92434 matches found
The vulnerability of the sp5100_tco_setupdevice_mmio() function in the drivers/watchdog/sp5100_tco.c module allows a hacker to cause a service failure in the Linux operating system’s watchdog timer.
The vulnerability of the sp5100tcosetupdevicemmio function in the drivers/watchdog/sp5100tco.c module related to Linux kernel watchdog timer support is associated with improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the microprogrammed software of the distributed control system EcoStruxure Foxboro DCS, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.
The vulnerability of the microprogrammed software in the distributed control system EcoStruxure Foxboro DCS is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers, such as Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058, stems from the lack of protective measures for website structures. This allows attackers to perform cross-site scripting attacks.
The vulnerability of microprogrammed software in Schneider Electric’s Modicon M241, Modicon M251, Modicon M258, and Modicon LMC058 programmable logic controllers is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the ext4_load_journal() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4loadjournal function in the fs/ext4/super.c file of the Ext4 file system in the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the build_prologue() function in the arch/loongarch/net/bpf_jit.c module of the LoongArch architecture support for the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the buildprologue function in the arch/loongarch/net/bpfjit.c module of the LoongArch architecture support for the Linux operating system is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the qcom_smd_parse_edge() function in the drivers/rpmsg/qcom_smd.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the qcomsmdparseedge function in the drivers/rpmsg/qcomsmd.c module of the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the EcoStruxure Power Monitoring Expert software lies in its deserialization mechanism flaws, allowing attackers to execute arbitrary code.
The vulnerability of the EcoStruxure Power Monitoring Expert software is related to deficiencies in its deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability in the io_uring/zcrx.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the iouring/zcrx.c module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the setup_nic_devices() function in the drivers/net/ethernet/cavium/liquidio/lio_main.c file of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the setupnicdevices function in the drivers/net/ethernet/cavium/liquidio/liomain.c file of the Linux kernel is related to a offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to escalate their privileges.
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform relates to the bypassing of authentication processes. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
The vulnerability of CNI Plugins, related to the disclosure of information, allows a malicious actor to gain unauthorized access to the protected information.
The vulnerability of CNI Plugins relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Django web application software platform, related to algorithmic complexity, allows attackers to trigger service failures.
The vulnerability of the Django web application framework is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerabilities of the `parse_probe_vars()` and `parse_probe_arg()` functions in the `kernel/trace/trace_probe.c` module, which support Linux kernel tracing, allow a malicious actor to cause a system failure.
The vulnerability of the parseprobevars and parseprobearg functions in the kernel/trace/traceprobe.c module, which support kernel tracing in Linux operating systems, is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows unauthorized users to gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers allows a perpetrator to induce a service failure.
The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the setup_msi_msg_address() function in the arch/powerpc/platforms/cell/axon_msi.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the setupmsimsgaddress function in the arch/powerpc/platforms/cell/axonmsi.c module, which is part of the PowerPC platform support for the Linux operating system, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacke...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows attackers to circumvent security restrictions.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to shortcomings in the authorization process when handling CI tasks. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...
The vulnerability of the mapstructure library in the application software of the “Avora Center” allows a intruder to gain unauthorized access to protected information.
The vulnerability of the mapstructure library in the application software of the “Avora Center” relates to improper processing of output data for registration logs. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the software platform based on Git for collaborative code development in GitLab Enterprise Edition (EE) involves bypassing the authentication process by using an alternative path or channel. This allows attackers to circumvent existing security mechanisms.
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing...
The vulnerability of the application software interface of the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.
The vulnerability of the application software interface of a Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the application software interface of the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.
The vulnerability of the application software interface of a Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the check_is_ipv6() function, a handler for IPv6 in Tenda AC8 microprogramming device software, allows a attacker to execute arbitrary code.
The vulnerability of the checkisipv6 function, a function for IPv6 processing in Tenda AC8 microprogramming devices, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted HTTP reques...
The vulnerability of the software for licensing Microsoft Devices Pricing Program allows a violator to execute arbitrary code by enabling unlimited downloading of dangerous files.
The vulnerability of the software for licensing Microsoft Devices Pricing Program relates to the unlimited download of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a regular expression with inefficient computational complexity, which allows attackers to trigger service interruptions.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...
The vulnerability of Windows Admin Center’s server management tool, related to authentication procedures that allow attackers to escalate their privileges.
The vulnerability of the Windows Admin Center management tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
The vulnerability of Mermaid UI’s software platform based on Git for collaborative code development on GitLab allows a hacker to execute arbitrary code.
The vulnerability of Mermaid UI, a software platform based on Git for collaborative code development on GitLab, is related to insufficient protection of the website structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the input_processor_for_phi4mm() function in the library for working with large language models (LLMs) like vLLM, which allows a hacker to trigger a service denial.
The vulnerability of the inputprocessorforphi4mm function in the library for working with large language models LLMs like vLLM is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to trigger a service...
The vulnerability of the mapstructure library in the application software of the “Avora Center” allows a intruder to gain unauthorized access to protected information.
The vulnerability of the mapstructure library in the application software of the “Avora Center” is related to insufficient verification of input data. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the PyNcclPipe class in the library for working with Large Language Models (LLMs) like vLLM allows a hacker to execute arbitrary code.
The vulnerability of the PyNcclPipe class in the library for working with Large Language Models LLMs like vLLM is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the rs/cors application software package in the “Avora Center” application allows a perpetrator to cause a service failure.
The vulnerability of the rs/cors application software of the “Avora Center” package is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Rockchip RK3588 processor lies in its poor protection against voltage spikes and clock speeds, allowing attackers to bypass existing security restrictions and execute arbitrary code.
The vulnerability of the Rockchip RK3588 processor is related to improper protection against voltage spikes and clock speeds. Exploiting this vulnerability allows attackers to bypass existing security restrictions and execute arbitrary code...
The vulnerability of the PageAttention mechanism in the library for working with Large Language Models (LLMs), vLLM, allows a perpetrator to disclose protected information.
The vulnerability of the PageAttention mechanism in the library for working with Large Language Models LLM vLLM relates to the disclosure of information due to timing mismatches. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the mechanism for limiting the amount of input data. This allows attackers to trigger service interruptions.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to shortcomings in the mechanism for limiting the amount of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Snapd service in Ubuntu operating systems allows a hacker to elevate their privileges to the root level.
The vulnerability of the Snapd service in Ubuntu operating systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
The vulnerability of the MultiModalHasher class in the library for working with Large Language Models (LLMs) allows a hacker to disclose protected information.
The vulnerability of the MultiModalHasher class in the library for working with Large Language Models LLMs vLLM is related to improper verification of consistency in input data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the distribution of resources without any restrictions or regulations, allows a violator to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted...
The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a name with an incorrect link, allowing a violator to execute arbitrary code.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to unlimited resource distribution, allows a hacker to cause a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device-based systems (RAID and LVM) allows a hacker to cause a service failure.
The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel’s device driver for multiple devices RAID and LVM is related to display errors when reporting resource status due to inconsistent checks. Exploiting this vulnerability can allow an attacker t...
The vulnerability in the IPC components of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows for interference with the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the IPC components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows for the disclosure of protected information
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by...
The vulnerability of the gss_read_proxy_verf() function in the net/sunrpc/auth_gss/svcauth_gss.c module of the Linux kernel allows a remote attacker to cause a service failure.
The vulnerability of the gssreadproxyverf function in the net/sunrpc/authgss/svcauthgss.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the gsc_set_affinity_irq() function in the drivers/parisc/gsc.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the gscsetaffinityirq function in the drivers/parisc/gsc.c module of the Linux kernel is related to the improper disabling or release of resources. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...
The vulnerability of the dcn31_validate_bandwidth() function in the drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause service failures.
The vulnerability of the dcn31validatebandwidth function in the drivers/gpu/drm/amd/display/dc/dcn31/dcn31resource.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems, is related to incorrect initialization. Exploiting this vulnerability could...
The vulnerability of the btrfs_cache_block_group() function in the fs/btrfs/block-group.c module of the Linux operating system’s kernel allows a attacker to cause a service failure.
The vulnerability of the btrfscacheblockgroup function in the fs/btrfs/block-group.c module of the Linux kernel file system is related to synchronization errors when using a shared resource due to concurrent access to the resource race condition. Exploiting this vulnerability can allow an attacke...
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the ability to bypass authentication via a user-controlled key, allowing attackers to compromise the integrity of protected information.
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server relates to bypassing authentication via a key controlled by the user. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of protected information...
The vulnerability of the Git repository management system Gitea, related to inconsistencies in responses to incoming requests, allows attackers to compromise the confidentiality of protected information.
The vulnerability of the Git repository management system Gitea is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the information being protected...
The vulnerability of the OnGuard component of the software platform for managing network access policies in HPE Aruba Networking ClearPass Policy Manager allows a malicious actor to increase their privileges.
The vulnerability of the OnGuard component in the software platform for managing network access policies of HPE Aruba Networking ClearPass Policy Manager is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...