96144 matches found
The vulnerability of the `load_from_url_async` function in the library for working with large language models (LLMs) like vLLM allows attackers to perform SSRF attacks.
The vulnerability of the loadfromurlasync function in the library for working with large language models LLMs like vLLM is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...
The vulnerability of the Wazuh security monitoring and threat detection platform lies in its insufficient limit on authentication attempts, which allows attackers to compromise privacy and integrity.
The vulnerability of the Wazuh security monitoring and threat detection platform lies in the insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of the Win32K component – GRFX in Windows operating systems – allows attackers to enhance their privileges.
The vulnerability of the Win32K component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the fromSetWirelessRepeat() function in the Tenda AC10U router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetWirelessRepeat function in the Tenda AC10U router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of requests at the server side. This allows attackers to bypass existing security mechanisms.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B stems from insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms. This allows attackers to bypass existing security measures.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...
The vulnerability of the H.266 codec parser library in the GStreamer multimedia framework allows a hacker to execute arbitrary code.
The vulnerability of the H.266 codec parser library in the GStreamer multimedia framework is related to insufficient checking of user data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the IMG_xpm.c component of the image loading library, part of the SDL_image library, allows a hacker to cause a system failure.
The vulnerability of the IMGxpm.c component in the image loading library, part of the SDLimage library, is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created XPM image...
The vulnerability of the emulator library for the VTE terminal, which allows a hacker to trigger a service failure
The vulnerability of the terminal emulation library VTE is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause a service failure...
The vulnerability of the h.265 Libde265 codec implementation allows a hacker to cause a service failure.
The vulnerability of the h.265 Libde265 implementation lies in the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the Firefox web browser, specifically the Firefox ESR web browser, allows a perpetrator to gain access to confidential data.
The vulnerability in the Firefox web browser, as well as in the Firefox ESR browser, is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
Vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, allow attackers to trigger a service failure.
The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to cause service interruptions...
The vulnerability of the library that accesses HTTP servers via LibSoup allows a perpetrator to gain access to confidential data or cause service failures.
The vulnerability of the LibSoup library for HTTP servers is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to gain access to confidential data or cause service failures...
The vulnerability of the sch_teql component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the schteql component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the tplgdecode_control_mixer1 function in the library for interacting with kernel audio drivers from Alsa-lib, which allows a hacker to cause a service failure.
The vulnerability of the tplgDecodeControlmixer1 function in the library for interacting with kernel audio drivers is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially created file...
The vulnerability of the console-based graphic editor ImageMagick, related to deficiencies in pathname restrictions for directories, allows attackers to gain access to confidential data.
The vulnerability of the console-based graphic editor ImageMagick is related to deficiencies in pathname restrictions for the directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Libraries component of the Oracle Java SE software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the Libraries component of the Oracle Java software platform relates to reading data beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Mattermost instant messaging application, related to access control errors, allows a malicious user to gain unauthorized access to protected information.
The vulnerability of the Mattermost instant messaging application is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the formWifiApScan() function in the microprogramming software for Tenda AC6 allows a hacker to execute arbitrary code.
The vulnerability of the formWifiApScan function in the Tenda AC6 router’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Dynamics 365 resource planning software, related to errors in privilege management, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Remote Desktop Services (RDS) service on Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Remote Desktop Services RDS service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their dependence on vulnerable third-party components, which allows attackers to cause service failures.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to their dependence on vulnerable third-party components. Exploiting these vulnerabilities can allow attackers to cause service...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of input data. This allows attackers to execute arbitrary code.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the Ceph storage system allows a attacker to gain access to confidential data or cause service failures.
The vulnerability of the Ceph storage system is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to confidential data or cause service failures...
Vulnerabilities in Firefox ESR and Firefox web browsers, as well as the Thunderbird email client, allow attackers to gain access to confidential data and cause service interruptions.
The vulnerabilities in the Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to gain access to confidential data, as well as cause service interruptions...
Vulnerabilities in the web browsers Firefox ESR and Firefox, as well as the email client Thunderbird, allow attackers to gain access to confidential data.
The vulnerabilities in the web browsers Firefox ESR and Firefox, as well as the email client Thunderbird, are related to authentication process flaws. Exploiting these vulnerabilities can allow an attacker to gain access to confidential data remotely...
The vulnerability of the authenticate component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
#Exploitation of the Navigation function in Google Chrome browsers, allowing attackers to induce a service failure
The vulnerability of the Navigation function in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a hacker to bypass existing security mechanisms.
The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.
The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrar...
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.
The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrar...
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root privileges...
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to perform cross-site scripting attacks.
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a intruder to gain unauthorized access to protected information.
The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected...
The vulnerability of the Cisco IoT Field Network Director software interface allows a hacker to gain access to confidential information or cause service failures.
The vulnerability of the Cisco IoT Field Network Director software interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...
The vulnerability of the H2O machine learning platform, related to deficiencies in the deserialization mechanism, allows attackers to bypass security restrictions, disclose sensitive information, and execute arbitrary code.
The vulnerability of the H2O machine learning platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions, disclose sensitive information, and execute arbitrary code...
The vulnerability of the Mattermost instant messaging application, related to access control errors, allows a malicious user to reduce the privileges of arbitrary users.
The vulnerability of the Mattermost instant messaging application is related to access control errors. Exploiting this vulnerability could allow a malicious actor to reduce the privileges of arbitrary users...
The vulnerability of the Mattermost instant messaging application, related to unlimited resource distribution, allows a hacker to cause a service failure.
The vulnerability of the Mattermost instant messaging application is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the microprogrammed network interface cards of SONICWALL series SMA 1000 allows a intruder to elevate their privileges to the level of an administrator.
The vulnerability of the microprogrammed network interface cards of SONICWALL series SMA 1000 is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to elevate their privileges to the level of administrator...
The vulnerability of the Next.js software platform for creating web applications lies in the lack of source verification, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the Next.js web application development software platform lies in the lack of source verification. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Next.js software platform for creating web applications, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.
The vulnerability of the Next.js web application development software platform is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to induce a service failure.
The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems relates to bypassing authentication by avoiding memory release after the effective lifetime of the protocol. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the print spooler daemon on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows Print Spooler in operating systems related to the print queue is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Win32K component – GRFX in Windows operating systems – allows a hacker to execute arbitrary code.
The vulnerability of the Win32K component in Windows operating systems is related to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.
The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause servi...
The vulnerability of the EGifGCBToExtension function in the GIFLIB library allows a hacker to induce a service failure.
The vulnerability of the EGifGCBToExtension function in the GIFLIB library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...