98363 matches found
Media Foundation Code Execution
The vulnerability of the Media Foundation component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Windows Backup Service Privilege Escalation
The vulnerability of the Windows Backup Service in operating systems relates to competitive access to resources a state of competition. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Windows Privilege Escalation
The vulnerability of Microsoft Windows application stores is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...
Resilient File System Privilege Escalation
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Virtual Filtering Platform DoS
The vulnerability of the Virtual Filtering Platform component for Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Windows Media Disclosure
The vulnerability of the Windows Media component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Windows kernel Privilege Escalation
The vulnerability of Windows operating system kernels relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft .NET Framework Code Execution
The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
PhpSpreadsheet OLERead Buffer Overflow DoS
The vulnerability of the OLERead::read function in the src/PhpSpreadsheet/Shared/OLERead.php script of the PhpSpreadsheet library is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
PhpSpreadsheet gzfileGetContents() DoS
The vulnerability of the gzfileGetContents method in the src/PhpSpreadsheet/Reader/Gnumeric.php script of the PhpSpreadsheet library is related to incorrect processing of highly compressed input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux multimedia device driver Heap Buffer Overflow DoS
The vulnerability of the mtkvcodecprobe function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver for multimedia devices in Linux operating systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause service...
STMicroelectronics Ethernet Network Adapter Driver Heap Buffer Overflow DoS
The vulnerability of the stmmacdvrprobe function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet network adapter driver from STMicroelectronics’ Linux kernel is related to the absence of references to the actively allocated resources. Exploiting this vulnerability cou...
DSA kernel driver Heap Buffer Overflow DoS
The vulnerability of the felixteardown function in the drivers/net/dsa/ocelot/felix.c module of the DSA kernel of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
Linux Kernel AMD Zen4 Function Compromise
The vulnerability of the initamdzen4 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux kernel support for x86 platforms, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to...
Flask-Security-Too OAuth Verification Bypass
The vulnerability of the oauthverifyresponse function in the flasksecurity/oauthglue.py file, a part of the Flask-Security-Too security management tool, is related to vulnerabilities in the authentication process. Exploiting this vulnerability could allow an attacker to circumvent security...
Apache Camel Disclosure Protected Information
The vulnerability of the camel-netty-http and camel-undertow components of the Apache Camel framework is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...
Linux ethtool EEPROM Buffer Overflow
The vulnerability of the eeprompreparedata function in the net/ethtool/eeprom.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
Atheros Wireless Driver Heap Buffer Overflow DoS
The vulnerability of the ath11kdprxprocessmonstatus function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...
Direct Rendering Infrastructure AMD Graphics Buffer Overflow
The vulnerability of the dcn32calculatewmanddlgfpu function in the driver/gpu/drm/amd/display/dc/dml/dcn32/dcn32fpu.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to state management errors. Exploiting this vulnerability could...
Linux kernel crypto_free_instance Heap Buffer Overflow DoS
The vulnerability of the cryptofreeinstance function in the crypto/algapi.c module of the Linux kernel’s cryptographic subsystem is related to situations where there is a competition for resources between different contexts. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel Bluetooth hci_add_adv_monitor() Buffer Overflow
The vulnerability of the hciaddadvmonitor function in the net/bluetooth/hcicore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
AMD DRI Powerplay Heap Overflow DoS
The vulnerability of the psminitpowerstatetable function in the drivers/gpu/drm/amd/pm/powerplay/hwmgr/pppsm.c driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability could allow ...
Adobe Bridge Buffer Overflow Code Execution
The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
btrfs Heap Buffer Overflow DoS
The vulnerability of the btrfsqgroupdestroyextentrecords function in the fs/btrfs/qgroup.c file of the btrfs file system in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
Microsoft Office Use-After-Free
The vulnerability of the Microsoft Office package is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
WordPress WP_Query Class Code Execution
The vulnerability of the WPQuery class in the WordPress content management system is related to the lack of protection for the SQL query structure when processing the authornotin parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain unauthorized access to...
Ext4 Heap Buffer Overflow DoS
The vulnerability of the ext4mbgoodgroup function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
ADFS DoS
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Linux PCI Device Driver Heap Buffer Overflow DoS
The vulnerability of the pciregisterhostbridge function in the drivers/pci/probe.c file of the Linux PCI device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Adobe Experience Manager XSS
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
Adobe Experience Manager XSS
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
WordPress get_items() Code Execution
The vulnerability of the getitems function in the WordPress content management system is related to the occurrence of synchronization issues between the permission check array, the allowed endpoints list, and the execution array. Exploiting this vulnerability could allow an attacker to bypass...
Linux kernel DRI gud_prep_flush() Heap Buffer Overflow
The vulnerability of the gudprepflush function in the drivers/gpu/drm/gud/gudpipe.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the...
Windows Terminal Code Execution
The vulnerability of the Windows Terminal emulator for operating systems is related to a numerical overflow issue. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
camel-kafka evaluateTopic() function Data Compromise
The vulnerability of the evaluateTopic function in the KafkaProducer class of the camel-kafka component from the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a malicious actor to compromise the...
Podman WWebView HTTP Server Unauthorized Access
The vulnerability of the WWebView HTTP Server component of the Podman control and execution software relates to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and cause service failures...
Linux NVME Kernel Heap Buffer Overflow Privilege Escalation
The vulnerability of the nvmedbbufset function in the drivers/nvme/host/pci.c file of the NVME kernel driver in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...
D-Link DNS-320 DoS
The vulnerability of the /web/jquery/uploader/uploadify.php component in the D-Link DNS-320 network storage software is related to access control errors. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Info.plist parser USB driver Cryptographic tokens CCID/ICCD DoS
The vulnerability of the Info.plist parser, USB driver for smart card readers, and cryptographic tokens that comply with CCID/ICCD standards is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
dhcpcd parse_option() Code Execution
The vulnerability of the parseoption function in the if-options.c file is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux X86 driver WMI Svc Failure
The vulnerability of the functions wmaxwmisuspend and wmaxwmisuspend in the driver/platform/x86/dell/alienware-wmi-wmax.c file of the Linux X86 kernel device driver is related to the swapping of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...
S390 Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the mpcrcvdsweepreq function in the drivers/s390/net/ctcmmpc.c file of the S390 Linux operating system kernel driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
DaprPubSubConsumer Apache Camel Class Data Compromise
The vulnerability of the DaprPubSubConsumer class in the camel-dapr framework of the Apache Camel framework is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...
Wazuh Cluster Distributed API Code Execution
The vulnerability of the Cluster Distributed API DAPI component of the Wazuh security monitoring and threat detection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges by...
D-Link DNS-320 DoS
The vulnerability of the “Save Changes and Settings” component in the /web/function/saveajax.php microprogramming system for D-Link DNS-320 network storage devices is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability can allow an...
dhcpcd DoS
The vulnerability of the rtheadclear function in the route.c file is related to the pointer assignment when accessing the ctx field. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel GPIO driver Heap Buffer Overflow DoS
The vulnerability of the lineinfochangednotify function in the drivers/gpio/gpiolib-cdev.c driver for the Linux kernel’s GPIO driver is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux PCI Endpoint Test Function Use-After-Free
The vulnerability of the pciendpointtestmsiirq function in the drivers/misc/pciendpointtest.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
D-Link DNS-320 Upload Component DoS
The vulnerability of the /photocenter/php/uploadify.php component in the D-Link DNS-320 network storage software is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability allows an attacker to cause service failures...