98239 matches found
GitPython Path Traversal
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to an incorrect restriction on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Vite Local Development Path Traversal
The vulnerability of the Vite and Vite+ application development local servers is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
DOMPurify SAFE_FOR_TEMPLATES Code Execution
The vulnerability of the SAFEFORTEMPLATES function in the JavaScript library for safe cleaning and protection of DOMPurify’s HTML code is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ImageMagick ConnectedComponentsImage Buffer Overflow DoS
The vulnerability of the ConnectedComponentsImage function in the console-based image editing tool ImageMagick is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...
sharkd DoS
The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, is related to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Remote Desktop Client Disclosure
The vulnerability of the Remote Desktop Client for Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
Linux kernel DRI Heap Buffer Overflow DoS
The vulnerability of the i915vmapinww function in the drivers/gpu/drm/i915/i915vma.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Bridge Loop Avoidance DoS
The vulnerability of the functions batadvblaclaimdumpentry and batadvblabackbonedump in the net/batman-adv/bridgeloopavoidance.c module of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
Oracle WebCenter Enterprise Capture Client Bundle Full Control
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...
Oracle WebCenter Content Full Control
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network...
Oracle WebCenter Enterprise Capture Client Bundle Full Control
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain full control ov...
Oracle WebCenter Enterprise Capture Client Bundle Full Control
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
PT Application Inspector Path Traversal
The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Microsoft Office SharePoint Server Privilege Escalation
The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps for Enterprise is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...
mlxbf-pmc Kernel Data Compromise
The vulnerability of the mlxbfpmcinitperftypecounter function in the drivers/platform/mellanox/mlxbf-pmc.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
Linux NFS Client Buffer Overflow DoS
The vulnerability of the nfsmatchclient function in the fs/nfs/client.c module, which is part of the NFS client support in Linux kernel, is related to authentication errors. Exploiting this vulnerability could allow an attacker to cause service failures...
PAK ViPNet Coordinator HW 4 Decompression Capabilities
Vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5, related to excessive capabilities for decompressing updates. Exploiting this vulnerability allows a malicious actor, operating with a pre-compromised network managemen...
RISCV Linux Kernel Walk Stackframe Heap Buffer Overflow DoS
The vulnerability of the walkstackframe function in the arch/riscv/kernel/stacktrace.c file, a subsystem for module management on the RISCV architecture of the Linux operating system’s kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker,...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Linux PowerPC Change Page Attribute DoS
The vulnerability of the changepageattr function in the arch/powerpc/mm/pageattr.c module of the PowerPC platform in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux net/packet/af_packet Heap Buffer Overflow DoS
The vulnerability of the packetdobind function in the net/packet/afpacket.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
Linux kernel s32ton() Heap Buffer Overflow
The vulnerability of the s32ton function in the drivers/hid/hid-core.c file of the Linux kernel’s input device subsystem driver is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux build_report() Heap Buffer Overflow DoS
The vulnerability of the buildreport function in the net/xfrm/xfrmuser.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...
SMC Protocol Heap Buffer Overflow DoS
The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...
Btrfs File System Heap Buffer Overflow DoS
The vulnerability of the checkremovingspaceinfo function in the fs/btrfs/block-group.c file of the Btrfs file system in the Linux operating system is related to improper memory release „memory leak“. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...
NVME Driver Heap Buffer Overflow DoS
The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Smb File System Heap Buffer Overflow DoS
The vulnerability of the smb2getea function in the fs/smb/server/smb2pdu.c file of the Smb kernel of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
Linux Kernel MPTCP Subflow Init Buffer Overflow
The vulnerability of the mptcpsubflowinit function in the net/mptcp/protocol.c module of the Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
DRI driver Kernel Data Compromise
The vulnerability of the xepagefaultservice function in the drivers/gpu/drm/xe/xepagefault.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of operations outside the memory buffer. Exploiting this vulnerability could allow a remote...
me4000_xilinx_download Heap Buffer Overflow DoS
The vulnerability of the me4000xilinxdownload function in the drivers/comedi/drivers/me4000.c module, which supports devices for Linux operating system data collection, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting th...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ptiommux8664unmappages function in the drivers/iommu/genericpt/iommupt.h header of the Linux kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...
Media Foundation Code Execution
The vulnerability of the Media Foundation component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Windows Overlay File System Filter Driver Privilege Escalation
The vulnerability of the Windows Overlay File System Filter Driver WOF in the Windows operating system is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain increased privileges...
Windows Print Spooler Information Disclosure
The vulnerability of the Windows Print Spooler in operating systems related to print queues is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measure...
Windows Win32 kernel Privilege Escalation
The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Oracle WebCenter Enterprise Capture Client Bundle Full Control
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full...
Core server component Full Control
The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain full control over the application through the HTTP network protocol...
Microsoft Word SharePoint Server Office 365 Apps for Enterprise Disclosure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to improper validation of the specified type of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
AI.Plugin.Azure Special Elements Arbitrary Command Execution
The vulnerability of the AI.Plugin.Azure software patch, which is used for identifying vulnerabilities and errors in PT Application Inspector, stems from the lack of measures taken to neutralize its special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
Microsoft Office SharePoint Server Information Disclosure
The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
Microsoft SharePoint Server External Path Management Spear Phishing
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in improper external management of file names or file paths. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
PC ViPNet Automatic Update Relative Path Data Compromise
The vulnerability of the automatic update mechanism of PC ViPNet Administrator is related to deficiencies in the processing of relative paths. Exploiting this vulnerability can allow a perpetrator operating from a neighboring trusted network to compromise the integrity of the operating environmen...
LoongArch Linux BPF JIT Unauthorized Access
The vulnerability of the archpreparebpftrampoline function in the arch/loongarch/net/bpfjit.c module of the LoongArch architecture support for the Linux operating system involves exposing confidential information. Exploiting this vulnerability could allow an attacker, acting remotely, to gain...
FAB Authentication Manager Apache Airflow Privilege Escalation
The vulnerability of the authentication manager of the Apache Airflow network software, Flask App Builder, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected...
Gitea Code Execution
The vulnerability of the services/repository/files/patch.go file in the Git repository management system Gitea is related to improper code generation management. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code and gain unauthorized access to...
Linux kernel Memory Management Heap Buffer Overflow DoS
The vulnerability of the addstackrecordtolist function in the mm/pageowner.c file of the Linux kernel’s memory management subsystem is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an attacker to compromise the...
libvips Code Execution
The vulnerability of the libvips image processing library, a component of the Active Storage framework in the Ruby on Rails software platform, relates to insecure resource initialization. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely and gain unauthorize...
Linux Kernel RxRPC Function Heap Buffer Overflow DoS
The vulnerability of the rxgkverifyresponse function in the net/rxrpc/rxgk.c module, which is part of the RxRPC session support for Linux operating systems, involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to...