98400 matches found
ImageMagick Decoder DoS
The vulnerability of the decoder in the ImageMagick console-based graphics editor is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
containerd Privilege Escalation
The vulnerability of the containerd execution environment is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions or enhance their privileges...
container management system getImageMetadata backup.GetInfo DoS
The vulnerabilities of the getImageMetadata and backup.GetInfo functions in the container management system and the virtual machine manager Incus are related to unlimited resource distribution. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...
node-tar tar.replace() DoS
The vulnerability of the tar.replace function in the node-tar library of the Node.js software platform is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...
node-tar DoS
The vulnerability of the src/extract.ts file in the node-tar library of the Node.js software platform is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Proof-generation tool XSS
The vulnerability of the proof-generation tool and the software platform based on Git for collaborative code development in GitLab EE is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
Open WebUI sanitize_proxy_path function Data Compromise
The vulnerability of the sanitizeproxypath function backend/openwebui/routers/terminals.py in the Open WebUI AI-based web interface is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the...
Project-SMARTPRO PlatformHandler.axd Path Traversal
The vulnerability of the PlatformHandler.axd component in the automated information system “Web-Torghi KS” and the software suite “Budget-NEXT” is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...
aiohttp HTTP Header Injection
The vulnerability of the aiohttp HTTP client is related to the failure to handle CRLF sequences in HTTP headers when processing the contenttype parameter. Exploiting this vulnerability allows an attacker to inject arbitrary HTTP headers remotely...
aiohttp HTTP Client Resource Throttling DoS
The vulnerability of the aiohttp HTTP client is related to unlimited resource allocation or throttling. Exploiting this vulnerability can allow a remote attacker to cause service failures...
aiohttp Request.post() DoS
The vulnerability of the Request.post function in the aiohttp HTTP client is related to unlimited resource distribution or throttling. Exploiting this vulnerability could allow a remote attacker to cause service failures...
aiohttp HTTP Client Disclosure
The vulnerability of the aiohttp HTTP client is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...
aiohttp HTTP Header Injection
The vulnerability of the aiohttp HTTP client is related to the failure to handle CRLF sequences in HTTP headers when processing the reason parameter. Exploiting this vulnerability allows an attacker who operates remotely to inject arbitrary HTTP headers...
Linux kernel Bluetooth set_mesh_complete set_mesh_sync DoS
The vulnerability of the setmeshcomplete and setmeshsync functions in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem lies in the fact that they involve reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel NFS DCE
The vulnerability of the nfsdsetfhdentry function in the fs/nfsd/nfsfh.c module, which supports the Network File System in Linux kernels, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux DRI virtio_gpu_get_caps_ioctl Buffer Overflow DoS
The vulnerability of the virtiogpugetcapsioctl function in the drivers/gpu/drm/virtio/virtgpuioctl.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of pointers L. Exploiting this vulnerability can allow an attacker to cause a...
NFS Client Buffer Overflow
The vulnerability of the nfs4openandgetstate function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the securebootfusestateshow function in the drivers/platform/mellanox/mlxbf-bootctl.c kernel module of the Linux operating system is related to the copying of a buffer without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...
btf_ext_parse_info Heap Buffer Overflow DoS
The vulnerability of the btfextparseinfo function in the tools/lib/bpf/btf.c module of the Linux kernel is related to the copying of buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system failure...
Cisco Enterprise Chat and Email Lite Agent Feature Data Manipulation
The vulnerability of the Lite Agent Feature in the Cisco Enterprise Chat and Email ECE messaging service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to access, modify, add, or delete data using a specially created...
Tenda F456 Router fromwebExcptypemanFilter Heap Buffer Overflow DoS
The vulnerability of the fromwebExcptypemanFilter function in the /goform/webExcptypemanFilter file of the Tenda F456 router microprogramming system is related to the issue where an operation is executed outside the buffer in memory when processing the page parameter. Exploitation of this...
libapmib.so Heap Buffer Overflow
The vulnerability of the iscmdstringvalid function in the /boafrm/formWsc file of the libapmib.so component of the TOTOLINK N300RT router software is related to the issue where the operation is performed outside of the buffer in memory when processing the localPin parameter. Exploiting this...
Siemens Network Software Pointer Swapping DoS
The vulnerability of Siemens network software is related to the swapping of pointers. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...
TOTOLINK N300RT Form IPQoS DoS Execution Code
The vulnerability of the /boafrm/formIpQoS microprogramming software for TOTOLINK N300RT routers lies in the fact that the operation’s output escapes the buffer and is stored in memory when processing the parameter entryname. Exploiting this vulnerability allows an attacker to cause service...
TOTOLINK A8000RU CGI Handler setDmzCfg Command Execution
The vulnerability of the setDmzCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
vm2 setup-sandbox.js Code Execution
The vulnerability of the setup-sandbox.js file in the vm2 package manager’s library in NPM is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
vm2 Package Manager Code Execution
The vulnerability of the vm2 package manager’s code transformation transformer is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Splunk Enterprise Unauthorized Access
The vulnerability of the splunkd component of the Splunk Enterprise platform relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
io.netty.handler.codec.redis.RedisEncoder Command Injection
The vulnerability of the io.netty.handler.codec.redis.RedisEncoder component in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper code generation. Exploiting this vulnerability allows a remote attacker to inject arbitrary...
block blk-sysfs Queueattrstore DoS
The vulnerability of the queueattrstore function in the block/blk-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...
Linux kernel Cache Files Buffer Overflow DoS
The vulnerability of the cachefilespreparewritesubreq function in the fs/cachefiles/io.c module of the Linux kernel’s file system support module is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux x86 Kernel Heap Buffer Overflow DoS
The vulnerability of the initamdbd function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
lib/iov_iter Heap Buffer Overflow DoS
The vulnerability of the iovitergetpagesalloc function in the lib/ioviter.c module of the Linux operating system’s kernel is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...
amdgpudebugfs_vm_infoShow() Function Heap Overflow DoS
The vulnerability of the amdgpudebugfsvminfoShow function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c driver module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...
Open WebUI Permission Bypass Privilege Escalation
The vulnerability of the Open WebUI web interface relates to the lack of permission checking for workspace.models.import. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access, modify data, and enhance their privileges by sending a specially crafted POST...
GnuTLS DTLS DoS
The vulnerability of the DTLS protocol implementation of the GnuTLS cryptographic library is related to unpredictable behavior of functions due to inconsistencies in parameter values. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
GnuTLS RSA PSK Bypass Unauthorized Access
The vulnerability of the gnutlsprocrsapskclientkx function in the lib/auth/rsapsk.c file of the GnuTLS cryptographic library is related to incorrect handling of zero bytes or NULL characters during data exchange. Exploiting this vulnerability could allow an attacker to bypass existing security...
MongoDB HTTP Response Analysis DoS
The vulnerability of the client library’s HTTP-response analysis mechanism for interacting with MongoDB databases is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
container management system DoS
The vulnerabilities of the functions ParseConfigYamlFile and backup.GetInfo in the container management system and the virtual machine manager Incus are related to the use of a null pointer. Exploiting these vulnerabilities could allow an attacker to cause service interruptions...
GnuTLS Heap Buffer Overflow DoS
The vulnerability of the gnutlspkcs12bagsetdata function in the GnuTLS cryptographic library is related to a single-precision shift error. Exploiting this vulnerability could allow an attacker to corrupt memory or cause service failures...
GnuTLS MITM Attack
The vulnerability of the gnutlsx509crtcheckhostname2 function in the lib/x509/hostname-verify.c file of the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to perform a MITM attack...
GnuTLS Function MIT Attack
The vulnerability of the nameconstraintsnodelistintersect function in the lib/x509/nameconstraints.c file, lines 726-727, of the cryptographic library GnuTLS is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to perform a MITM attack...
Open WebUI get_sources_from_items() Unauthenticated Access
The vulnerability of the getsourcesfromitems function in the Open WebUI AI-based web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the Range Addressing RAG...
Open WebUI Authentication Bypass
The vulnerability of the Open WebUI web interface relates to the lack of authorization during the processing of the final endpoint /api/v1/retrieval/process/web. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, and delete data...
MongoDB Hash Table DoS
The vulnerability of the Slot-Based Execution SBE hash table implementation in the MongoDB database management system is related to a mistake in releasing memory that has already been released. Exploiting this vulnerability can allow an attacker to cause service interruptions...
server daemon incusd in DoS
The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Linux t7xx_port EnumMsgHandler() function Heap Buffer Overflow DoS
The vulnerability of the t7xxport EnumMsgHandler function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...
Tenda F456 Router fromDhcpListClient Code Execution
The vulnerability of the fromDhcpListClient function in the /goform/DhcpListClient file of the httpd microprogramming system for Tenda F456 routers is related to an out-of-buffer operation in memory when processing the page parameter. Exploiting this vulnerability could allow a remote attacker to...
Linux RPC Protocol Heap Buffer Overflow DoS
The vulnerability of the svcrdmacopyInlinerange function in the net/sunrpc/xprtrdma/svcrdmarw.c module of the Linux operating system’s RPC protocol is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Linux SMB Server Buffer Overflow DoS
The vulnerability of the smb2setea function in the fs/smb/server/smb2pdu.c module of the SMB server software in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an...