The vulnerability of the __io_uring_show_fdinfo() function in the io_uring component of Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the iouringshowfdinfo function in the iouring component of Linux operating systems lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gve_alloc_pending_packet() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the gveallocpendingpacket function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Ansible configuration management system, related to the disclosure of information through log files, allows a perpetrator to gain unauthorized access to the protected information.

The vulnerability of the Ansible configuration management system is related to the exposure of information through log files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the framework for creating applications based on the combination of language models (LLMs) like LangChain arises from insufficient validation of requests at the server-side level. This allows attackers to execute an SSRF attack.

The vulnerability of the framework for creating applications based on the combination of language models LLMs like LangChain is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...

The vulnerabilities of the `find_lowest_rq()` and `find_lock_lowest_rq()` functions in the Linux operating system’s kernel allow a hacker to trigger a service failure.

The vulnerability of the findlowestrq and findlocklowestrq functions in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the bpf_iter_scx_dsq_new() function in the sched_ext component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the bpfiterscxdsqnew function in the schedext component of the Linux operating system lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mt76_dma_cleanup() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mt76dmacleanup function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the f2fs_new_node_page() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the f2fsnewnodepage function in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the seg6 component in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the seg6 component in the Linux operating system’s kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of FortiOS operating systems, related to insufficient protection of registration data, allows attackers to disclose sensitive information.

The vulnerability of the FortiOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the platform_set_drvdata() function in the perf component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platformsetdrvdata function in the Linux operating system’s kernel component is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the built-in boa server (/boafrm/formRoute) of the TOTOLINK X15 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the built-in boa server /boafrm/formRoute of the TOTOLINK X15 router software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the Docker Desktop platform for developing and delivering container applications lies in a flawed definition of the link before access to files. This allows attackers to modify or delete any files, or elevate their privileges to that of the SYSTEM user.

The vulnerability of the Docker Desktop for Windows platform, which is used for developing and delivering container applications, is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow an attacker to modify or delete any files, or to...

The vulnerability of the built-in BOA server (/boafrm/formMultiAPVLAN) of the TOTOLINK X15 router’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the built-in server boa /boafrm/formMultiAPVLAN of the TOTOLINK X15 microprogrammed router software is related to the issue where the operation’s output goes beyond the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the CopyFromExternalStageToSnowflakeOperator() function in the Apache Airflow data integration with cloud platform providers Snowflake allows a hacker to execute arbitrary code.

The vulnerability of the CopyFromExternalStageToSnowflakeOperator function in the Apache Airflow integration with cloud data platforms involves improper elimination of special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the formdeleteUserName() function in the Tenda CH22 router software allows a hacker to cause a service failure.

The vulnerability of the formdeleteUserName function in the Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the oldaccount parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of sub_503FC in Netgear EX6200 Wi-Fi router’s built-in software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub503FC function in Netgear EX6200 Wi-Fi routers is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the gateway_proxy_handler component in the machine learning lifecycle management platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gatewayproxyhandler component in the Machine Learning Lifecycle Management platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the Ansible configuration management system arises from improper validation of input data, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Ansible configuration management system is related to incorrect validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the macb_halt_tx() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the macbhalttx function in the Linux operating system’s kernel is related to mutual locking of execution threads. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Vulnerabilities of functions ring_buffer_subbuf_order_set() and atomic_dec() in the Linux operating system’s kernel, allowing a hacker to trigger a service failure

The vulnerability of the ringbuffersubbuforderset and atomicdec functions in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rgxfw_pcset_ungrab() function in the Driver Development Kit (DDK) allows a hacker to trigger a service failure.

The vulnerability of the rgxfwpcsetungrab function in the Driver Development Kit DDK relates to a pointer shift beyond the allocated memory range when processing the psFWMemContext parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions static_branch_enc() and static_branch_dec() in the page_alloc component of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions staticbranchenc and staticbranchdec in the pagealloc component of the Linux operating system’s kernel are related to concurrent access to resources i.e., a race condition. Exploiting these vulnerabilities could allow an attacker to compromise the...

The vulnerability of the icl_update_topdown_event() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iclupdatetopdownevent function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Mattermost instant messaging application, related to the failure to protect the SQL query structure, allows unauthorized access to the database.

The vulnerability of the Mattermost instant messaging application is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the database...

The vulnerability of the built-in boa server (/boafrm/formFilter) of the TOTOLINK X15 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the built-in server boa /boafrm/formFilter of the TOTOLINK X15 router microprogramming system is related to the issue where an operation is executed outside the buffer in memory when processing the ip6addr parameter. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the IBM Security Verify Access access control system and the software for securing access to applications in a Docker environment. IBM Security Verify Access Docker, due to responses to incoming requests being inconsistent, allows unauthorized access to protected information by attackers.

The vulnerability of the IBM Security Verify Access access control system and its software for securing access to applications in a Docker environment is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to...

The vulnerability of the TLS protocol implementation in the Crowdstrike Falcon endpoint protection software allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the TLS protocol implementation in the Crowdstrike Falcon endpoint protection software is related to the lack of trust chain tracking during certificate verification. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of sub_54014 in Netgear EX6200 Wi-Fi router’s built-in software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of sub54014 in Netgear EX6200 Wi-Fi router’s built-in software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control mechanisms. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the espintcp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the espintcp component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Multi-Account Container function in the Mozilla Firefox browser allows attackers to circumvent existing security restrictions of proxy servers and disclose protected information.

The vulnerability of the Multi-Account Container function in the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions of proxy servers and disclose sensitive information b...

Vulnerability of the Bluetooth Stack software, related to improper handling of insufficient permissions or privileges, allowing an intruder to disclose protected information

The vulnerability of the Bluetooth Stack software is related to the improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the execution of operations outside of the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protect...

The vulnerability of MediaTek’s Bluetooth driver microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the Bluetooth driver for Microprogramming Software MediaTek lies in reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Bluetooth driver’s firmware microprogramming software of MediaTek’s chips allows attackers to enhance their privileges.

The vulnerability of the Bluetooth driver’s firmware microprogramming software for MediaTek is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the File Extension Handler component in the Mozilla Firefox browser allows a hacker to load any file they desire.

The vulnerability of the File Extension Handler component in the Mozilla Firefox browser is related to the ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to download any file at will...

The vulnerability of the f_strflocaltime() function in the programming language JQ, which allows attackers to compromise the accessibility of protected information

The vulnerability of the fstrflocaltime function in the JavaScript programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the Link Handler component in the Mozilla Firefox browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the Link Handler component in the Mozilla Firefox browser is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the `xmlSchematronGetNode` function in the Libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlSchematronGetNode function in the Libxml2 library is related to the pointer being dereferenced when its validity period has expired. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Cloudflare WARP VPN service for the macOS operating system, related to insecure privilege management. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level.

The vulnerability of Cloudflare WARP VPN service for macOS relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the tipc_aead_encrypt_done() function in the net/tipc/crypto.c module of Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the tipcaeadencryptdone function in the net/tipc/crypto.c module of Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cckeckKeepAlive() function in the microprogramming software of the TOTOLink T6 system allows a hacker to execute arbitrary commands.

The vulnerability of the cckeckKeepAlive function in the TOTOLink T6 mesh-system’s software lies in the lack of measures taken to neutralize special elements during the processing of the ipAddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the centralized control system for network devices and ports of Advantech iView is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the centralized control system for network devices and ports of Advantech iView is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

The vulnerability of the menu_nat_asp() function in D-Link DI-8100 router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the menunatasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of AMD’s microprogramming software for processors lies in the insufficient protection of operational data, which allows attackers to disclose protected information.

The vulnerability of AMD’s microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose protected information...