92298 matches found
The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Adobe Media Encoder application relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Azure OpenAI cloud platform, related to insufficient validation of requests on the server side, allows attackers to escalate their privileges.
The vulnerability of the Azure OpenAI cloud platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the DirectX Graphics Kernel component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the x86__is_amd_cpu() function in the tools/perf/arch/x86/util/env.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the x86isamdcpu function in the tools/perf/arch/x86/util/env.c module of the Linux operating system’s kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Vulnerability of the crypto_rsa_common() function in the libfreerdp/crypto/crypto.c file of the RDP client FreeRDP, allowing a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the cryptorsacommon function in the libfreerdp/crypto/crypto.c file of the RDP client FreeRDP is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the ath11k_dp_rx_process_mon_status() function in the drivers/net/wireless/ath/ath11k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath11kdprxprocessmonstatus function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the gud_prep_flush() function in the drivers/gpu/drm/gud/gud_pipe.c module of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the gudprepflush function in the drivers/gpu/drm/gud/gudpipe.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the irdma.save_msix.info() function in the drivers/infiniband/hw/irdma/hw.c driver of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the irdma.savemsixinfo function in the drivers/infiniband/hw/irdma/hw.c driver of the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of Adobe Experience Manager’s content and media data management system lies in the insufficient protection of website structures, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
The vulnerability of the xdbc_bulk_write() function in the drivers/usb/early/xhci-dbc.c driver for USB devices in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xdbcbulkwrite function in the drivers/usb/early/xhci-dbc.c driver for USB devices in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the Adobe Experience Manager content and media data management system lies in the improper limitation of XML links to external objects, which allows attackers to perform XXE attacks.
The vulnerability of the Adobe Media Encoder application relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a remote attacker to perform XXE attacks...
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the overflow of buffers in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the overflow of buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer boundaries in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerabilities of the functions qede_tpa_cont() and qede_tpa_end() in the driver/net/ethernet/qlogic/qede/qede_fp.c file of the Ethernet network adapter driver for the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions qedetpacont and qedetpaend in the driver/net/ethernet/qlogic/qede/qedefp.c module of the Ethernet network adapter driver for the Linux operating system involve buffer overflow exploits. Exploiting these vulnerabilities could allow attackers to compromise the...
The vulnerability of the Microsoft .NET software platform and the Visual Studio Code editor, related to errors in handling symbolic links, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Microsoft .NET software platform and the code editor Visual Studio Code is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the NTFS file system driver in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the NTFS file system driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the sk_mc_loop() function in the net/core/sock.c module exposes the support for networking functions in the Linux kernel, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the skmcloop function in the net/core/sock.c module related to Linux kernel network functions is associated with improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the Windows Runtime component in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the Windows Runtime component in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Windows application stores relates to competitive access to resources (race condition), which allows attackers to escalate their privileges.
The vulnerability of Microsoft Windows application stores is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows Media component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows Media component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability in the /web/jquery/uploader/multi Uploadify.php script of the D-Link DNS-320 network storage software allows a attacker to execute arbitrary code and gain full access to the system.
The vulnerability in the /web/jquery/uploader/multiUploadify.php script of the D-Link DNS-320 network storage software relates to the unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and gain full access to the...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Outlook Copilot, an intelligent virtual customer support tool for Outlook, allows a hacker to execute arbitrary commands.
The vulnerability of the intelligent virtual assistant for Microsoft Outlook Copilot is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability in the implementation of the TCP/IP protocol on Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows File Explorer on Windows operating systems, allowing a hacker to disclose protected information
The vulnerability of the Windows File Explorer driver in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability affects the classes HAProxyMessage and HAProxyMessageEncoder of the Netty framework, which is used for developing network applications, servers, and client protocols. This vulnerability allows an attacker to replace the original data with malicious content.
The vulnerability of the HAProxyMessage and HAProxyMessageEncoder classes in the Netty framework for developing network applications, servers, and clients is related to the failure to handle CRLF sequences properly. Exploiting this vulnerability can allow an attacker to replace legitimate data wi...
The vulnerability of Microsoft Excel editors, related to the swapping of an unreliable pointer, allows a malicious actor to disclose sensitive information.
The vulnerability of Microsoft Excel editors is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to disclose protected information
The vulnerability of the Win32k.sys component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the Wireless Network Manager (WNM) for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Wireless Network Manager WNM for Windows operating systems relates to competitive access to resources i.e., a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.
The vulnerability of the Windows Cloud Files Mini Filter Driver in operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Clip Service on Windows operating systems allows a hacker to escalate their privileges.
The vulnerability of the Windows Clip Service on Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Media component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows Media component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the function nvme_ctrl_dhchap_ctrl_secret_store() in the driver/nvme/host/core.c file of the Linux operating system’s NVME kernel driver, which allows a hacker to cause a service failure.
The vulnerability of the nvmectrldhchapctrlsecretstore function in the drivers/nvme/host/core.c file of the Linux NVME driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of Adobe Audition’s audio editor lies in its ability to record beyond the buffer limit in memory, allowing a hacker to execute arbitrary code.
The vulnerability of Adobe Audition is related to recording beyond the buffer limits in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the function da9063_check_xvp_constraints() in the module drivers/regulator/da9063-regulator.c of the Linux kernel’s voltage and current regulator driver software allows a hacker to cause a service failure.
The vulnerability of the da9063checkxvpconstraints function in the drivers/regulator/da9063-regulator.c module of the Linux kernel’s voltage and current regulator driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the f2fsMoveInline_dirents() function in the fs/f2fs/inline.c module of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the f2fsMoveInlinedirents function in the fs/f2fs/inline.c module of the F2FS file system in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mtk_vcodec_probe() function in the driver/media/platform/mediatek/vcodec/mtk_vcodec_dec_drv.c file of the Linux operating system’s multimedia device drivers allows a hacker to cause a service failure.
The vulnerability of the mtkvcodecprobe function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver for multimedia devices in Linux operating systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause service...
The vulnerability of the stmmac_dvr_probe() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_main.c file of the Ethernet network adapter driver module from STMicroelectronics’ operating system Linux allows a hacker to cause a service failure.
The vulnerability of the stmmacdvrprobe function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet network adapter driver from STMicroelectronics’ Linux kernel is related to the absence of references to the actively allocated resources. Exploiting this vulnerability cou...
The vulnerability of the do_read inode() function in the fs/f2fs/inode.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the doread inode function in the fs/f2fs/inode.c module of the F2FS file system in the Linux operating system is related to a logical error in the operator precedence. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `panthor_gem_create_with_handle()` function in the `drivers/gpu/drm/panthor/panthor_gem.c` file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the panthorgemcreatewithhandle function in the drivers/gpu/drm/panthor/panthorgem.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the copying of buffers without checking the size of...
The vulnerability of the init_amd_zen4() function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the initamdzen4 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux kernel support for x86 platforms, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to...
The vulnerability of the current_value_show() function in the drivers/platform/x86/think-lmi.c module of the X86 device driver framework of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the currentvalueshow function in the drivers/platform/x86/think-lmi.c module of the Linux operating system’s X86 device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the sdio_release_func() function in the drivers/mmc/core/sdio_bus.c file of the MMC/SD/SDIO card driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sdioreleasefunc function in the drivers/mmc/core/sdiobus.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the ext4_mb_use_preallocated() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4mbusepreallocated function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the ath12k_dp_rx_h_null_q_desc() function in the drivers/net/wireless/ath/ath12k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kdprxhnullqdesc function in the drivers/net/wireless/ath/ath12k/dprx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker t...
The vulnerability of the Adobe Bridge file manager, related to integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to insufficient validation of input data, allows a hacker to bypass security measures.
The vulnerability of the professional video editing software Adobe Premiere Pro is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass security measures...