98400 matches found
dsa_switch_parse Heap Buffer Overflow DoS
The vulnerability of the dsaswitchparse function in the net/dsa/dsa.c module relates to the improper release of resources in support for Linux’s distributed kernel architecture. Exploiting this vulnerability could allow an attacker to cause service failures...
ImageMagick SVG DoS
The vulnerability of the SVG file analysis function in the console-based graphic editor ImageMagick is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
libtiff Heap Buffer Overflow DoS
The vulnerability of the tools/tiffcrop.c component in the libtiff library is related to a mistake in releasing memory that has already been released before. Exploiting this vulnerability could allow an attacker to cause a service failure...
Google Chrome Sandbox Bypass
The vulnerability of the Printing component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the sandboxing mechanism through the created HTML page...
Libjxl Uninitialized Resource DoS
The vulnerability of the Libjxl library is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ImageMagick DIB Module Code Execution
The vulnerability of the module for working with the DIB format in the console-based graphic editor ImageMagick is related to reading data beyond the allowed range of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, disclose sensitive information, and cause...
ImageMagick magick/profile.c Code Execution
The vulnerability of the magick/profile.c file, a console-based image editing tool from ImageMagick, is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ImageMagick DecodeImage DoS
The vulnerability of the DecodeImage function in the console-based image editing tool ImageMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ImageMagick DoS
The vulnerability of the msl.c file in the console-based image editing tool ImageMagick is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
ImageMagick UHDR Encoder DoS
The vulnerability of the UHDR encoder in the console-based image editing software ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ImageMagick MagnifyImage Code Execution
The vulnerability of the MagnifyImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
ImageMagick -sample DoS
The vulnerability of the -sample command in the console-based image editing tool ImageMagick is related to reading data beyond the allowable range of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Linux sch_ets Heap Buffer Overflow DoS
The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the network scheduling subsystem of the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
libde265 Heap Buffer Overflow DoS
The vulnerability of the h.265 Libde265 implementation is related to the execution of operations outside the buffer in memory when processing the variable ctbinfo.log2unitSize. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the jbd2fcwaitbufs function in the fs/jbd2/journal.c file of the Linux kernel file system is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
Picomatch Prototype Modification
The vulnerability of the Picomatch library is related to uncontrolled changes to the attributes of the object’s prototype. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
Picomatch Path Traversal DoS
The vulnerability of the library for filtering file paths in Picomatch is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker operating remotely to cause service interruptions...
Exim Mail Server Resource Initialization Data Compromise
The vulnerability of the Exim mail server is related to the lack of initialization of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...
Lodash unset omit Data Compromise
The vulnerability of the unset and omit functions in the Lodash library is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...
Lodash Prototype Modification
The vulnerability of the Lodash library is related to uncontrolled changes to the attributes of the object’s prototype. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity and accessibility of the protected information...
Linux kernel RCU DoS
The vulnerabilities of the functions rcutortureboosterinit and rcutortureinit in the kernel/rcu/rcutorture.c module, a synchronization subsystem in Linux’s multi-threaded kernel, are related to improper initialization. Exploiting these vulnerabilities can allow an attacker to cause service failur...
golang-x-image DoS
The vulnerability of the golang-x-image package, a programming language, is related to incorrect calculations during the processing of WEBP image formats. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Linux kernel networking process_auth_done()
The vulnerability of the processauthdone function in the net/ceph/messengerv2.c module, which is part of the Linux kernel’s networking functions, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or...
Linux kernel CAN Network Device Driver Use-After-Free
The vulnerability of the gsusbxmitcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel InfiniBand driver Heap Buffer Overflow DoS
The vulnerability of the destroymc function in the drivers/infiniband/core/cma.c file of the Linux kernel’s InfiniBand driver is related to errors during link counter updates. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux SCSI Driver Heap Buffer Overflow DoS
The vulnerability of the lpfccreateport function in the drivers/scsi/lpfc/lpfcinit.c file of the Linux SCSI device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS
The vulnerabilities of the functions secallocreqid and secfreereqid in the driver drivers/crypto/hisilicon/sec2/seccrypto.c of the Linux kernel cryptographic accelerator driver are related to synchronization errors during interrupt processing. Exploiting these vulnerabilities could allow an...
ImageMagick JBIG DoS
The vulnerability of the JBIG decoder in the ImageMagick console-based graphics editor is related to the lack of checking for the returned value. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux skbuff Heap Buffer Overflow DoS
The vulnerability in the net/core/skbuff.c module of the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
MP4Box Heap Buffer Overflow DoS
The vulnerability of the gfxmlparsebitsequencebs function in the MP4Box packaging tool of the GPAC multimedia platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failur...
KACO Blueplanet GridSave SQL Injection Privilege Escalation
The vulnerability of the dual-way inverter series for KACO Blueplanet GridSave energy storage systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges within the local network...
Qualcomm Buffer Overflow
The vulnerability of microprogramming software in embedded Qualcomm chips lies in the ability to write any value anywhere and to overflow the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ImageMagick PNG Encoder DoS
The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Libde265 Heap Buffer Overflow DoS
The vulnerability of the picparameterset::setderivedvalues function in the h.265 Libde265 codec implementation is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ImageMagick Stego DoS
The vulnerability of the ReadSTEGANOImage function in the ImageMagick console graphics editor’s coders/stegano.c file is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ImageMagick Parser Code Execution
The vulnerability of the console-based graphic editor ImageMagick relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, gain unauthorized access to confidential information, and cause service failures...
ImageMagick JPEG Encoder DoS
The vulnerability of the JPEG encoder in console-based image editing software ImageMagick relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created image...
ImageMagick Decoder Unauthenticated Access DoS
The vulnerability of the decoder for Photo CD PCD format in the console-based graphic editor ImageMagick involves reading data outside of the permitted range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failur...
ImageMagick ReadYUVImage Code Execution
The vulnerability of the ReadYUVImage function in the ImageMagick console graphics editor’s coders/yuv.c file is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code, disclose sensitive information, or cause service...
Linux multimedia device driver Heap Buffer Overflow DoS
The vulnerability of the dtv5100i2cmsg function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
Linux kernel network device driver module Use-After-Free
The vulnerability of the teamqueueoverrideenabledcheck function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel fore200e function Data Compromise
The vulnerability of the fore200eopen function in the drivers/atm/fore200e.c file of the Linux kernel’s network adapter driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
Linux kernel dm-clone-target Buffer Overflow DoS
The vulnerability of the clonedtr function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Tegra Clock Init Heap Buffer Overflow DoS
The vulnerability of the tegra114clockinit function in the drivers/clk/tegra/clk-tegra114.c file of the Samsung Exynos Linux kernel driver relates to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel imxfb_probe() Buffer Overflow DoS
The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c file of the Linux kernel-based device driver for frame buffer devices is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux kernel CIFS DoS
The vulnerability of the cifssesaddchannel function in the fs/cifs/sess.c file of the Linux kernel file system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
toshsd MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS
The vulnerability of the toshsdprobe function in the drivers/mmc/host/toshsd.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
socket.io parser encoder decoder DoS
The vulnerability of the socket.io parser library’s encoder and decoder functions is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures using a specially created package...
socket.io parser encoder decoder DoS
The vulnerability of the socket.io parser library’s encoder and decoder relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to cause service failures remotely...
Apache Kafka OAuth Bypass Unauthorized Access
The vulnerability of the org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator class in the Apache Kafka messaging broker is related to incorrect validation of specified indexes, positions, or offsets in input data. Exploiting this vulnerability could allow an attacker to bypass securi...