to cause a service failure.
The vulnerability of the clonefsdevices function in the fs/btrfs/volumes.c module of the Linux kernel’s filesystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome’s WebAudio component, which allows a hacker to disclose confidential information
The vulnerability of Google Chrome’s WebAudio component is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to disclose confidential information...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.
The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the `ib_del_sub_device_and_put()` function in the `drivers/infiniband/core/device.c` file of the Linux operating system’s InfiniBand driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ibdelsubdeviceandput function in the drivers/infiniband/core/device.c file of the Linux operating system’s InfiniBand driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the msm_parse_deps() function in the drivers/gpu/drm/msm/msm_gem_submit.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the msmparsedeps function in the drivers/gpu/drm/msm/msmgemsubmit.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper handling of error situations. Exploiting this vulnerability may allow an attacker to cause a servic...
The vulnerability of the WebML component in the Google Chrome browser allows a hacker to gain unauthorized access to protected information.
The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerabilities of the functions idpf_decfg_netdev() and idpf_init_task() in the driver module drivers/net/ethernet/intel/idpf/idpf_lib.c of the Intel Ethernet network adapter support driver for the Linux operating system allow a malicious actor to cause a service failure.
The vulnerabilities of the functions idpfdecfgnetdev and idpfinittask in the driver module drivers/net/ethernet/intel/idpf/idpflib.c of the Intel Ethernet network adapter support driver in the Linux operating system are related to the lack of code checks for function return values. Exploiting the...
The vulnerability of the ocelot_set_aggr_pgids() function in the drivers/net/ethernet/mscc/ocelot.c file of the Microsemi network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ocelotsetaggrpgids function in the drivers/net/ethernet/mscc/ocelot.c file of the Microsemi network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the use of memory after it is freed. This allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of embedded software in Qualcomm chips, related to deficiencies in access control, allows attackers to cause memory corruption.
The vulnerability of embedded Qualcomm software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause memory corruption...
The vulnerability of the Node.js software platform, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.
The vulnerability of the Node.js software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the fs.realpathSync.native() function in the Node.js software platform allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the fs.realpathSync.native function in the Node.js framework is related to insufficient protection for private data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the memcmp function in the Node.js software platform, related to insufficient comparison, allows attackers to gain unauthorized access to protected information.
The vulnerability of the memcmp function in the Node.js software platform is related to insufficient comparison. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the map() function in the Sapera Memory Manager driver, a software solution for image management in Sapera LT systems, allows a malicious actor to elevate their privileges to SYSTEM level and execute arbitrary code.
The vulnerability of the map function in the Sapera Memory Manager driver, a software solution for image management in Sapera LT machine vision systems, is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level and...
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to cause a service failure.
The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system allows a perpetrator to execute arbitrary code.
The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created HTTP requests...
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks (XSS).
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability in the Access API of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Access API components of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Vulnerability of the Audio/Video component: Web codecs in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows a hacker to cause a service failure.
Vulnerability of Audio/Video components: Mozilla Firefox, Firefox ESR, and Thunderbird’s email client use web codecs. This vulnerability is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the Crowdstrike Falcon endpoint protection software lies in its lack of a mechanism for verifying the source of files. This allows attackers to delete any files they desire.
The vulnerability of the Crowdstrike Falcon endpoint protection software is related to a lack of verification mechanism for the source of the source code. Exploiting this vulnerability could allow an attacker to delete arbitrary files...
The vulnerability of the cupsd server daemon in CUPS printing allows a attacker to elevate their privileges to the root level.
The vulnerability of the cupsd server in CUPS printing relates to deficiencies in authentication mechanisms. Exploiting this vulnerability allows an attacker to elevate their privileges to root by sending specially crafted requests...
The vulnerability of Google Chrome’s WebGL component allows attackers to disclose protected information.
The vulnerability of Google Chrome’s WebGL component is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information through a specially created HTML page...
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks (XSS).
The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the formTaskEdit() function in the microprogramming software for UTT HiPER 810G allows a hacker to induce a service failure.
The vulnerability of the formTaskEdit function in the UTT HiPER 810G router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the formGroupConfig() function in the UTT HiPER 810G router software allows a hacker to cause a service failure.
The vulnerability of the formGroupConfig function in the UTT HiPER 810G router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...