98239 matches found
Linux kernel I2C driver Heap Buffer Overflow DoS
The vulnerability of the i2cdevattachadapter function in the drivers/i2c/i2c-dev.c file of the Linux I2C driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Smb kernel Heap Buffer Overflow DoS
The vulnerability of the functions ksmbdclosefd and ksmbdreopendurablefd in the fs/smb/server/vfscache.c module of the Smb file system in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to...
Linux kernel x25_queue_rx_frame Heap Buffer Overflow DoS
The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...
Linux kernel Bluetooth L2CAP Buffer Overflow DoS
The vulnerability of the functions l2capregisteruser and l2capunregisteruser in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause service...
Linux seg6_build_state Heap Buffer Overflow DoS
The vulnerability of the seg6buildstate function in the net/ipv6/seg6iptunnel.c module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Win32K GRFX Privilege Escalation
The vulnerability of the Win32K component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
DHCP Server Windows Code Execution
The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
DHCP Client Service Privilege Escalation
The vulnerability of the DHCP Client Service for Windows operating systems is related to a countable level of significance loss. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Windows kernel Privilege Escalation
The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Kernel Information Disclosure
The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Windows kernel Privilege Escalation
The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Oracle WebCenter Enterprise Capture Client Bundle Full Control
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain full control ov...
Oracle WebCenter Content Full Control
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network protocol...
Microsoft SharePoint Server Structure Protection Failure
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Linux kernel fs/crypto/inline_crypt Heap Buffer Overflow DoS
The vulnerability of the bhgetinodeandlblknum function in the fs/crypto/inlinecrypt.c file of the Linux kernel file system relates to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...
Linux usbnet_disconnect() DoS
The vulnerability of the usbnetdisconnect function in the drivers/net/usb/usbnet.c file of the Linux network adapter driver module is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
cJSON ApplyPatches DoS
The vulnerabilities of the functions cJSONUtilsApplyPatches and cJSONUtilsApplyPatchesCaseSensitive in the C language JSON object handling library are related to uncontrolled recursion. Exploiting these vulnerabilities could allow an attacker to cause service failures...
Linux Kernel SMB Server Unauthorized Access
The vulnerability of the ksmbdkthreadfn function in the fs/smb/server/transporttcp.c module of the SMB server support module in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker, acting remotely, to gain...
MediaWiki unserialize RCE
The vulnerability of the unserialize function in the MediaWiki software, which is used to implement the hypertext environment, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Direct Rendering Data Compromise
The vulnerability of the msmgemfreeobject function in the drivers/gpu/drm/msm/msmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacker to compromise the...
cirrusfb_check_mclk Heap Buffer Overflow DoS
The vulnerability of the cirrusfbcheckmclk function in the drivers/video/fbdev/cirrusfb.c driver for supporting Core Image Buffer devices in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacke...
Linux kernel HID ALPS Buffer Overflow
The vulnerability of the alpsrawevent function in the drivers/hid/hid-alps.c module of the Linux kernel subsystem for user interface devices relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the buildpolexpire function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Kernel RxRPC DoS
The vulnerability of the rxrpcserverkeyring function in the net/rxrpc/serverkey.c module, which supports RxRPC session sockets in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service...
Linux kernel amd.c init_amd_zen1 function Privilege Escalation
The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...
Linux kernel Memory Management Buffer Overflow DoS
The vulnerability of the foliounmapinvalidate function in the mm/truncate.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Smb subsystem Heap Buffer Overflow DoS
The vulnerability of the smblazyparentleasebreakclose function in the fs/smb/server/oplock.c module of the Smb subsystem of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remo...
Linux net/sched act_csum buffer overflow
The vulnerability of the tcfcsumact function in the net/sched/actcsum.c module of the network/sched subsystem of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow a remote attacker ...
Linux Bluetooth DoS
The vulnerability of the functions sessionfree, hidpsessionRemove, and hidpSessionThread in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...
Linux kernel Loopback Check Format
The vulnerability of the loopbackcheckformat function in the sound/drivers/aloop.c module of the Linux kernel’s audio subsystem is related to the repeated use of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to gain access to...
me2600_xilinx_download Heap Buffer Overflow DoS
The vulnerability of the me2600xilinxdownload function in the drivers/comedi/drivers/medaq.c module, which supports devices for collecting data from Linux operating systems, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiti...
Microsoft Excel Buffer Overflow
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Resilient File System Code Execution
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ADFS DoS
The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
USB Audio Class driver Disclosure
The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Secure Boot Bypass
The vulnerability of the Secure Boot implementation for Windows operating systems is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow attackers to circumvent security restrictions...
DirectX Graphics Kernel Privilege Escalation
The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Network Connections Service Privilege Escalation
The vulnerability of the Windows Network Connections Service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Sensor Data Service Windows Privilege Escalation
The vulnerability of the Sensor Data Service system service in Windows operating systems is related to unauthorized access to the indexed resource. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CloudAttestation Security Bypass
The vulnerability of the CloudAttestation security mechanism for operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms...
SQLite ExprListDelete Heap Buffer Overflow DoS
The vulnerability of the sqlite3ExprDelete function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to deny service, cause a memory leak, or execute arbitrary code...
SQLite expr.c Heap Buffer Overflow DoS
The vulnerability of the sqlite3ExprDelete function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service failures or memory leaks...
SQLite expr.c Heap Buffer Overflow DoS
The vulnerability of the sqlite3ExprListDelete function in the expr.c file of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions, expose sensitive information, or execute...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the grabrequestedmntns function in the fs/namespace.c module of the Linux kernel file system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel io_uring Buffer Overflow DoS
The vulnerability of the iosendmsgzc function in the iouring/net.c module of the Linux kernel’s asynchronous input/output interface is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel IPv4 Privilege Escalation
The vulnerability of the ipv4 component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...
Linux device driver framework Pegasus Probe
The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...
Linux fs/namespace.c statmount_string() Buffer Overflow DoS
The vulnerability of the statmountstring function in the fs/namespace.c file of the Linux kernel file system relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel sound subsystem Heap Buffer Overflow
The vulnerability of the nvhdmimcpprobe function in the sound/hda/codecs/hdmi/nvhdmi-mcp.c module of the Linux kernel’s sound subsystem is related to incorrect resource initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
Linux net/ipv4/route.c Heap Buffer Overflow DoS
The vulnerability of the fnheremoveoldest function in the net/ipv4/route.c module of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...