97848 matches found
EPG Function Cisco NX-OS Security Restriction Bypass
The vulnerability of the EPG function in the Cisco NX-OS operating system of Cisco Nexus 9000 Series Fabric Switches in ACI mode is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...
Cisco Meraki Buffer Overflow
The vulnerability of Cisco Meraki network device software relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the bpfmsgpopdata function in the net/core/filter.c component of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux drivers iio magnetometer ak8975 Heap Buffer Overflow DoS
The vulnerability of the drivers/iio/magnetometer/ak8975.c component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Integer Overflow DoS
The vulnerability of Content Credentials SDK library libraries is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Substance 3D Sampler Buffer Overflow RCE
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Exchange Server Memory Reclamation Code Execution
The vulnerability of Microsoft Exchange Server’s mail server is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
Linux same_client_has_lease() Function Use-After-Free
The vulnerability of the sameclienthaslease function in the fs/smb/server/oplock.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibili...
GnuTLS check_for_unknown_exts MITM DoS
The vulnerability of the checkforunknownexts function in the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to perform a MITM attack or cause service denial...
Active Directory Domain Services Code Execution
The vulnerability of the Active Directory Domain Services service on the Windows operating system is related to the lack of measures taken at the management level to protect data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Linux kernel IMA Buffer Overflow DoS
The vulnerability of the mma8452read function in the drivers/iio/accel/mma8452.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...
WebFig RouterOS Code Execution
The vulnerability of the WebFig interface in the RouterOS operating system of MikroTik routers is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
Linux kernel recv_done p9_cm_event_handler Data Compromise
The vulnerability of the recvdone and p9cmeventhandler functions in the net/9p/transrdma.c file of the Linux kernel is related to the implementation of incorrect thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
Cisco Meraki Resource Control
The vulnerability of Cisco Meraki network device software is related to insufficient resource management during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Data Sharing Service Windows Privilege Escalation
The vulnerability of the Data Sharing Service client for the Windows operating system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SQL Server Privilege Escalation
The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Imaging Component Code Execution
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Cisco Application Policy Infrastructure Controller Resource Management Data Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of t...
Cisco NX-OS NGOAM Protocol Code Execution
The vulnerability of the NGOAM protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series devices lies in the fact that operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a malicious act...
Golang X Text Package Heap Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Golang X Text Package Heap Buffer Overflow DoS
The vulnerability of the Golang X Text package for text processing is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Go Cryptography Library DoS
The vulnerability of the Go Cryptography library is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Aiohttp HTTP Client CRLF DoS
The vulnerability of the Aiohttp HTTP client is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Aiohttp HTTP Client DoS
The vulnerability of the Aiohttp HTTP client is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Aiohttp HTTP Client DoS
The vulnerability of the Aiohttp HTTP client is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
driver/net/ethernet/intel/ice/ice_main.c component of the DoS
The vulnerability in the drivers/net/ethernet/intel/ice/icemain.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
HAProxy Length Checking DoS
The vulnerability of the length-checking mechanism for the NEWTOKEN format in HAProxy server software is related to errors in processing parameters related to input data length. Exploiting this vulnerability could allow a malicious actor to cause service failures...
HAProxy drl field Data Compromise
The vulnerability of the drl field in the fcgiconn structure of the HAProxy server software is related to integer overflow. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...
HAProxy hpack_dht_insert Heap Buffer Overflow DoS
The vulnerability of the hpackdhtinsert function in the source file src/hpack-tbl.c of the HAProxy server software is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Windows Imaging Component Code Execution
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Cisco Application Policy Infrastructure Controller Message Data Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to insufficient assurance of the correctness of messages or data structures. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
Cisco Application Policy Infrastructure Controller Access Control Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
Cisco Application Policy Infrastructure Controller Access Control Unauthorized Access
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Cisco NX-OS NGOAM Protocol Code Execution
The vulnerability of the NGOAM protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series devices lies in the fact that operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a malicious act...
Cisco License On-Prem License Server Data Compromise
The vulnerability of the Cisco License On-Prem server licensing system previously known as Cisco Smart Software Manager On-Prem SSM On-Prem is related to improper code generation management. Exploitation of this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
Cisco License On-Prem Local Server Auth Bypass
The vulnerability of the Cisco License On-Prem license server previously known as Cisco Smart Software Manager On-Prem is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...
Cisco License On-Prem Cryptographic Signature Error
The vulnerability of the Cisco License On-Prem license server previously known as Cisco Smart Software Manager On-Prem is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...
Cisco License On-Prem License On-Prem Unauthorized Access
The vulnerability of the Cisco License On-Prem server licensing system previously known as Cisco Smart Software Manager On-Prem SSM On-Prem is related to insufficient protection of user credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
Go Yaml File Processing Heap Buffer Overflow DoS
The vulnerability of the Go Yaml file processing library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Go Cryptography Data Compromise
The vulnerability of the Go Cryptography library is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access and influence the integrity of the protected information...
Aiohttp HTTP Client Source Verification Confidential Data Access
The vulnerability of the Aiohttp HTTP client is related to a lack of mechanisms for verifying the source of the connection. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
Aiohttp HTTP Client DoS
The vulnerability of the Aiohttp HTTP client is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Aiohttp HTTP client Host Certificate DOSS
The vulnerability of the Aiohttp HTTP client is related to the lack of checking host certificate data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Aiohttp HTTP Client DoS
The vulnerability of the Aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Aiohttp Memory Initialization Error DoS
The vulnerability of the Aiohttp HTTP client is related to memory initialization errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Aiohttp HTTP Client Resource Leak DoS
The vulnerability of the Aiohttp HTTP client is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Linux kernel idpf_attach_and_open idpf_detach_and_close DoS
The vulnerability of the functions idpfattachandopen and idpfdetachandclose in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux kernel is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...