The vulnerability in the IBM Aspera Console, a web application for managing high-speed data transfer environments, relates to insufficient control over interaction frequencies. This allows a malicious actor to trigger a service failure.

The vulnerability of the IBM Aspera Console, a web application for managing high-speed data transfer environments, is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...

The vulnerability of the IBM Sterling B2B Integrator and IBM Sterling File Gateway software solutions lies in their lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code and disclose sensitive information.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file gateway software lies in the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the writing beyond the buffer boundary in memory. This allows a malicious actor to execute arbitrary code with elevated privileges.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with elevated privileges...

The vulnerability of the Pre-Logon Access Provider (PLAP) component of the software for secure remote access to data in the Palo Alto Networks GlobalProtect App allows a perpetrator to execute arbitrary code.

The vulnerability of the Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect App, which enables secure remote access to data, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privilege...

The vulnerability of the nsppe component of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nsppe component of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway relates to bypassing the authentication process by using an alternative path or channel...

The vulnerability of the java() function in the nltk/internals.py file of the NLTK library, a software package for symbolic and statistical processing of natural language, allows a hacker to gain control over the system.

The vulnerability of the java function in the nltk/internals.py file of the NLTK library, a software package for symbolic and statistical processing of natural language, is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability in the built-in tool for measuring channel bandwidth on the RouterOS operating system of MikroTik routers allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the built-in tool for measuring channel bandwidth on the RouterOS operating system of MikroTik routers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failur...

The vulnerability in operating systems macOS, iOS, and iPadOS, related to operations beyond the memory buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of operating systems macOS, iOS, and iPadOS stems from the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the IBM Sterling Partner Engagement Manager software lies in its lack of measures to protect the website structure. This allows attackers to execute arbitrary JavaScript code and disclose protected information.

The vulnerability of the IBM Sterling Partner Engagement Manager software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and disclose protected information...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the use of an unreliable search path, allowing attackers to elevate their privileges to the root level.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of the user remote access agent for corporate resources and Prisma Access applications lies in the violation of data protection mechanisms, allowing attackers to bypass unauthorized access protections.

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security measures against unauthorized access...

The vulnerability of the Portal component of the Kubernetes Helm package manager allows a attacker to perform cross-site scripting attacks.

The vulnerability of the Portal component of the Kubernetes Helm package management tool is related to the lack of security measures for protecting the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the command-line interface of data storage software Infinispan allows attackers to exploit it to disclose sensitive information.

The vulnerability of the command-line interface of data storage software called Infinispan is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of the xe_gem_prime_import() function in the drivers/gpu/drm/xe/xe_dma_buf.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allo...

The vulnerability in operating systems macOS, iOS, and iPadOS, related to reading beyond the buffer limit of memory, allows an intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability of operating systems macOS, iOS, and iPadOS relates to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, relates to the ability to bypass authentication through spoofing. This allows attackers to carry out spoofing attacks.

The vulnerability of the Prisma Access Agent, a user-level remote access agent, relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows attackers to carry out spoofing attacks...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to an uncontrolled element of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Red Hat Advanced Cluster Management’s cluster management software for Kubernetes stems from deficiencies in access control to personal information, allowing attackers to disclose confidential data.

The vulnerability of Red Hat Advanced Cluster Management’s cluster management software for Kubernetes is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to disclose confidential information...

The vulnerability of SIPROTEC 5 devices, which are designed for relay protection, automation, and control, lies in their ability to load files of a harmful nature without limitation. This allows attackers to execute arbitrary codes or trigger malfunctions in the equipment.

The vulnerability of SIPROTEC 5 devices for relay protection, automation, and control is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the _LibSer_SEPControl Deserialize() function in the AppleKeyStore kernel extension of operating systems such as iOS, iPadOS, and macOS allows a malicious actor to disclose sensitive information.

The vulnerability of the LibSerSEPControl Deserialize function in AppleKeyStore kernel extensions for iOS, iPadOS, and macOS is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this...

The vulnerability of the atomisp_s_parm() function in the drivers/staging/media/atomisp/pci/atomisp_ioctl.c driver for Intel Atom-based Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the atomispsparm function in the drivers/staging/media/atomisp/pci/atomispioctl.c driver for Intel Atom-based Linux operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.

The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...

The vulnerability of the container and artifact image verification platform lies in its authentication procedures’ flaws, which allow attackers to disclose protected information.

The vulnerability of the container and artifact image verification platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the extract_addresses() function in the DNS server library Dnsmasq allows a hacker to induce a service failure.

The vulnerability of the extractaddresses function in the DNS server library Dnsmasq is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the parseElementStartPart() function in the lib/sax.js file of the XML document access and management module XMLDOM allows a attacker to cause a service failure.

The vulnerability of the parseElementStartPart function in the lib/sax.js file, a module for defining methods to access and manage XML documents, is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the Microsoft Edge browser (based on Chromium) relates to errors in data type mixing, allowing a malicious actor to execute arbitrary code.

The vulnerability of Microsoft Edge based on Chromium is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Element.setAttribute() method in the XML Document Access and Management Module XMLDOM allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the Element.setAttribute method in the XML document access and manipulation module XMLDOM is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the xhci_irq() function in the drivers/usb/host/xhci-ring.c file of the Linux device driver framework allows a hacker to cause a service failure.

The vulnerability of the xhciirq function in the drivers/usb/host/xhci-ring.c file of the Linux USB device driver framework is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `mark_page_dirty_in_slot()` function in the `virt/kvm/kvm_main.c` module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the markpagedirtyinslot function in the virt/kvm/kvmmain.c file of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service...

The vulnerability of the __switch_to() function in the arch/arm/kernel/entry-armv.S module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the switchto function in the arch/arm/kernel/entry-armv.S module of the Linux operating system is related to buffer overflow in the stack. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the efi_crash_gracefully_on_page_fault() function in the arch/x86/platform/efi/quirks.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efecrashgracefullyonpagefault function in the arch/x86/platform/efi/quirks.c module of the Linux operating system’s kernel support for x86 platforms is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an...

The vulnerability of the tun_xdp_one() function in the drivers/net/tun.c module of the Linux kernel’s network device driver allows a attacker to cause a service failure.

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver leads to an infinite loop when a condition for exiting the loop is not met. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the debugging console for the WatchMan-Site7 plugin of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the debugging console for the WatchMan-Site7 plugin of the WordPress content management system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the qrtr_port_remove() function in the net/qrtr/af_qrtr.c module, which supports Qualcomm IPC cores in the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qrtrportremove function in the net/qrtr/afqrtr.c module, which supports Qualcomm IPC cores in the Linux operating system, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the i2cdev_ioctl() function in the drivers/i2c/i2c-dev.c file of the I2C driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the i2cdevioctl function in the drivers/i2c/i2c-dev.c file of the I2C driver in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ttm_bo_shrink() function in the drivers/gpu/drm/ttm/ttm_b_util.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ttmboshrink function in the drivers/gpu/drm/ttm/ttmboutil.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability could...

The vulnerability of the decode_choose_args() function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.

The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, stems from an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow a remote attacker to...

The vulnerabilities of the functions nvmet_tcp_build_pdu_iovec() and nvmet_tcp_handle_req_failure() in the Linux kernel’s drivers/nvme/target/tcp.c module allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions nvmettcpbuildpduiovec and nvmettcphandlereqfailure in the driver/nvme/target/tcp.c module of the Linux kernel are related to error handling flaws. Exploiting these vulnerabilities allows a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the pressure_write() function in the kernel/cgroup/cgroup.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pressurewrite function in the Linux kernel/cgroup/cgroup.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the unix_stream_bpf_update_proto() function in the net/unix/unix_bpf.c module, which implements networking functions in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the unixstreambpfupdateproto function in the net/unix/unixbpf.c module, which implements networking functions in the Linux operating system’s kernel, is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...

The vulnerability of the fwctl_exit() function in the drivers/fwctl/main.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the fwctlexit function in the drivers/fwctl/main.c file of the Linux kernel module involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `komeda_fb_afbc_size_check()` function in the `drivers/gpu/drm/arm/display/komeda/komeda_framebuffer.c` file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

The vulnerability of the hci_uart_register_dev() function in the drivers/bluetooth/hci_ldisc.c device driver of the Linux operating system’s Bluetooth kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciuartregisterdev function in the drivers/bluetooth/hcildisc.c device driver of the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the adjust_reg_min_max_vals() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adjustregminmaxvals function in the kernel/bpf/verifier.c module of the Linux operating system is related to improper handling of an additional special element. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the bpf_selem_unlink() function in the kernel/bpf/bpf_local_storage.c module, which supports the BPF interpreter for the Linux operating system’s kernel, allows a malicious actor to trigger a service failure.

The vulnerability of the bpfselemunlink function in the kernel/bpf/bpflocalstorage.c module, which is part of the BPF interpreter support for the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the `virtio_transport_send_pkt_info()` function in the `net/vmw_vsock/virtio_transport_common.c` file, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the virtiotransportsendpktinfo function in the net/vmwvsock/virtiotransportcommon.c file, which is part of the Linux kernel’s networking functions, allows for unlimited resource allocation. Exploiting this vulnerability could enable a hacker to cause a service failure...

The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper resource release. Exploiting this vulnerability could...

The vulnerability of the fastrpc_get_args() function in the drivers/misc/fastrpc.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the `virtio_gpu_dma_fence_wait()` function in the `drivers/gpu/drm/virtio/virtgpu_submit.c` file of the Direct Rendering Infrastructure (DRI) driver of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the virtiogpudmafencewait function in the drivers/gpu/drm/virtio/virtgpusubmit.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this...

The vulnerability of the cleanup_prefix_route() function in the net/ipv6/addrconf.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cleanupprefixroute function in the net/ipv6/addrconf.c module of the IPv6 protocol implementation in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...