The vulnerability of the Mattermost instant messaging application, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption when processing TIFF files. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerabilities of SAP HANA Cockpit and SAP HANA Database Explorer tools, related to insufficient protection of registration data, allow attackers to compromise the confidentiality of protected information.

The vulnerability of SAP HANA Cockpit and SAP HANA Database Explorer tools is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the Poetry dependency manager in the Python programming language arises from incorrect restrictions on path names in the directory structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Poetry dependency manager in the Python programming language is related to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the distribution tool’s dissemination function for storing and delivering content within containers is related to access control errors, allowing attackers to enhance their privileges.

The vulnerability of the distribution tool’s dissemination function related to access control errors. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the formSysLog() function in TRENDnet TEW-432BRP router software allows a hacker to execute arbitrary code.

The vulnerability of the formSysLog function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability in the mission_block.cpp component of the PX4 Autopilot system allows a intruder to alter the flight path of the aircraft.

The vulnerability of the missionblock.cpp component in the PX4 Autopilot system management software is related to incorrect handling of values. Exploiting this vulnerability could allow an attacker to alter the flight path of the aircraft...

The vulnerability of the function for creating __screenshot-error screenshots in the software testing tool Vitest allows a hacker to execute arbitrary code.

The vulnerability of the screenshot-error function in the software testing tool Vitest relates to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and disclose confidential information...

The vulnerability of the vsetTr069Cfg() function (/cgi-bin/cstecgi.cgi) in the Totolink A3300R router software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the vsetTr069Cfg function /cgi-bin/cstecgi.cgi of the Totolink A3300R router software is related to the failure to eliminate special elements used in the operating system’s command for processing the stunpass parameter. Exploiting this vulnerability allows a malicious actor t...

The vulnerability of the software for deploying and executing AI models with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) involves uncontrolled memory consumption, which allows a malicious actor to cause service failures.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to uncontrolled memory consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure...

The vulnerability of the hybrid transformation library’s script for training large language models like NVIDIA Megatron-LM allows attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and perform data substitution attacks.

The vulnerability of the hybrid transformation library for training large language models like NVIDIA Megatron-LM involves the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized acces...

The vulnerability of the bit_read_RC() function in the Dwgbmp Utility component, a library for processing DWG format files in LibreDWG, allows a hacker to cause a service failure.

The vulnerability of the bitreadRC function in the Dwgbmp Utility component, a library for processing DWG format files in the LibreDWG library, is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the IBM HTTP Server web server, related to uncontrolled resource consumption, allows attackers to cause service interruptions.

The vulnerability of the IBM HTTP Server is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the mod_mem_cache module in the IBM HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modmemcache module in the IBM HTTP Server relates to the pointer being set to expired. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Merge() function in the Gogs automated Git repository creation tool allows a hacker to execute arbitrary code.

The vulnerability of the Merge function in the Gogs self-managed Git repository creation tool is related to the insertion or modification of arguments. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by sending a specially crafted request...

The vulnerability of the process-interaction mechanism of the text editor Notepad++, which allows a hacker to trigger a service failure.

The vulnerability of the process-interaction mechanism of the text editor Notepad++ is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formPing() function on Boa HTTP-servers of Tenda HG9 microprogrammed routing software allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the formPing function on Boa microprogrammed software-based Tenda HG9 routers stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the setTelnetCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setTelnetCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command for handling the telnetenabled parameter. Exploiting this...

The vulnerability of the formWlanSetup() function in Tenda HG9 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWlanSetup function in the Tenda HG9 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the sub_4151FC() function in the embedded web server of the D-Link DIR-825M router’s software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub4151FC function in the embedded web server of the D-Link DIR-825M router’s software is related to the copying of buffer data without checking the size of the input data during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker ...

The vulnerability of the fromGstDhcpSetSer() function in the httpd daemon’s microprogramming software for Tenda F456 allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromGstDhcpSetSer function in the httpd daemon’s microprogramming-based router software Tenda F456 is related to the issue where operations are performed outside of the buffer in memory when processing the dips parameter. Exploiting this vulnerability allows a remote...

The vulnerability in the net/mptcp/subflow.c component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the net/mptcp/subflow.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfilter component in the Linux operating system’s kernel, which leads to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the authorization mechanism for performers of artificial intelligence workflow runners on a Git-based software platform for collaborative code development on GitLab allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the authorization mechanism for performers of artificial intelligence AI workflow runners on a Git-based software platform for collaborative code development on GitLab relates to bypassing authorization by using a user-controlled key. Exploiting this vulnerability could allow...

The vulnerability of the Duo Workflows API interface of the software platform based on git for collaborative code development on GitLab EE allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Duo Workflows API interface of the software platform based on git for collaborative code development in GitLab EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security...

The vulnerability of the shortcuts.xml configuration file of the text editor Notepad++ allows a hacker to execute arbitrary code.

The vulnerability of the shortcuts.xml configuration file of the text editor Notepad++ is related to the failure to remove special elements. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the setWiFiGuestCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the setWiFiGuestCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the wifiOff parameter. Exploiting this vulnerability allows a remot...

The vulnerability of the formWrlExtraSet() function (/goform/WrlExtraSet) in the Tenda F451 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formWrlExtraSet function /goform/WrlExtraSet of the Tenda F451 router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

The vulnerability of the ath11k_wmi_send_peer_assoc_cmd() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ath11kwmisendpeerassoccmd function in the Linux operating system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel SVM component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel SVM component is related to insufficient checks on the state of shared resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the golang.org/x/crypto/ssh library for the Go programming language, which allows a hacker to trigger a denial-of-service attack.

The vulnerability of the golang.org/x/crypto/ssh library for the Go programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the access control model for the container registry in the Git repository management system Gitea allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the access control model for the container registry in the Git repository management system Gitea is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the distribution of resources without any restrictions or regulations, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

The vulnerability of the config.xml configuration file of the Notepad++ text editor allows a hacker to execute arbitrary code.

The vulnerability of the config.xml configuration file of the text editor Notepad++ is related to the lack of measures taken to eliminate special elements during the processing of the commandLineInterpreter parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the sub_4237AC() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub4237AC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause malfunctions in the device...

The vulnerability of the setAdvancedInfoShow() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setAdvancedInfoShow function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command for processing the parameter ttyserver. Exploiting...

The vulnerability of the formWrlExtraSet() function in the httpd daemon of the Tenda F456 microprogramming router allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWrlExtraSet function in the httpd daemon of the Tenda F456 microprogramming router lies in the fact that the operation escapes the buffer boundaries in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the `DcmByteString::makeDicomByteString` function in the `dcmdata/libsrc/dcbytstr.cc` library, which is used for working with DICOM format files. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the DcmByteString::makeDicomByteString function in the dcmdata/libsrc/dcbytstr.cc library, which is used for working with DICOM format data, involves the issue of the operation’s output being stored outside of the buffer. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the drm/i915/gem component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drm/i915/gem component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a hacker to cause a service failure...

The vulnerability of the iommu/mediatek component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iommu/mediatek component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Boa HTTP-server microprogramming software-based routers from Tenda HG9 allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the Boa HTTP-server microprogrammed routing software from Tenda HG9 involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the sub_453140() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub453140 function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause malfunctions in the device...

The vulnerability of the fromSafeEmailFilter() function (/goform/SafeEmailFilter) in the Tenda F451 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeEmailFilter function /goform/SafeEmailFilter in the Tenda F451 router software lies in the issue of the operation being executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the Tenda F451 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function /goform/P2pListFilter in the Tenda F451 router software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the TLS protocol implementation in the IBM HTTP Server allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the TLS protocol implementation in the IBM HTTP Server is related to incorrect code generation practices. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the IBM HTTP Server web server, related to improper code generation management, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the IBM HTTP Server is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the sub_425A28() function (/goform/DelFil) of the Tenda 4G300 router’s microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the sub425A28 function /goform/DelFil of the Tenda 4G300 router’s microprogramming system is related to the lack of measures taken to neutralize special elements during the processing of the delflag parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the sub_414BA8() function in the embedded web server of the D-Link DIR-825M router’s software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub414BA8 function in the embedded web server of the D-Link DIR-825M router’s software is related to the copying of buffer data without checking the size of the input data during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker ...

The vulnerability of the setMiniuiHomeInfoShow() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setMiniuiHomeInfoShow function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the laninfo parameter. Exploiting this...