74701 matches found
The vulnerability of the KVM kernel component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the kvmvcpuonspin function in the Linux kernel-based KVM component is related to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the crypto-elliptic programming language Golang component, which allows a hacker to access confidential information
The vulnerability of the crypto-elliptic programming language in Golang relates to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
The vulnerability of the OpenJPEG library for image encoding and decoding, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of the OpenJPEG library for image encoding and decoding is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the raptor_uri_normalize_path() function in the Raptor library allows a hacker to execute any code.
The vulnerability of the raptorurinormalizepath function in the Raptor library is related to integer overflow when processing URIs in PDF files. Exploiting this vulnerability could allow an attacker to access confidential data...
The vulnerability of the udf_current_aext() function in the fs/udf/inode.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the udfcurrentaext function in the fs/udf/inode.c module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the nsim_dev_trap_report_work() function in the drivers/net/netdevsim/dev.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nsimdevtrapreportwork function in the drivers/net/netdevsim/dev.c module of the Linux kernel is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the SMB2_ioctl_init() function in the fs/cifs/smb2pdu.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SMB2ioctlinit function in the fs/cifs/smb2pdu.c module of the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the `reqsk_queue_unlink()` function in the `net/ipv4/inet_connection_sock.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the reqskqueueunlink function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure
The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of DRM/MSM components in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of DRM/SMM components in the Linux operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the kernel component of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the secretmem component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the secretmem component in the Linux operating system’s kernel is related to memory corruption. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Telnet protocol implementation in the microprogramming-based router software Tenda AC7 allows a hacker to execute arbitrary commands.
The vulnerability of the Telnet protocol implementation in the Tenda AC7 microprogramming router software lies in the lack of measures taken to clean data at the management level when processing the lanip parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the sub_410C80() function in the cstecgi.cgi script of the TOTOLINK X18 router’s microprogramming system, which allows a hacker to execute arbitrary commands.
The vulnerability of the sub410C80 function in the cstecgi.cgi script of the TOTOLINK X18 router’s microprogramming system is related to the lack of data cleaning measures at the control level when processing the mtkhnatEnable parameter. Exploiting this vulnerability allows an attacker to execute...
The vulnerability of the formDelWewifiPic() function in the microprogramming software for Tenda W15E routers allows a hacker to induce a service failure.
The vulnerability of the formDelWewifiPic function in the Tenda W15E router software is related to the operation of writing data outside the buffer in memory when processing the picName parameter. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a speciall...
Vulnerability of components of the Linux operating system’s kernel, net/mlx5e, which allows a hacker to cause a service failure
The vulnerability of the net/mlx5e components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the iommu/vt-d components of the Linux operating system’s kernel, which allow a hacker to cause a service failure
The vulnerability of the iommu/vt-d components of the Linux operating system’s kernel is related to improper validation of input data in the function domaincontextclearonecb within drivers/iommu/intel/iommu.c. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `bnxt_qplib_alloc_init_hwq()` function in the drivers/infiniband/hw/bnxt_re/qplib_res.c module of the Linux kernel allows a hacker to gain elevated privileges within the system.
The vulnerability of the bnxtqpliballocinithwq function in the drivers/infiniband/hw/bnxtre/qplibres.c module of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the...
The vulnerability of the objdump.c component of the GNU Binutils development environment allows a hacker to execute arbitrary code.
The vulnerability of the objdump.c component of the GNU Binutils development environment is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the nfs_fattr_init() function in the fs/nfs/inode.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the nfsfattrinit function in the fs/nfs/inode.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ZRAM component in the Linux operating system’s kernel allows a hacker to gain access to confidential information.
The vulnerability of the ZRAM component in the Linux operating system’s kernel is related to improper validation of input data in the function zramDestroyComps in drivers/block/zram/zramdrv.c. Exploiting this vulnerability can allow an attacker to access confidential information...
The vulnerability of the cachefiles_daemon_open() function in the cachefiles component of the Linux operating system allows a hacker to gain elevated privileges within the system.
The vulnerability of the cachefilesdaemonopen function in the cachefiles component of the Linux kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
The vulnerability of the KVM kernel component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the KVM kernel component in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of Eclipse Jetty servlet containers, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of Eclipse Jetty servlet containers is related to uncontrolled resource consumption in the ThreadLimitHandler.getRemote function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the logi_dj_recv_switch_to_dj_mode() function in the HID component of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the logidjrecvswitchtodjmode function in the HID component of the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of Adobe InDesign’s automation tool for computer design lies in the ability to write beyond the buffer limit in memory, allowing attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
The vulnerability of the pm8001_phy_control() function in the Linux kernel SCSI driver allows a hacker to cause a service failure.
The vulnerability of the pm8001phycontrol function in the Linux kernel SCSI driver is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mt7921_ipv6_addr_change() function in the Linux kernel driver allows a hacker to induce a service failure.
The vulnerability of the mt7921ipv6addrchange function in the Linux kernel driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the ABC Notation plugin in the WordPress content management system is related to errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to memory usage after it is freed, allow attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...
The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...
The vulnerability of the Win32 kernel subsystem in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems in handling relative pathnames to directories involves errors in processing those paths. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems allows a hacker to elevate their privileges to a system level.
The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system level...
The vulnerability of the mlx5_eswitch_set_vepa() function in the Mellanox Ethernet adapter driver for Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the mlx5eswitchsetvepa function in the Mellanox Ethernet network adapter driver for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to increase their privileges and execute arbitrary commands.
The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...
The vulnerability of the File Sharing function on the administrator web panel of microprogramming router software GL.iNet GL-MT3000 allows a hacker to read arbitrary files.
The vulnerability of the File Sharing function on the administrator web panel of the GL.iNet GL-MT3000 router software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files...
The vulnerability of the Tutor LMS plugin for the WordPress content management system lies in its authentication procedures’ flaws, which allow attackers to escalate their privileges.
The vulnerability of the Tutor LMS plugin for WordPress content management systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Vulnerability of the Premium Package: Selling Digital Products securely through the WordPress content management system. This vulnerability is related to the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Premium Package plugin – enabling secure sales of digital products through a WordPress website’s content management system – is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely t...
The vulnerability of Adobe InDesign’s automation tool for computer design lies in the possibility of buffer overflow in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to access to an uninitialized pointer, allow attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the access to an uninitialized pointer. Exploiting this vulnerability can allow a...
The vulnerability of Adobe Illustrator, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
The vulnerability of the `load_elf_binary()` function in the Linux kernel file system allows a hacker to trigger a service failure.
The vulnerability of the loadelfbinary function in the Linux kernel file system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the SmartFabric OS10 network operating system, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the SmartFabric OS10 network operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary code.
The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SmartFabric OS10 network operating system, related to insufficient validation of incoming requests, allows a hacker to execute an SSRF attack.
The vulnerability of the SmartFabric OS10 network operating system is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
The vulnerability of monitoring and management tools for Dell Chassis Management Controllers (CMC) for Dell PowerEdge FX2 and Dell Chassis Management Controllers (CMC) for PowerEdge VRTX lies in the fact that operations are executed outside the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of monitoring and management tools for Dell Chassis Management Controllers CMC for Dell PowerEdge FX2 and Dell Chassis Management Controllers CMC for PowerEdge VRTX lies in the fact that operations are executed outside the buffer in memory. Exploiting this vulnerability allows a...
The vulnerability of the reviewdog/action-setup component of the GitHub collaborative development platform allows a hacker to disclose protected information.
The vulnerability of the reviewdog/action-setup component of the GitHub collaborative development platform is related to the presence of undeclared capabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...