92434 matches found
The vulnerabilities of the functions btrfs_split_delalloc_extent() and btrfs_merge_delalloc_extent() in the fs/btrfs/inode.c module of the file system in Linux kernel allow a attacker to cause a service failure.
The vulnerability of the functions btrfssplitdelallocextent and btrfsmergedelallocextent in the fs/btrfs/inode.c module of the file system in Linux operating systems is related to the execution of operations outside of the buffer memory. Exploitation of this vulnerability could allow an attacker ...
The vulnerability of the netlinkpolicydump_add_policy() function in the net/netlink/policy.c module exposes the ability for a hacker to cause a service failure. This vulnerability relates to the NETLINK interface support for session monitoring in Linux kernel.
The vulnerability of the netlinkpolicydumpaddpolicy function in the net/netlink/policy.c module related to the NETLINK session monitoring interface support in Linux kernel memory management is associated with improper memory release memory leak. Exploiting this vulnerability may allow an attacker...
The vulnerability of the nfsd4_copy() function in the fs/nfsd/nfs4proc.c module, which is part of the NFS network file system support in Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the nfsd4copy function in the fs/nfsd/nfs4proc.c module, which is part of the NFS network file system support in Linux kernels, stems from an improper handling of reference counts when resources are utilized. Exploiting this vulnerability could allow a attacker to cause servi...
The vulnerability of the otx2_set_ringparam() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_ethtool.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the otx2setringparam function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ethtool.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker ...
The vulnerabilities of the functions cifs_close_deferred_file() and cifs_close_all_deferred_files() in the fs/cifs/misc.c file of the Linux kernel’s file system allow a attacker to cause a service failure.
The vulnerabilities of the functions cifsclosedeferredfile and cifsclosealldeferredfiles in the fs/cifs/misc.c module of the Linux file system are related to improper memory release memory leaks. Exploiting these vulnerabilities can allow an attacker to cause a service failure...
The vulnerability of the a6xx_preempt_init() function in the drivers/gpu/drm/msm/adreno/a6xx_preempt.c driver code of the Direct Rendering Infrastructure (DRI) kernel module of the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the a6xxpreemptinit function in the drivers/gpu/drm/msm/adreno/a6xxpreempt.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause service...
The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and using Nextcloud data storage, relates to the use of insufficiently random values. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the...
The vulnerability of the functions trace_spmi_write_begin() and trace_spmi_read_end() in the kernel’s include/trace/events/spmi.h module allows a hacker to trigger a service failure.
The vulnerability of the tracespmiwritebegin and tracespmireadend functions in the include/trace/events/spmi.h module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the `intel_context_migrate_copy()` function of the `drivers/gpu/drm/i915/gt/intel_migrate.c` driver file of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the intelcontextmigratecopy function in the drivers/gpu/drm/i915/gt/intelmigrate.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise t...
The vulnerability of the Golang programming language, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the Go programming language is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the Golang programming language, related to insufficient resource control during its existence, allows attackers to trigger service failures.
The vulnerability of the Go programming language is related to the insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the BeyondTrust Remote Support remote support tool and the BeyondTrust Privileged Remote Access remote access tool lies in the lack of measures taken to neutralize special elements used in the operating system command line. This allows attackers to execute arbitrary code.
The vulnerability of the BeyondTrust Remote Support remote support tool and the BeyondTrust Privileged Remote Access remote access tool is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a...
The vulnerability of the Golang programming language, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the Go programming language is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the gsc_set_affinity_irq() function in the drivers/parisc/gsc.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the gscsetaffinityirq function in the drivers/parisc/gsc.c module of the Linux kernel is related to the improper disabling or release of resources. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...
The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device-based systems (RAID and LVM) allows a hacker to cause a service failure.
The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel’s device driver for multiple devices RAID and LVM is related to display errors when reporting resource status due to inconsistent checks. Exploiting this vulnerability can allow an attacker t...
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows for the disclosure of protected information
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by...
The vulnerability of the __nfs42_ssc_open() function in the fs/nfs/nfs4file.c module, which is part of the NFS client support in Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the nfs42sscopen function in the fs/nfs/nfs4file.c module, which is part of the NFS client support in Linux kernel, involves a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the lack of access control measures, allowing attackers to gain unauthorized access to user accounts.
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to deficiencies in restricting access to personal information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to user accounts...
The vulnerability of the CLAHEImage() function in the console-based image editing tool ImageMagick allows a hacker to induce a service failure.
The vulnerability of the CLAHEImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the ohci_hcd_ppc_of_probe() function in the driver module drivers/usb/host/ohci-ppc-of.c of the Linux operating system’s USB device driver allows a hacker to cause a service failure.
The vulnerability of the ohcihcdppcofprobe function in the drivers/usb/host/ohci-ppc-of.c file of the Linux device driver for USB chipsets is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to insufficient resource control during its existence, allows attackers to trigger service failures.
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the bio_poll() function in the block/blk-core.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the biopoll function in the block/blk-core.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer dereferencing due to poor synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions mptcp_sendmsg_frag() and mptcp_subflow_get_send() in the module net/mptcp/protocol.c, which are part of the MPTCP protocol implementation in Linux kernel, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions mptcpsendmsgfrag and mptcpsubflowgetsend in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP implementation are related to insufficient resource locking. Exploiting these vulnerabilities could allow an attacker to compromise the...
The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using a Nextcloud data storage system, stems from the lack of protective measures taken for the web page structure. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using Nextcloud data storage, is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
The vulnerability of the Golang programming language, related to errors in the certificate validation process, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Golang programming language is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the __mptcp_retrans() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mptcpretrans function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and...
The vulnerability of the hclge_set_vlan_filter() function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hclgesetvlanfilter function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacke...
The vulnerabilities of the functions mdsc_show(), ceph_unlink(), ceph_open(), and ceph_mdsc_release_request() in the Linux kernel’s distributed file system support for Ceph drivers allow attackers to compromise the integrity of protected information or cause service failures.
The vulnerabilities of the functions mdscshow, cephunlink, cephopen, and cephmdscreleaserequest in the Linux kernel’s distributed file system support for Ceph are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise the...
The vulnerability of the f2fs_build_stats() function in the fs/f2fs/debug.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the f2fsbuildstats function in the fs/f2fs/debug.c module of the F2FS file system in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the soc_info() function in the drivers/tty/serial/ucc_uart.c file of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.
The vulnerability of the socinfo function in the drivers/tty/serial/uccuart.c file of the TTY console driver in the Linux kernel’s serial port module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in security configuration errors, which allow attackers to compromise the accessibility of protected information.
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...
The vulnerability of the ice_reset VF() function in the drivers/net/ethernet/intel/ice/iceVFLib.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the hfs_bnode_read_key function in Linux kernel-based file system drivers hfs/hfsplus allows a attacker to cause a service failure.
The vulnerability of the hfsbnodereadkey function in Linux file system drivers related to the kernel’s insufficient resource management during its existence. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows for the disclosure of protected information
The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerability in the Graphics component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows for interference with the confidentiality of protected information.
The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of protected...
The vulnerability of the software for interacting with servers via cURL, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality of protected information.
The vulnerability of the software for interacting with servers via cURL is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...
The vulnerability of the lpfc_issue_cmf_sync_wqe() function in the drivers/scsi/lpfc/lpfc_sli.c module of the Linux operating system’s SCSI device driver, which allows a hacker to cause a service failure.
The vulnerability of the lpfcissuecmfsyncwqe function in the drivers/scsi/lpfc/lpfcsli.c module of the Linux SCSI device driver involves a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the scs_check_usage() function in the kernel/scs.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the scscheckusage function in the kernel/scs.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the __xfrm_policy_check() function in the net/xfrm/xfrm_policy.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.
The vulnerability of the xfrmpolicycheck function in the net/xfrm/xfrmpolicy.c module, which is part of the Linux kernel’s networking functions, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the Application.__handle_recv() function in the proxy server for the Kerberos Python-kdcproxy protocol allows a attacker to cause a service failure.
The vulnerability of the Application.handlerecv function in the proxy server for the Kerberos protocol in Python-kdcproxy is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the dw_axi_dma_chan_slave_config() function in the drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c module of the Linux kernel’s DMA driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dwaxidmachanslaveconfig function in the drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c module of the Linux kernel’s DMA driver is related to code errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the RoundCube Webmail email client, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the RoundCube Webmail email client is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the `nvme_fc_create_association()` function in the drivers/nvme/host/fc.c module of the Linux operating system’s NVME kernel driver allows a attacker to cause a service failure.
The vulnerability of the nvmefccreateassociation function in the drivers/nvme/host/fc.c file of the Linux kernel’s NVME driver is related to the lack of synchronization. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the ieee80211_tx_dequeue function in the mac80211 component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ieee80211txdequeue function in the mac80211 component of the Linux operating system’s kernel is related to insufficient resource management during its existence. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the NextCloud Calendar application, a cloud-based software for creating and using NextCloud data storage, stems from improper handling of unexpected data types. This vulnerability allows attackers to compromise the integrity of the protected information.
The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to improper handling of unexpected data types. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected informatio...
Vulnerability of the DOM component: The security features of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to circumvent existing security restrictions.
The vulnerability of the DOM component: The security of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of measures taken to protect the structure of the web page, allows attackers to trigger a service failure.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerabilities of the functions bnxt_trim_dflt_sh_rings(), bnxt_set_dflt_rings(), and bnxt_init_dflt_ring_mode() in the module drivers/net/ethernet/broadcom/bnxt/bnxt.c of the Broadcom Ethernet network adapter driver for the Linux operating system, which allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions bnxttrimdfltshrings, bnxtsetdfltrings, and bnxtinitdfltringmode in the driver/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver for the Linux operating system are related to accessing memory beyond the allowable data buffer...
The vulnerability of the f2fs_decompress_cluster() function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.
The vulnerability of the f2fsdecompresscluster function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to insufficient resource locking. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of...