98400 matches found
Netty DefaultHttp2FrameReader DoS
The vulnerability of the DefaultHttp2FrameReader class in the network application development framework for protocols like Netty relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a malicious actor to cause service failures...
TraceQL DoS
The vulnerability of the TraceQL query language used in Grafana Tempo’s storage and analysis software for distributed trace data involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Linux Power Management Driver Fuel Gauge External Power Changed
The vulnerability of the fuelgaugeexternalpowerchanged function in the drivers/power/supply/axp288fuelgauge.c file of the Linux kernel’s power management driver is related to the racing scenario. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux SMB Server Buffer Overflow DoS
The vulnerability of the smb2setea function in the fs/smb/server/smb2pdu.c module of the SMB server software in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an...
Linux EROFS Heap Buffer Overflow DoS
The vulnerability of the zerofsdomapblocks function in the fs/erofs/zmap.c file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
Oracle Solaris File System Unauthorized Access
The vulnerability of the Oracle Solaris operating system’s file system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
Palo Alto Networks Prisma Access Agent Man-in-the-Middle
The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack...
Linux IPv6 net/ipv6/route.c Heap Buffer Overflow DoS
The vulnerability of the rt6makepcpuroute function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...
KVM Heap Buffer Overflow DoS
The vulnerability of the kvmsetmemoryregion function in the virt/kvm/kvmmain.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker...
Large Scale VPN PAN-OS Disclosure
The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...
PAN-OS Prisma Access RCE
The vulnerability of the PAN-OS operating system and the Prisma Access cloud security remote access system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
User-ID Terminal Server Agent PAN-OS Privilege Escalation
The vulnerability of the User-ID Terminal Server Agent component of the PAN-OS operating system, as well as the user remote access agent for corporate resources and applications, namely the Palo Alto Networks Prisma Access Agent, is related to buffer overflow attacks. Exploiting this vulnerabilit...
arch/loongarch/kernel/proc.c Heap Buffer Overflow DoS
The vulnerability of the cstart function in the arch/loongarch/kernel/proc.c module, which supports the LoongArch architecture of the Linux operating system, is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Palo Alto Networks Prisma Access Agent Unauthorized Access
The vulnerability of the DLP agent for remote access to corporate resources and applications by Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
aiohttp TCPConnector DoS
The vulnerability of the TCPConnector HTTP-client library from aiohttp is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Grafana Resample Heap Buffer Overflow DoS
The vulnerability of the mathexp.Resample function on the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Linux kernel GPIO driver Heap Buffer Overflow DoS
The vulnerability of the gpiochipadddatawithkey function in the drivers/gpio/gpiolib.c module of the Linux kernel GPIO driver is related to a race condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux primehandle_to_fd Buffer Overflow DoS
The vulnerability of the primehandletofd function in the ivpu component of the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
aiohttp HTTP Client Resource Consumption DoS
The vulnerability of the aiohttp HTTP client is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the src/filters/dmxnhml.c component of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code...
Python tarfile Data Compromise
The vulnerability of the tarfile module in the Python programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
JoomShaper SP Page Builder Code Execution
The vulnerability of the SP Page Builder component of the JoomShape application software involves unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Open WebUI Unrestricted File Loading
The vulnerability of the Open WebUI web interface is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and load any desired files...
Linux net/sched act_api tcf_idrinfodestroy Heap Buffer Overflow
The vulnerability of the tcfidrinfodestroy function in the net/sched/actapi.c module of the net/sched subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...
NFS Network File System DoS
The vulnerability of the nfsdopenlocalfh function in the fs/nfsd/localio.c module, which is part of the NFS network file system support in Linux kernel, is related to the use of an invalid file descriptor. Exploiting this vulnerability could allow an attacker to cause service failures...
OSPF Traffic Analyzer DoS
The vulnerability of OSPF traffic analyzer and TLV segment routing analysis tools used in Unix-based systems for network routing implementation is related to integer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Libjxl Buffer Overflow DoS
The vulnerability of the Libjxl library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Python HTTP Client Header Injection
The vulnerability of the Python programming language’s HTTP client module is related to the failure to take measures to neutralize crlf sequences. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...
Grafana Built-in Data Source DoS
The vulnerability of the grafana-testdata-datasource data source used in Grafana monitoring and observability solutions relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Vite Local Server Path Traversal
The vulnerability of the Vite application development local server is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Wireshark Parser Protected Information Disclosure
The vulnerability of the Wireshark parser for analyzing BLF files related to traffic analysis in computer networks is linked to errors during initialization. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...
Realtek Wireless Driver Heap Buffer Overflow DoS
The vulnerability of the dpkpasread function in the drivers/net/wireless/realtek/rtw89/rtw8852arfk.c driver for the Realtek wireless adapter in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an...
Grafana Tempo DoS
The vulnerability of the software for storing and analyzing distributed tracebacks of Grafana Tempo is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Go OpenTelemetry Code Execution
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Linux SCSI Device Driver Heap Buffer Overflow DoS
The vulnerability of the pm8001mpitaskabortresp function in the drivers/scsi/pm8001/pm8001hwi.c module of the Linux SCSI device driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the fcdoonepass function in the fs/jbd2/recovery.c file of the Linux kernel operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux USB TypeC Driver Heap Buffer Overflow DoS
The vulnerability of the wusb3801probe function in the drivers/usb/typec/wusb3801.c file of the Linux USB TypeC driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
PAN-OS Command Line Arbitrary Command Execution
The vulnerability of the command-line interface of the PAN-OS operating system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PAN-OS Bypass
The vulnerability of the PAN-OS operating system’s web management interface is related to insufficient checking of requests on the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
PAN-OS Web Interface Data Compromise
The vulnerability of the PAN-OS operating system’s web management interface is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...
PAN-OS Disclosure Protected Information
The vulnerability of the PAN-OS operating system’s web management interface is related to the disclosure of information through caching. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
PAN-OS IPv6 Packet Processing Bypass
The vulnerability of the IPv6 packet processing module in the PAN-OS operating system and the Prisma Access cloud security remote access system is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms...
Palo Alto Networks Cortex XDR Broker VM Privilege Escalation
The vulnerability of the virtual machine on Palo Alto Networks Cortex XDR Broker VM in cloud security platforms relates to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...
PAN-OS Network Traffic Processing DoS
The vulnerability of the network traffic processing module in the PAN-OS operating system, as well as the remote access agent for users to access corporate resources and applications, involves improper handling of unusual or exceptional states. Exploiting this vulnerability can allow a malicious...
Netty HTTP Request Smuggling
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...
Gitea CheckRepoScopedToken Privilege Escalation
The vulnerability of the CheckRepoScopedToken function in the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Open WebUI Auth Bypass Privilege Escalation
The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
Linux kernel BPF Interpreter Heap Buffer Overflow DoS
The vulnerabilities of the functions bpfjitbinaryhdr and bpfjitfree in the kernel/bpf/core.c module of the Linux operating system’s bpf interpreter are related to reading memory beyond the allocated buffer. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality...
Linux kernel Fuse Buffer Overflow DoS
The vulnerability of the fuseuringreqend function in the fs/fuse/devuring.c file of the Linux kernel operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Large Scale VPN PAN-OS Disclosure
The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...