92434 matches found
The vulnerability of the `sof_ipc4_trigger_pipelines()` function in the `sound/soc/sof/ipc4-pcm.c` sound support module of the Linux operating system’s SoC kernel allows a hacker to trigger a service failure.
The vulnerability of the sofipc4triggerpipelines function in the sound/soc/sof/ipc4-pcm.c sound support module of the Linux operating system’s SoC kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the nfs_do_refmount() function in the fs/nfs/nfs4namespace.c module, which is part of the NFS client support in Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the nfsdorefmount function in the fs/nfs/nfs4namespace.c module, which is part of the NFS client support in Linux kernel, stems from the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the mxc_jpeg_device_run() function in the drivers/media/platform/imx-jpeg/mxc-jpeg.c file of the Linux kernel’s multimedia device support driver allows a attacker to cause a service failure.
The vulnerability of the mxcjpegdevicerun function in the drivers/media/platform/imx-jpeg/mxc-jpeg.c file, a driver for supporting multimedia devices in the Linux operating system, is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the xfarraydestroy() and xfblobdestroy() functions in the Linux kernel allow a hacker to cause a system failure.
The vulnerabilities of the xfarraydestroy and xfblobdestroy functions in the Linux kernel are related to pointer dereferencing errors. Exploiting these vulnerabilities can allow attackers to cause system failures...
The vulnerability of the ocfs2_unlock_global_qf() function in the fs/ocfs2/quota_global.c module of the OCFS2 file system in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ocfs2unlockglobalqf function in the fs/ocfs2/quotaglobal.c file of the OCFS2 file system in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the function mdio_bus_init() of the drivers/net/phy/mdio_bus.c file, a driver for supporting Physical Layer (PHY) devices in Linux operating systems, allows a hacker to cause a service failure.
The vulnerability of the mdiobusinit function in the drivers/net/phy/mdiobus.c module of the Linux physical-layer network support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the dpll_device_unregister() function in the drivers/dpll/dpll_core.c module of the DPLL driver support library in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dplldeviceunregister function in the drivers/dpll/dpllcore.c module of the Linux DPLL driver framework is related to a error in re-allocating previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `deferred_probe_timeout_work_func()` function in the `drivers/base/dd.c` module of the Linux kernel’s device driver support framework allows a attacker to cause a service failure.
The vulnerability of the deferredprobetimeoutworkfunc function in the drivers/base/dd.c file of the Linux kernel’s device driver support framework is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the IBM Planning Analytics Local software, related to the disclosure of information through caching, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the IBM Planning Analytics Local software relates to the disclosure of information through caching. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Business Chat function in the Microsoft 365 Copilot intelligent virtual assistant allows a hacker to escalate their privileges.
The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of the IBM Planning Analytics Local software, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the IBM Planning Analytics Local software is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the CI/CD system’s continuous integration and delivery capabilities in JetBrains TeamCity, related to incomplete cleanup of temporary or auxiliary resources, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity by JetBrains is related to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
The vulnerability of the microprogrammed software of EDIMAX GS-5008PL devices, related to the manipulation of inter-site requests, allows a hacker to gain access to modify passwords, restart the device, and reset system settings.
The vulnerability of the microprogrammed software of the EDIMAX GS-5008PL switches is related to the possibility of manipulating inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify passwords, restart the device, and reset...
The vulnerability of the `dw_edma_v0_core_write_chunk()` function in the `drivers/dma/dw-edma/dw-edma-v0-core.c` driver file of the Linux kernel’s DMA engine support module allows a hacker to cause a service failure.
The vulnerability of the dwedmav0corewritechunk function in the drivers/dma/dw-edma/dw-edma-v0-core.c driver for Linux kernel’s DMA engine is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability in the function ipmi_ipmb_probe() of the drivers/char/ipmi/ipmi_ipmb.c module, a driver for supporting alphanumeric devices in the Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the ipmiipmbprobe function in the drivers/char/ipmi/ipmiipmb.c module of the Linux kernel’s device support driver relates to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __restore_v_state() function in the arch/riscv/kernel/signal.c module of the Linux operating system’s RISC-V architecture-based kernel subsystem allows a attacker to cause a service failure.
The vulnerability of the restorevstate function in the arch/riscv/kernel/signal.c module of the Linux operating system’s RISC-V architecture kernel subsystem is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the cpt_register_algs() function in the drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c file of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.
The vulnerability of the cptregisteralgs function in the drivers/crypto/marvell/octeontx2/otx2cptvfalgs.c driver of the Linux kernel cryptographic accelerator is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to the lack of authentication, allows a perpetrator to gain read and edit access to data.
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to gain read and write access to data...
The vulnerability in the system_name_set.cgi script of the EDIMAX GS-5008PL switch microprogramming system allows a intruder to execute arbitrary code.
The vulnerability in the systemnameset.cgi script of the EDIMAX GS-5008PL microcontroller software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...
The vulnerability of the zpci_device_reserved() function in the arch/s390/pci/pci.c module of the S390 platform support module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the zpcidevicereserved function in the arch/s390/pci/pci.c module of the S390 platform support library in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the get_imports() function in the Transformers library allows a hacker to trigger a service failure.
The vulnerability of the getimports function in the Transformers library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the UploadCfg() function in the microprogramming software for Tenda A15 allows a hacker to execute arbitrary code.
The vulnerability of the UploadCfg function in the Tenda A15 router’s microprogramming software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the File parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sendi...
The vulnerability of the HTTP library Urllib3 in the Python programming language arises from incorrect processing of highly compressed input data, allowing attackers to cause service failures.
The vulnerability of the HTTP library Urllib3 in the Python programming language is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Linux monitoring tool Atop, related to the lack of use of the assert() function, allows a hacker to cause a service failure.
The vulnerability of the Linux monitoring tool Atop is related to the lack of use of the assert function. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the ReadTIMImage function in the TIM image analyzer software (PSX TIM), a console-based image editing tool from ImageMagick, allows a hacker to cause a service failure.
The vulnerability of the ReadTIMImage function in the TIM image analyzer and the ImageMagick console-based graphics editor involves the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Django web application software platform, related to algorithmic complexity, allows attackers to trigger service failures.
The vulnerability of the Django web application framework is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability involves the components of REST WebServices of the Oracle Identity Manager software platform from Oracle Fusion Middleware, as well as the WebServices Security component of the Oracle WebServices Manager application. This vulnerability allows a malicious individual to gain unauthorized access to the system.
The vulnerability of the REST WebService component of the Oracle Identity Manager identity management software and the WebServices Security component of the Oracle WebServices Manager application is related to the lack of authentication for critical functions. Exploiting this vulnerability could...
The vulnerability of the Java framework for securing industrial applications using Spring Security arises from the use of a non-safe direct reference to objects. This allows attackers to execute arbitrary code.
The vulnerability of the Java framework for securing industrial applications using Spring Security lies in the use of a potentially insecure direct reference to objects. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted HTTP request...
The vulnerability of the ndisc_router_discovery() function in the net/ipv6/ndisc.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ndiscrouterdiscovery function in the net/ipv6/ndisc.c module of the IPv6 protocol implementation in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the handle_cap_grant() function in the fs/ceph/caps.c module of the Ceph distributed file system support module for Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the handlecapgrant function in the fs/ceph/caps.c module of the Ceph distributed file system support module for Linux operating systems is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to trigger a service failure...
The vulnerability of the UniFi Network management software arises from incorrect restrictions on the path name to the directory, allowing unauthorized access to authentication data.
The vulnerability of the UniFi Network management software is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to authentication data...
The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers Modicon M241, Modicon M251, and Modicon M262 arises from improper cleaning or release of resources, allowing a intruder to trigger malfunctions during maintenance.
The vulnerability of microprogrammed software in Schneider Electric’s Modicon M241, Modicon M251, and Modicon M262 programmable logic controllers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system remote...
The vulnerability of the max77620_initialise_fps() function in the drivers/mfd/max77620.c module of the controller multifunctional devices (MFD) driver for the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the max77620initialisefps function in the drivers/mfd/max77620.c file of the MFD controller driver for the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Django web application framework lies in its lack of protection for SQL query structures, allowing attackers to execute arbitrary code.
The vulnerability of the Django web application framework lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to unlimited resource distribution, allows a hacker to cause a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the cifs_readahead() function in the fs/cifs/file.c module of the Linux kernel file system allows a hacker to cause a service failure.
The vulnerability of the cifsreadahead function in the fs/cifs/file.c module of the Linux kernel file system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the SOCKS proxy server used by the software for managing the infrastructure of the EcoStruxure IT Data Center Expert allows a hacker to gain unauthorized access to protected information and execute arbitrary code.
The vulnerability of the SOCKS proxy server used by the software for managing the infrastructure of the EcoStruxure IT Data Center Expert system is related to the use of strictly encrypted authentication data. Exploiting this vulnerability could allow an attacker operating remotely to gain...
The vulnerability of the spufs_init_isolated_loader() function in the arch/powerpc/platforms/cell/spufs/inode.c file, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the spufsinitisolatedloader function in the arch/powerpc/platforms/cell/spufs/inode.c file, which is part of the PowerPC platform support for the Linux operating system, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow...
The vulnerability of the nft_set_elem_expr_clone() function in the net/netfilter/nf_tables_api.c module of the netfilter kernel of the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the nftsetelemexprclone function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the setup_nic_devices() function in the drivers/net/ethernet/cavium/liquidio/lio_main.c file of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the setupnicdevices function in the drivers/net/ethernet/cavium/liquidio/liomain.c file of the Linux kernel is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the clcdfb_of_init_display() function in the drivers/video/fbdev/amba-clcd.c driver for kernel-based graphics devices in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the clcdfbofinitdisplay function in the drivers/video/fbdev/amba-clcd.c driver for kernel-based graphics devices in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Django web application platform, related to the disclosure of information based on temporal discrepancies, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Django web application framework is related to the disclosure of information based on temporal discrepancies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the aa_pivotroot() function in the security/apparmor/mount.c module of the AppArmor security component for Linux kernel allows a attacker to cause a service failure.
The vulnerability of the aapivotroot function in the security/apparmor/mount.c module of the AppArmor security component for Linux kernel is related to errors during linkage updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the driver/nvme/host/fc.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/nvme/host/fc.c module of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the functions mt6359_accdet_parse_dt() and mt6359_parse_dt() in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mt6359accdetparsedt and mt6359parsedt functions in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rpc_sysfs_xprt_state_change() function in the net/sunrpc/sysfs.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.
The vulnerability of the rpcsysfsxprtstatechange function in the net/sunrpc/sysfs.c module of the Linux operating system’s RPC protocol implementation is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c kernel module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/gpu/drm/amd/amdgpu/amdgpudrv.c module of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Django web application framework lies in its lack of protection for SQL query structures, allowing attackers to execute arbitrary code.
The vulnerability of the Django web application framework lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the EcoStruxure Automation Expert software for automating manufacturing processes lies in improper code generation. This allows attackers to execute arbitrary commands and gain full control over the system.
The vulnerability of the EcoStruxure Automation Expert software for automating manufacturing processes is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain full control over the system...
The vulnerability of the sp5100_tco_setupdevice_mmio() function in the drivers/watchdog/sp5100_tco.c module allows a hacker to cause a service failure in the Linux operating system’s watchdog timer.
The vulnerability of the sp5100tcosetupdevicemmio function in the drivers/watchdog/sp5100tco.c module related to Linux kernel watchdog timer support is associated with improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...