96422 matches found
The vulnerability of the rtw_usb_probe() function in the driver file drivers/net/wireless/realtek/rtw88/usb.c of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rtwusbprobe function in the driver/net/wireless/realtek/rtw88/usb.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failur...
The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code or disclose confidential information.
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to...
The vulnerability of Google Chrome’s Skia graphic library allows a hacker to trigger memory corruption.
The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption...
The vulnerability of the `ucsi_acpi_sync_write()` function in the `drivers/usb/typec/ucsi/ucsi_acpi.c` file of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ucsiacpisyncwrite function in the drivers/usb/typec/ucsi/ucsiacpi.c file of the UCSI interface driver for the Linux operating system is related to the assignment of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerabilities of the functions pci_init_afu() and cxl_pci_init_adapter() in the drivers/misc/cxl/pci.c module of the Linux kernel allow a hacker to cause a service failure.
The vulnerability of the functions pciinitafu and cxlpciinitadapter in the drivers/misc/cxl/pci.c module of the Linux kernel is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.
The vulnerability of the software storage controller for working with ShareFile content is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to remotely alter system configurations and execute arbitrary code...
The vulnerability of the cupsdDeleteTemporaryPrinters() function on the CUPS printing server allows a attacker to cause a service failure.
The vulnerability of the cupsdDeleteTemporaryPrinters function in a CUPS printing server relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Livewire PHP framework’s library, which allows attackers to execute arbitrary commands.
The vulnerability of the Livewire PHP framework’s library is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the automated document development program Doczilla is related to the lack of measures taken to protect the structure of the web page...
The vulnerability of the authorized_keys() function in the OpenSSH cryptographic protection mechanism allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the authorizedkeys function in the OpenSSH cryptographic protection mechanism is related to the improper implementation of stream control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the software storage controller for working with ShareFile’s content allows a hacker to modify the system configuration and execute arbitrary code.
The vulnerability of the ShareFile content-sharing software’s storage controller relates to the unlimited download of files of a malicious nature. Exploiting this vulnerability could allow an attacker to remotely alter system configurations and execute arbitrary code...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the add-on module for the Control Web Panel (CWP), previously known as CentOS Web Panel, allows a hacker to execute arbitrary commands.
The vulnerability of the add-on module for the Control Web Panel CWP, previously known as CentOS Web Panel, relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a perpetrator to execute arbitrary commands...
The vulnerability of the MultiPartParser() function in the Django web application framework allows a hacker to trigger a denial-of-service attack.
The vulnerability of the MultiPartParser function in the Django web application framework is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Containous Traefik reverse proxy server, related to bypassing authentication through spoofing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Containous Traefik reverse proxy server relates to the bypassing of authentication procedures through spoofing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the fs::metadata() function in the tar-reading and writing library for the Rust language allows a attacker to increase their privileges.
The vulnerability of the fs::metadata function in the tar-reading and writing library for the Rust language, tar-rs, is related to the tracking of symbolic references in UNIX systems. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...
The vulnerability of the Doczilla document automation development program lies in the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Doczilla document automation development program is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the jinja2.Environment() function in the serving_rerank.py file of the high-performance LLM service framework SGLang allows a attacker to execute arbitrary code.
The vulnerability of the jinja2.Environment function in the servingrerank.py file of the high-performance LLM service framework SGLang is related to incorrect code generation practices. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the Keycloak identity and access management software lies in improper behavior patterns, allowing unauthorized users to gain unauthorized access to confidential information.
The vulnerability of the Keycloak identity and access management software is related to an incorrect sequence of actions: authentication occurs before syntactic analysis and canonization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...
The vulnerability of the iconv() function in the GNU C Library, which allows a hacker to trigger a denial-of-service attack
The vulnerability of the iconv function in the GNU C Library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework lies in the uncontrolled distribution of memory resources, which allows a malicious actor to trigger a service failure.
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the fromSetCfm() function in Tenda F456 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetCfm function in Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing parameters funcname and funcpara1. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...
The vulnerability of the Linux operating system’s Wi-Fi kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s Wi-Fi kernel component is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the imx component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the imx component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the acpi_get_dsd_graph() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the acpigetdsdgraph function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the AddPortMapping() function in the miniupnpd component of D-Link DIR-825 router software allows a hacker to execute arbitrary code.
The vulnerability of the AddPortMapping function in the miniupnpd component of D-Link DIR-825 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...
The vulnerability of the /api/v1/attachments component of the software platform for creating custom interfaces based on Language Models (LLMs) from Flowise allows a malicious actor to gain access to the ability to upload any files.
The vulnerability of the /api/v1/attachments component of the software platform for creating user interfaces based on Language Models LLM from Flowise is related to the ability to download files of a dangerous type without restrictions. Exploiting this vulnerability could allow an attacker...
The vulnerability of the query_regdb_file() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the queryregdbfile function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ibmvnic component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ibmvnic component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the percpu_init_rwsem() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the percpuinitrwsem function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the in_atomic() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the inatomic function in the Linux operating system’s kernel is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fuse_uring_start() function in the library for creating and using libfuse virtual file systems allows a attacker to execute arbitrary code.
The vulnerability of the fuseuringstart function in the library for creating and using the libfuse virtual file system is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the elem_size() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the elemsize function in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the octeontx2-vf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the octeontx2-vf component in the Linux operating system is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component in Linux operating systems is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the run_bpf_prog() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the runbpfprog function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ppr_get() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the pprget function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the JavaScript-based Thymeleaf engine arises from the lack of measures taken to neutralize special elements used in the expression language operator, allowing attackers to execute arbitrary code.
The vulnerability of the JavaScript-based Thymeleaf engine is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the software platform for configuring GIGABYTE Control Center (GCC) lies in the ability to write beyond the buffer boundaries, allowing an attacker to execute arbitrary code.
The vulnerability of the software platform for configuring GIGABYTE Control Center GCC is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the mISDN_register_device() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mISDNregisterdevice function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
The vulnerability of the kfd_process_device_init_vm() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the kfdprocessdeviceinitvm function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mwifiex_process_mgmt_packet() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mwifiexprocessmgmtpacket function in the Linux operating system is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the follow_automount() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the followautomount function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `of_node_put()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the ofnodeput function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands, provided that the user opens a specially crafted file...
The vulnerability of artificial intelligence servers for applications based on large language models like BricksLLM arises from the failure to protect the SQL query structure when processing the parameter customId. This allows attackers to access protected information or execute arbitrary code.
The vulnerability of the artificial intelligence server for applications based on BricksLL language models relates to the lack of protection for the SQL query structure when processing the customId parameter. Exploiting this vulnerability can allow an attacker to gain access to protected...