The vulnerability of the graphical user interface of FortiWeb web applications allows a attacker to trigger a service failure.

The vulnerability of the graphical user interface of FortiWeb web applications is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions through specially crafted HTTP requests...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code or disclose confidential information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the formQuickIndex() function in the httpd daemon of the Tenda F456 microprogramming router allows a hacker to execute arbitrary code and cause a service failure.

The vulnerability of the formQuickIndex function in the httpd daemon of the Tenda F456 microprogramming router lies in the issue of the operation going beyond the buffer in memory when processing the mitlinktype parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

The vulnerability of the octep_device_setup() function in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the octepdevicesetup function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Intec-Core module of the INTEC Universe software suite, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Intec-Core module of the INTEC Universe software suite is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the udf_name_from_CS0() function in the fs/udf/unicode.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the udfnamefromCS0 function in the fs/udf/unicode.c module of the Linux kernel file system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the `persistent_ram_post_init()` function in the `fs/pstore/ram_core.c` module, which supports the persistent storage of the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the persistentrampostinit function in the fs/pstore/ramcore.c module, which supports the persistent storage of the Linux kernel, is related to incorrect initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the DCB_ATTR_BCN() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.

The vulnerability of the DCBATTRBCN function in Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the cdev_device_add() function in the fs/char_dev.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdevdeviceadd function in the fs/chardev.c file of the Linux kernel file system is related to improper initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the rtw_usb_probe() function in the driver file drivers/net/wireless/realtek/rtw88/usb.c of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtwusbprobe function in the driver/net/wireless/realtek/rtw88/usb.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failur...

The vulnerabilities of the macro-definitions PCIE_LNKCAP_SLS2SPEED and PCIE_LNKCTL2_TLS2SPEED in the drivers/pci/pci.h module of the Linux kernel allow a hacker to cause a service failure.

The vulnerabilities of the macro-definitions PCIELNKCAPSLS2SPEED and PCIELNKCTL2TLS2SPEED in the drivers/pci/pci.h module of the Linux kernel are related to improper initialization of resources. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of the nvmet_auth_set_key() function in Linux operating system kernels allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the nvmetauthsetkey function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of the functions pci_init_afu() and cxl_pci_init_adapter() in the drivers/misc/cxl/pci.c module of the Linux kernel allow a hacker to cause a service failure.

The vulnerability of the functions pciinitafu and cxlpciinitadapter in the drivers/misc/cxl/pci.c module of the Linux kernel is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sock_map_free() function in the net/core/sock_map.c module exposes support for network functions in the Linux kernel, allowing an attacker to cause a service failure.

The vulnerability of the sockmapfree function in the net/core/sockmap.c module related to Linux kernel’s network function support is due to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

The vulnerabilities of the functions vhost_vsock_alloc_pkt() (drivers/vhost/vsock.c) and virtio_transport_free_pkt() (net/vmw_vsock/virtio_transport_common.c) in the Linux operating system’s IoTLB generic implementation for vhost and vringh kernels allow a hacker to induce a service failure.

The vulnerabilities of the functions vhostvsockallocpkt drivers/vhost/vsock.c and virtiotransportfreepkt net/vmwvsock/virtiotransportcommon.c in the Linux operating system’s IoTLB implementation are related to errors in resource allocation of large sizes. Exploiting these vulnerabilities can allo...

The vulnerability of the hswep_has_limit_sbox() function in the arch/x86/events/intel/uncore_snbep.c module, which is part of the Linux kernel support for x86 processors, allows a hacker to trigger a service failure.

The vulnerability of the hswephaslimitsbox function in the arch/x86/events/intel/uncoresnbep.c module of the Linux kernel’s x86 platform is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tifm_7xx1_switch_media() function in the drivers/misc/tifm_7xx1.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tifm7xx1switchmedia function in the drivers/misc/tifm7xx1.c module of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `wpcm450_aic_of_init()` function in the `drivers/irqchip/irq-wpcm450-aic.c` driver for Linux kernel IRQ chips allows a attacker to cause a service failure.

The vulnerability of the wpcm450aicofinit function in the drivers/irqchip/irq-wpcm450-aic.c driver for Linux’s IRQ chips is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the xfrm_update_ae_params() function in the net/xfrm/xfrm_user.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmupdateaeparams function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ext4_da_write_end() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4dawriteend function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the __acquires() function in the kernel/workqueue.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the kernel/workqueue.c module of the Linux operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nfs_d_automount() function in the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the nfsdautomount function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the i915_gem_object_is_framebuffer() function in Linux kernel allows a attacker to compromise the accessibility of protected information.

The vulnerability of the i915gemobjectisframebuffer function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the sc_disable() function in Linux operating system kernels, which allows a malicious actor to cause kernel crashes.

The vulnerability of the scdisable function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause kernel crashes...

The vulnerability of the remove() function in Linux operating system kernels, which allows a attacker to compromise the accessibility of protected information

The vulnerability of the remove function in Linux operating system kernels is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of Google Chrome’s Skia graphic library allows a hacker to trigger memory corruption.

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption...

The vulnerability of the ctnetlink_exp_id() function in the net/netfilter/nf_conntrack_netlink.c module of the Linux kernel’s netfilter component allows a hacker to induce a service failure.

The vulnerability of the ctnetlinkexpid function in the net/netfilter/nfconntracknetlink.c module of the netfilter component of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.

The vulnerability of the software storage controller for working with ShareFile content is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to remotely alter system configurations and execute arbitrary code...

The vulnerability of the cupsdDeleteTemporaryPrinters() function on the CUPS printing server allows a attacker to cause a service failure.

The vulnerability of the cupsdDeleteTemporaryPrinters function in a CUPS printing server relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Livewire PHP framework’s library, which allows attackers to execute arbitrary commands.

The vulnerability of the Livewire PHP framework’s library is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the automated document development program Doczilla is related to the lack of measures taken to protect the structure of the web page...

The vulnerability of the authorized_keys() function in the OpenSSH cryptographic protection mechanism allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the authorizedkeys function in the OpenSSH cryptographic protection mechanism is related to the improper implementation of stream control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.

The vulnerability of the ShareFile content-sharing software’s storage controller relates to the unlimited download of files of a malicious nature. Exploiting this vulnerability could allow an attacker to remotely alter system configurations and execute arbitrary code...

The vulnerability of the MultiPartParser() function in the Django web application framework allows a hacker to trigger a denial-of-service attack.

The vulnerability of the MultiPartParser function in the Django web application framework is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Containous Traefik reverse proxy server, related to bypassing authentication through spoofing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Containous Traefik reverse proxy server relates to the bypassing of authentication procedures through spoofing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the add-on module for the Control Web Panel (CWP), previously known as CentOS Web Panel, allows a hacker to execute arbitrary commands.

The vulnerability of the add-on module for the Control Web Panel CWP, previously known as CentOS Web Panel, relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a perpetrator to execute arbitrary commands...

The vulnerability of the fs::metadata() function in the tar-reading and writing library for the Rust language allows a attacker to increase their privileges.

The vulnerability of the fs::metadata function in the tar-reading and writing library for the Rust language, tar-rs, is related to the tracking of symbolic references in UNIX systems. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...

The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Keycloak identity and access management software lies in improper behavior patterns, allowing unauthorized users to gain unauthorized access to confidential information.

The vulnerability of the Keycloak identity and access management software is related to an incorrect sequence of actions: authentication occurs before syntactic analysis and canonization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of the iconv() function in the GNU C Library, which allows a hacker to trigger a denial-of-service attack

The vulnerability of the iconv function in the GNU C Library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the jinja2.Environment() function in the serving_rerank.py file of the high-performance LLM service framework SGLang allows a attacker to execute arbitrary code.

The vulnerability of the jinja2.Environment function in the servingrerank.py file of the high-performance LLM service framework SGLang is related to incorrect code generation practices. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the fromSetCfm() function in Tenda F456 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetCfm function in Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing parameters funcname and funcpara1. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...

The vulnerability of the query_regdb_file() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the queryregdbfile function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mISDN_register_device() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mISDNregisterdevice function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the find_compatible_node() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the offindcompatiblenode function in the Linux operating system’s kernel is related to improper manipulation of the reference count of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s Wi-Fi kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s Wi-Fi kernel component is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...