The vulnerability of the TLS traffic proxy mechanism in NGINX Plus and NGINX OSS allows a hacker to inject data in an open text format.

The vulnerability of the TLS traffic proxy mechanism in NGINX Plus and NGINX OSS lies in the loading of external, unreliable data alongside reliable data. Exploiting this vulnerability allows a malicious actor to inject data in an open text format remotely...

The vulnerability of the MongoDB database management system, related to the unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the mt7921_mcu_parse_response() function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the mt7921mcuparseresponse function in the drivers/net/wireless/mediatek/mt76/mt7921/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

The vulnerabilities of the functions mlx5e_tc_esw_init() and mlx5e_tc_esw_cleanup() in the driver/net/ethernet/mellanox/mlx5/core/en_tc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system, which allow a malicious actor to cause service failures.

The vulnerabilities of the functions mlx5etceswinit and mlx5etceswcleanup in the driver module drivers/net/ethernet/mellanox/mlx5/core/entc.c of the Mellanox Ethernet network adapter driver for the Linux operating system are related to pointer manipulation. Exploiting these vulnerabilities could...

The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Wireshark traffic analyzer relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Wireshark traffic analyzer lies in the execution of a loop with an unavailable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the messagelib message processing library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information.

The vulnerability of the messagelib message processing library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the Nextcloud calendar application, a cloud-based software for creating and using Nextcloud data storage, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nextcloud calendar application, a cloud-based software for creating and using Nextcloud data storage, involves bypassing authentication by using a user-controlled key. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected informati...

The vulnerability of the sgl_sge_nr_set() function in the drivers/crypto/hisilicon/zip/zip_crypto.c file of the Linux kernel cryptographic accelerator driver allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the sglsgenrset function in the drivers/crypto/hisilicon/zip/zipcrypto.c file of the Linux kernel’s cryptographic accelerator driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to...

The vulnerability of the Wireshark traffic analyzer, related to improper management of sequential memory distribution, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the library for working with XML in Python’s python-xmltodict allows attackers to execute arbitrary code due to errors in XML request processing.

The vulnerability of the Python-xmltodict library for working with XML is related to errors in processing XML requests. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the wcurl command-line utility arises from incorrect restrictions on the path name to the restricted access catalog, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the wcurl command-line utility is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the dpaa2_eth_free_tx_fd() function in the drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c module of the Ethernet adapter support driver for the Linux operating system on Freescale cores allows a hacker to cause a service failure.

The vulnerability of the dpaa2ethfreetxfd function in the drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c module of the Ethernet adapter support driver for the Linux operating system’s Freescale kernel is related to the copying of buffers without checking the size of the input data a classic...

The vulnerability of the rendering mechanism of Blink in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of the copy_process() function in the kernel/fork.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the copyprocess function in the kernel/fork.c module of the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `sdma_v4_0_hw_fini()` function in the driver/gpu/drm/amd/amdgpu/sdma_v4_0.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sdmav40hwfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c file of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker...

The vulnerability in the _rtw_join_timeout_handler() function of the drivers/staging/rtl8723bs/core/rtw_mlme.c module allows a hacker to trigger a service failure. This vulnerability enables a hacker to exploit additional devices in the Linux operating system’s kernel support.

The vulnerability of the rtwjointimeouthandler function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the OpenLDAP package, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the OpenLDAP package relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Avahi service detection system in local networks arises from insufficient entropy in resource names, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Avahi service detection system in local networks is related to insufficient entropy in resource names. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by sending specially crafted HTTPS requests...

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the python-urllib3 library, related to incorrect processing of highly compressed input data, allows attackers to cause service failures.

The vulnerability of the python-urllib3 library is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the pm8001_send_abort_all() function in the drivers/scsi/pm8001/pm8001_hwi.c module – A driver for supporting SCSI devices in the Linux operating system, which allows a hacker to trigger a service failure.

Vulnerability of the pm8001sendabortall function in the drivers/scsi/pm8001/pm8001hwi.c module – The Linux SCSI device driver support module is vulnerable due to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient validation of incoming data, allows a hacker to execute arbitrary code.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient validation of incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the ntfs_security_init() function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ntfssecurityinit function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the xlnx_add_cb_for_notify_event() function in the drivers/soc/xilinx/xlnx_event_manager.c module of the SOC driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xlnxaddcbfornotifyevent function in the drivers/soc/xilinx/xlnxeventmanager.c module of the SOC driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the osnoise_cpus_write() function in the kernel/trace/trace_osnoise.c module, which supports Linux kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the osnoisecpuswrite function in the kernel/trace/traceosnoise.c module, which supports kernel tracing in Linux operating systems, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the init_amd() function in the arch/x86/lib/clear_page_64.S file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the initamd function in the arch/x86/lib/clearpage64.S file of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the libsoup library, related to deficiencies in HTTP request processing, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the libsoup library is related to deficiencies in handling http requests. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests HTTP Request Smuggling attack...

The vulnerability of the otx2_sq_aura_pool_init() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c file of the Ethernet adapter support driver for the Marvell Ethernet adapters in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the otx2sqaurapoolinit function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2common.c file, a driver for supporting Marvell Ethernet network adapters in the Linux operating system, relates to the distribution of resources without any restrictions or regulation...

The vulnerability of the bpf_int_jit_compile() function in the arch/arm64/net/bpf_jit_comp.c module, which is part of the networking support on the ARM 64-bit kernel of the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the bpfintjitcompile function in the arch/arm64/net/bpfjitcomp.c module, which is part of the networking support on the ARM 64-bit Linux operating system, involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

The vulnerability of the libexpat library for analyzing XML files, related to the swapping of the zero pointer, allows an attacker to trigger a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sev_launch_measure() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the sevlaunchmeasure function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux operating system’s x86 kernel is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to protected...

The vulnerability of the fch_misc_setup() function in the drivers/acpi/acpi_apd.c module of the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the fchmiscsetup function in the drivers/acpi/acpiapd.c module of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Avahi service detection system in local networks, related to the lack of use of the assert() function, allows a perpetrator to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to the lack of use of the assert function. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient checking of unusual or exceptional states, allows a attacker to trigger a service failure.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to unlimited resource allocation, allows a attacker to cause a service failure.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the mlx5e_fs_tt_redirect_any_create() function in the drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the mlx5efsttredirectanycreate function in the drivers/net/ethernet/mellanox/mlx5/core/en/fsttredirect.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended...

The vulnerability of the zorro7xx_remove_one() function in the drivers/scsi/zorro7xx.c module of the Linux SCSI device driver support library allows a attacker to cause a service failure.

The vulnerability of the zorro7xxremoveone function in the drivers/scsi/zorro7xx.c module of the Linux SCSI device driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions bcmgenet_writel() and bcmgenet_readl() in the driver module drivers/net/ethernet/broadcom/genet/bcmgenet.c of the Broadcom Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bcmgenetwritel and bcmgenetreadl functions in the drivers/net/ethernet/broadcom/genet/bcmgenet.c driver for Broadcom Ethernet network adapters in Linux operating systems is related to state management errors. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the asix_read_cmd() function in the drivers/net/usb/asix_common.c module of the Linux kernel’s USB device driver support library allows a malicious actor to cause a service failure.

The vulnerability of the asixreadcmd function in the drivers/net/usb/asixcommon.c module of the Linux USB network adapter driver support framework is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nbd_start_device_ioctl() function in the drivers/block/nbd.c module of the Linux kernel’s block device support driver allows a attacker to cause a service failure.

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block device support driver relates to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ath9k_rx_prepare() function in the drivers/net/wireless/ath/ath9k/htc_drv_txrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the ath9krxprepare function in the drivers/net/wireless/ath/ath9k/htcdrvtxrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker...

The vulnerability of the f2fsDropInMemPage() function in the fs/f2fs/segment.c module of the F2FS file system support in Linux’s kernel allows a hacker to cause a service failure.

The vulnerability of the f2fsDropInMemPage function in the fs/f2fs/segment.c module of the F2FS file system support in Linux kernel relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the davinci_vc_probe() function in the drivers/mfd/davinci_voicecodec.c file of the driver for the multifunctional devices (MFD) controller in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the davincivcprobe function in the drivers/mfd/davincivoicecodec.c file of the MFD controller driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hsw_disable_crt() function in the drivers/gpu/drm/i915/display/intel_crt.c module of the Linux kernel’s Direct Rendering Infrastructure (DRI) support driver allows a attacker to cause a service failure.

The vulnerability of the hswdisablecrt function in the drivers/gpu/drm/i915/display/intelcrt.c module of the DRI support driver for the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...