The vulnerability of the Edit_List_SSID function in the H3C GR-5400AX router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EditListSSID function in the H3C GR-5400AX router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the software platform based on Git for collaborative code development in GitLab Enterprise Edition (EE) stems from the lack of authentication procedures, which allow unauthorized users to gain unauthorized access to the AI model settings.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the AI model...

The vulnerability of the /cgi-bin/DownloadFlash file of the Web Management Interface component of the Tenda AC21 microprogramming system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the /cgi-bin/DownloadFlash file of the Web Management Interface component of the Tenda AC21 microprogramming system for routers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access...

The vulnerability of the software for rapid display and access to information about clients in Znuny arises from the absence of the “HttpOnly” flag in session cookies. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the software for rapid display and access to information about clients in Znuny is related to the absence of the “HttpOnly” flag in session cookie files. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected information...

The vulnerability in the application programming interface `api.values.get` of Grandstream GXP microprogramming devices allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability in the application software interface api.values.get of Grandstream GXP microprogrammed telephones is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges by...

The vulnerability in the debugging interface of AMD’s microprogramming graphics processor allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the debugging interface for AMD graphics processor microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the memory control block for IOMMU operations in AMD’s microprogramming software for processors allows attackers to circumvent security restrictions and compromise the integrity of the protected information.

The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems is related to incorrect input of configuration data. Exploiting this vulnerability can allow attackers to circumvent security restrictions and compromise the integrity of protected information...

The vulnerability of SMM communication buffers in AMD’s microprogrammed graphics processors allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of SMM communication buffers in AMD graphics processor microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the web service of the hybrid communication platform Mitel OpenScape 4000 and the network management platform Mitel OpenScape 4000 Manager lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary codes.

The vulnerability of the web-based communication platform Mitel OpenScape 4000 and the centralized network management platform Mitel OpenScape 4000 Manager is related to the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the Polarion ALM application lifecycle management software lies in the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Polarion ALM application lifecycle management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to execute arbitrary code by exploiting buffer overflow vulnerabilities.

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to execute code outside the buffer boundaries. Exploiting this vulnerability could allow attackers to execute arbitrary...

The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...

The vulnerability of the software platform for numerical modeling and analysis of products from Simcenter Nastran, as well as the pre-processor Simcenter Femap, lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using a speciall...

The vulnerability of the MCP server regarding the execution of container code by node-code-sandbox-mcp, due to the lack of data cleaning at the control level, allows a malicious actor to execute arbitrary system commands.

The vulnerability of the MCP server regarding the execution of container code via node-code-sandbox-mcp is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary system commands...

The vulnerability of the Explore Traces component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the Explore Traces component of the Grafana monitoring and observation platform relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code...

The vulnerability of the `ovs_dp_cmd_new()` function in the `net_openvswitch/datapath.c` module, which is part of the Open vSwitch router support in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the ovsdpcmdnew function in the netopenvswitch/datapath.c module, which is part of the Open vSwitch router support in Linux operating systems, is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the storvsc_probe() function in the drivers/scsi/storvsc_drv.c file of the Linux operating system’s SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the storvscprobe function in the drivers/scsi/storvscdrv.c file of the Linux SCSI device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the function function_show() in the drivers/usb/gadget/udc/core.c file of the Linux operating system’s USB gadget driver framework allows a malicious actor to cause a service failure.

The vulnerability of the function functionshow in the drivers/usb/gadget/udc/core.c file of the Linux operating system’s USB gadget driver framework is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerabilities of the functions ucsi_init() and ucsi_unregister() in the driver drivers/usb/typec/ucsi/ucsi.c file of the UCSI driver for the Linux operating system allow a malicious actor to cause service failure remotely.

The vulnerability of the functions ucsiinit and ucsiunregister in the UCSI driver’s drivers/usb/typec/ucsi/ucsi.c file is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service failure...

The vulnerability of the ttm_bo_evict_swapout_allowable() function in the drivers/gpu/drm/ttm/ttm_bo.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ttmboevictswapoutallowable function in the drivers/gpu/drm/ttm/ttmbo.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the HTTP POST Request Handler component of the Edit_List_SSID function in the /goform/aspForm module of the H3C network device software allows a attacker to execute arbitrary code.

The vulnerability of the HTTP POST Request Handler component of the EditListSSID function in the /goform/aspForm module of the H3C network device software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of H3C Magic B3 network devices’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code.

The vulnerability of H3C Magic B3 network devices’ microprogramming software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the graphical interface of Netgear WiFi Range Extender software lies in the lack of authentication procedures, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the graphical interface of Netgear WiFi Range Extender software-related microprogramming devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the XWiki platform, a tool for creating collaborative web applications. XWiki allows attackers to execute a type of attack known as CSS Injection.

The vulnerability of the XWiki platform, a tool for creating collaborative web applications, lies in an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to carry out a type of CSS injection attack, with the assistance of...

The vulnerability of Notepad++, a text editor, is related to the use of an insecure search path, allowing attackers to execute arbitrary code.

The vulnerability of the Notepad++ text editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially crafted executable file...

The vulnerability of the mlx5cmd_errtrace() function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5cmderrtrace function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to buffer out-of-bounds writing. Exploiting this vulnerability could allow an attacker to compromis...

The vulnerability of the igb_enable_sriov() function in the drivers/net/ethernet/intel/igb/igb_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the igbenablesriov function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Linux kernel’s Ethernet network adapter driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of AMD graphics processor microprogramming interfaces via PCIe allows a hacker to trigger a service failure.

The vulnerability of AMD graphics processor microprogramming interfaces based on PCIe is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the mme_s11_handle_create_session_response function in the MME mobility management component, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the mmes11handlecreatesessionresponse function in the MME mobility management component, which is used for creating and managing NR/LTE Open5GS mobile networks, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow a malicious acto...

The vulnerability of the multi_ssid function in the /cgi-bin/wireless.cgi file of the Wavlink WL-WN579A3 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the multissid function in the /cgi-bin/wireless.cgi file of the Wavlink WL-WN579A3 router microprogramming system is related to the lack of measures taken to neutralize data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

The vulnerability of the /cgi-bin/login.cgi file in the microprogramming software for Wavlink routers WL-WN579A3 allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/login.cgi file in the microprogramming software for Wavlink WL-WN579A3 is related to the lack of measures taken to neutralize data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the ovl_permission() function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovlpermission function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE involves shortcomings in access control to personal information, allowing attackers to disclose protected data.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in restricting access to personal information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the /goform/set_ddns file in the DDNS Service component of the D-link DIR-823X router’s microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/setddns file of the DDNS Service component of the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the parameters ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd...

The vulnerability of AMD’s microprogrammed graphics processor software, related to errors in processing input data, allows attackers to compromise the integrity of protected information.

The vulnerability of AMD’s microprogrammed graphics software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of protected information...

The vulnerability of the trusted operating system for microprogrammed graphics processors from AMD allows a hacker to trigger a service failure.

The vulnerability of the trusted operating system for AMD graphics processors’ microprogramming software is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the Kafka Connect BigQuery Connector lies in insufficient validation of requests on the server side. This allows attackers to disclose sensitive information or perform SSRF attacks.

The vulnerability of the Kafka Connect BigQuery Connector is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or perform an SSRF attack by sending a specially crafted malicious JSON file...

The vulnerability in the libvpx component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the libvpx component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the hugetlb_mcopy_atomic_pte() function in the mm/hugetlb.c module of the Linux kernel’s memory-management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hugetlbmcopyatomicpte function in the mm/hugetlb.c module of the Linux kernel’s memory-management subsystem is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `generate_lfp_data_ptrs()` function in the `drivers/gpu/drm/i915/display/intel_bios.c` file of the DRI driver for the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the generatelfpdataptrs function in the drivers/gpu/drm/i915/display/intelbios.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

The vulnerability of the bfq_exit_icq_bfqq() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing a hacker to trigger a service failure.

The vulnerability of the bfqexiticqbfqq function in the block/bfq-iosched.c module, which supports the block-level kernel in Linux operating systems, relates to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the loop_global_unlock() function in the drivers/block/loop.c module – A driver for supporting block devices in the Linux kernel, which allows a hacker to trigger a service failure.

Vulnerability of the loopglobalunlock function in the drivers/block/loop.c module – The Linux kernel’s block device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the /cgi-bin/DownloadLog file in the Web Management Interface component of the Tenda AC21 microprogramming router allows a hacker to gain unauthorized access to protected information.

The vulnerability of the /cgi-bin/DownloadLog file of the Web Management Interface component of the Tenda AC21 microprogramming system for routers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...

The vulnerability of AMD Secure Processor microprogramming software for graphics processors allows attackers to execute a brute-force attack and circumvent existing security restrictions.

The vulnerability of AMD Secure Processor microprogramming software for graphics processors relates to unreliable pointer aliasing. Exploiting this vulnerability could allow an attacker to execute a brute-force attack and circumvent existing security restrictions...

The vulnerability of AMD’s SMM microprogramming system for graphics processors allows attackers to execute arbitrary code.

The vulnerability of AMD’s SMM microprogramming graphics processor driver is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the kube-apiserver component, a software component for managing clusters of virtual machines in Kubernetes, allows a attacker to cause a service failure.

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Grafana monitoring and observation platform, related to information disclosure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Grafana monitoring and observation platform is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the system’s application programming interface for aggregating and storing Loki logs allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the system’s application programming interface for aggregating and storing Loki logs is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...

The vulnerability of the Delete_Mac_list function in the /cgi-bin/wireless.cgi file of the Wavlink router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the DeleteMaclist function in the /cgi-bin/wireless.cgi file of the Wavlink WL-WN579A3 router’s microprogramming system is related to the lack of measures taken to neutralize such data at the control level. Exploiting this vulnerability could allow a malicious actor to execut...

The vulnerability of the gsmld_receive_buf() function in the drivers/tty/n_gsm.c module of the TTY console driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gsmldreceivebuf function in the drivers/tty/ngsm.c module of the TTY console driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...