92434 matches found
The vulnerability of the hci_conn_unlink() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the hciconnunlink function in the net/bluetooth/hciconn.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the `dc_wake_and_execute_dmub_cmd_list()` function in the `drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c` driver, a part of the DRI support driver for AMD graphics cards in Linux operating systems. This vulnerability allows an attacker to trigger a service failure.
The vulnerability of the dcwakeandexecutedmubcmdlist function in the drivers/gpu/drm/amd/display/dc/dcdmubsrv.c driver, which is part of the DRI support driver for AMD graphics cards in Linux operating systems, leads to synchronization errors when using shared resources. Exploiting this...
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to insufficient input data validation, allows attackers to trigger service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the `fb_deferred_io_init()` function in the drivers/video/fbdev/core/fb_defio.c file of the Linux kernel’s graphics buffer device support driver allows a attacker to cause a service failure.
The vulnerability of the fbdeferredioinit function in the drivers/video/fbdev/core/fbdefio.c file of the Linux kernel’s graphics device support driver module is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the functions thc_i2c_subip regsave() and thc_i2c_subip regs_restore() in the driver/hid/intel-thc-hid/intel-thc/intel-thc-dev.c module of the Linux kernel’s user interface subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions thci2csubip regsave and thci2csubip regs Restore in the driver/hid/intel-thc-hid/intel-thc/intel-thc-dev.c module of the Linux kernel’s user interface device subsystem is related to accessing memory beyond the permissible buffer data size due to arithmetic addre...
The vulnerability of the Mozilla Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of Mozilla Firefox’s CSS analysis and calculation components relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the do_rbd_add() function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the reutilization of previously freed memory, as a result of the release of the rbddev structure’s fields spec and opts. Exploiting this vulnerability could allow ...
The vulnerability of Netmaker’s virtual network platform, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality of protected information.
The vulnerability of Netmaker’s virtual network platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality of the protected information...
The vulnerability of Netmaker’s virtual network platform, related to improper cleaning or release of resources, allows a hacker to cause a service failure.
The vulnerability of Netmaker’s virtual network platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability in the driver *drivers/acpi/acpica/psopcode.c* of the ACPI driver (an extended configuration and power management interface for the Linux kernel) allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the drivers/acpi/acpica/psopcode.c driver of the ACPI framework an extended configuration and power management interface for Linux kernels involves accessing memory beyond the permissible buffer data boundaries due to a violation of the specifications for data transmitted to...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to copying buffers without checking input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the `create_io_worker()` function in the `io_uring/io-wq.c` module of the Linux kernel’s asynchronous input/output interface allows a attacker to cause a service failure.
The vulnerability of the createioworker function in the iouring/io-wq.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the __nilfs_mark inode_dirty() function in the fs/nilfs2/inode.c file of the NILFS2 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nilfsmark inodedirty function in the fs/nilfs2/inode.c file of the NILFS2 file system in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
The vulnerabilities of the functions run_lwt_bpf() and bpf_lwt_xmit_reroute() in the net/core/lwt_bpf.c module, which are part of Linux’s kernel-based networking functions support, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions runlwtbpf and bpflwtxmitreroute in the net/core/lwtbpf.c module relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...
The vulnerability in the mtk_drmBind() function of the drivers/gpu/drm/mediatek/mtk_drm_drv.c driver, a component of the Direct Rendering Infrastructure (DRI) graphics card driver for Mediatek’s Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mtkdrmbind function in the drivers/gpu/drm/mediatek/mtkdrmdrv.c driver for the Direct Rendering Infrastructure DRI of Mediatek graphics cards in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an...
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to resource release errors, allows attackers to trigger a service failure.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the damon_get_intervals_score() function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a system failure.
The vulnerability of the damongetintervalsscore function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem is related to insufficient checking of input data when dividing by zero. Exploiting this vulnerability could allow a remote attacker to cause a system failure...
The vulnerability of the microprogrammed software of Zyxel ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.
The vulnerability of the microprogrammed software in Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN devices is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the CISA Thorium analytical platform lies in the incorrect restriction on the name of the path to the catalog, which allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the CISA Thorium analytical platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the CISA Thorium analytical platform lies in its failure to properly neutralize special elements in LDAP requests, allowing attackers to gain access and modify authentication data.
The vulnerability of the CISA Thorium analytical platform lies in the lack of measures to neutralize special elements in the LDAP request. Exploiting this vulnerability can allow a remote attacker to gain access and modify authentication data...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to trigger a service failure.
The vulnerability of the Google Chrome browser’s Media component relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
The vulnerability of the WebCodecs component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.
The vulnerability of the WebCodecs component in Google Chrome and Microsoft Edge is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of Fortinet FortiWeb web applications lies in the lack of measures taken to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.
The vulnerability of Fortinet FortiWeb web applications relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created HTTP request...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of input data. This allows attackers to trigger service failures.
The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service failures...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of requests on the server side. This allows attackers to read arbitrary files.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to read arbitrary files...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the redirection of URLs to unreliable websites. This allows attackers to redirect users to arbitrary URL addresses.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect pathname restrictions in the catalog system. This allows attackers to bypass security restrictions.
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions. Exploiting this vulnerability can allow attackers to bypass security restrictions remotely...
The vulnerability of the `convertToValidJSONString` function in the software platform for creating user interfaces based on language models (LLM) called Flowise allows a perpetrator to execute arbitrary code.
The vulnerability of the convertToValidJSONString function in the software platform for creating user interfaces based on language models LLM called Flowise is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the iommu_table_clear() function in the arch/powerpc/kernel/iommu.c module of the PowerPC platform allows a hacker to cause a service failure.
The vulnerability of the iommutableclear function in the arch/powerpc/kernel/iommu.c module of the Linux operating system’s PowerPC platform is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fbtft_framebuffer_alloc() function in the drivers/staging/fbtft/fbtft-core.c module, which supports additional hardware devices in Linux, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the fbtftframebufferalloc function in the drivers/staging/fbtft/fbtft-core.c module, which supports additional hardware devices in Linux, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
The vulnerability of the diUnmount() function in the fs/jfs/jfs_imap.c module of the Linux file system’s JFS kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the diUnmount function in the fs/jfs/jfsimap.c module of the Linux file system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the phy_config_inband() function in the drivers/net/phy/phy.c file of the Linux physical layer network driver kernel module allows a hacker to cause a service failure.
The vulnerability of the phyconfiginband function in the drivers/net/phy/phy.c file of the Linux physical layer network driver is related to mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the do_getHW_stats() function in the drivers/infiniband/hw/mlx5/counters.c module of the Linux operating system’s InfiniBand driver allows a hacker to cause a service failure.
The vulnerability of the dogetHWstats function in the drivers/infiniband/hw/mlx5/counters.c module of the Linux operating system’s InfiniBand driver is related to memory writing beyond the allowed buffer data size limits. Exploiting this vulnerability could allow a attacker to cause a service...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass existing security...
The vulnerability of PDF viewing and editing programs such as Acrobat DC and Acrobat Reader DC, particularly in versions like Acrobat 2024, stems from errors in verifying cryptographic signatures. This allows attackers to exploit these vulnerabilities to gain increased privileges.
The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, and Acrobat 2024 are related to errors in verifying the cryptographic signature. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
The vulnerability of the developer tool “1C:Library of Regulated Reporting” relates to deficiencies in code generation process management. This allows attackers to manipulate URL parameters in order to gain access to local files and directories on the server.
The vulnerability of the developer tool “1C:Library of Regulated Reporting” relates to deficiencies in code generation process management. Exploiting this vulnerability allows a malicious actor to remotely manipulate URL parameters in order to gain access to local files and directories on the...
The vulnerability of the xsk_generic_rcv() function in the net/xdp/xsk.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xskgenericrcv function in the net/xdp/xsk.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the snd_pcm_oss_sync() function in the sound/core/oss/pcm_oss.c module of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the sndpcmosssync function in the sound/core/oss/pcmoss.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions list_version_get_needed() and __list_versions() in the drivers/md/dm-ioctl.c file of the Linux operating system’s RAID and LVM device driver module allow a hacker to cause a service failure.
The vulnerability of the listversiongetneeded and listversions functions in the drivers/md/dm-ioctl.c driver for multiple device drivers RAID and LVM in the Linux kernel is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a...
The vulnerability of the j1939_netdev_notify() function in the net/can/j1939/main.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the j1939netdevnotify function in the net/can/j1939/main.c module of the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __kasan_populate_vmalloc() function in the mm/kasan/shadow.c module, a address sanitizer for KASAN in Linux kernel, allows a malicious actor to trigger a service failure.
The vulnerability of the kasanpopulatevmalloc function in the mm/kasan/shadow.c module of the address sanitizer for Linux kernel involves mutual locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions prepare_threshold_block(), amd_threshold_interrupt(), and mce_threshold_create_device() in the arch/x86/kernel/cpu/mce/amd.c module, which are part of the Linux operating system’s x86 kernel support, allow attackers to cause system failures.
The vulnerabilities of the functions preparethresholdblock, amdthresholdinterrupt, and mcethresholdcreatedevice in the arch/x86/kernel/cpu/mce/amd.c module of the Linux operating system’s x86 kernel support are related to integer overflow or cyclic shift vulnerabilities. Exploitation of these...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to a countable amount of value loss. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML page...
The vulnerability of Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a perpetrator to gain unauthorized access to confidential information.
The vulnerability of Intel Trust Domain Extensions TDX microprogramming software for Intel processors lies in the ability to read data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...
The vulnerability of the software interface of FortiWeb web applications allows attackers to circumvent existing security restrictions.
The vulnerability of the FortiWeb web application’s software interface relates to the bypassing of authentication mechanisms through spoofing techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions using specially crafted HTTP requests...
The vulnerability of the microprogramming software for Fortinet FortiSwitchAXFixed, related to deficiencies in access control, allows a intruder to execute arbitrary system commands.
The vulnerability of Fortinet FortiSwitchAXFixed microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary system commands using a specially created SSH configuration file...
The vulnerability of the FortiSIEM security management system arises from the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the FortiSIEM security management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...