92710 matches found
The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE involves shortcomings in access control to personal information, allowing attackers to disclose protected data.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in restricting access to personal information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...
The vulnerability of the /goform/set_ddns file in the DDNS Service component of the D-link DIR-823X router’s microprogramming system allows a attacker to execute arbitrary commands.
The vulnerability of the /goform/setddns file of the DDNS Service component of the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the parameters ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd...
The vulnerability of the Dell Data Lakehouse storage platform, related to access control errors, allows attackers to escalate their privileges.
The vulnerability of the Dell Data Lakehouse storage platform is related to access control errors. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
The vulnerability of the /cgi-bin/DownloadLog file in the Web Management Interface component of the Tenda AC21 microprogramming router allows a hacker to gain unauthorized access to protected information.
The vulnerability of the /cgi-bin/DownloadLog file of the Web Management Interface component of the Tenda AC21 microprogramming system for routers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...
The vulnerabilities of AMD’s RMP and SMM microprogramming systems allow attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of RMP and SMM components of AMD’s microprogramming graphics processors is related to improper handling of overlapping protected memory ranges. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
The vulnerability of AMD’s graphics processor microprogramming software lies in the improper isolation of common resources between trusted and untrusted agents, allowing attackers to compromise the integrity of protected information.
The vulnerability of AMD’s microprogrammed graphics processor software is related to the improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
The vulnerability of the Git repository management system Gitea, related to access control errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Git repository management system Gitea is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.
The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the correlation function of the Grafana monitoring and observation platform allows a hacker to gain unauthorized access to protected information.
The vulnerability of the correlation function of the Grafana monitoring and observation platform is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the attach_default_qdiscs() function in the net/sched/sch_generic.c module of the net/sched/sch subsystem of the Linux operating system’s kernel allows a attacker to cause a service failure.
The vulnerability of the attachdefaultqdiscs function in the net/sched/schgeneric.c module of the network scheduling subsystem of the Linux operating system’s kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the `udmabuf_dev_init()` function in the Linux kernel’s `drivers/dma-buf/udmabuf.c` file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the udmabufdevinit function in the Linux kernel’s drivers/dma-buf/udmabuf.c file is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the dma_resv_add_fence() function in the drivers/dma-buf/dma-resv.c file of two Linux kernel cores may allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dmaresvaddfence function in the drivers/dma-buf/dma-resv.c file of two Linux kernels is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...
The vulnerability of the xhci_plat_remove() function in the drivers/usb/host/xhci-plat.c file of the Linux kernel’s USB device driver allows a malicious actor to cause a service failure remotely.
The vulnerability of the xhciplatremove function in the drivers/usb/host/xhci-plat.c file of the Linux kernel’s USB device driver framework is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the vdpasim_free() function in the drivers/vdpa/vdpa_sim/vdpa_sim.c module of the vDPA device driver in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the vdpasimfree function in the drivers/vdpa/vdpasim/vdpasim.c module of the vDPA device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the __do_sys_set_mempolicy_home_node() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to trigger a system failure.
The vulnerability of the dosyssetmempolicyhomenode function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nested_svm_vmexit() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel allows a attacker to cause a service failure.
The vulnerability of the nestedsvmvmexit function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux x86 kernel platform is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the r5l_logFlushEndio() function in the drivers/md/raid5-cache.c module of the Linux driver for multiple device types (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the r5llogFlushEndio function in the drivers/md/raid5-cache.c module of the Linux device driver for multiple devices RAID and LVM is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise t...
The vulnerability of the nouveau_connector_create() function in the drivers/gpu/drm/nouveau/nouveau_connector.c file of the Nouveau driver for Direct Rendering Infrastructure (DRI) graphics cards of NVIDIA’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the nouveauconnectorcreate function in the drivers/gpu/drm/nouveau/nouveauconnector.c file of the Nouveau graphics driver for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise...
The vulnerability of the software platform based on Git for collaborative code development in GitLab Enterprise Edition (EE) stems from the lack of authentication procedures, which allow unauthorized users to gain unauthorized access to the AI model settings.
The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the AI model...
The vulnerability of the graphical interface of Netgear WiFi Range Extender software lies in the lack of authentication procedures, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the graphical interface of Netgear WiFi Range Extender software-related microprogramming devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to insufficient verification of the authenticity of executed requests. This allows attackers to bypass security restrictions and carry out CSRF attacks.
The vulnerability of the multi-platform web solution for creating Scada systems is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform CSRF attacks...
The vulnerability of SMM buffer in AMD graphics processor microprogramming software allows a hacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the SMM buffer in AMD’s graphics processor microsoftware is related to the breach of the buffer’s initial boundary. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
The vulnerability of AMD’s microprogrammed graphics processor DMA component allows attackers to compromise the integrity of protected information.
The vulnerability of AMD’s microprogrammed graphics processor DMA component is related to defects in error handling during the verification of the host key. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...
The vulnerability of the web-based communication platform Mitel OpenScape 4000 and its centralized network management platform, Mitel OpenScape 4000 Manager, is related to errors in privilege management. This vulnerability allows an attacker to elevate their privileges and execute arbitrary code.
The vulnerability of the Mitel OpenScape 4000 hybrid communication platform’s web service and the Mitel OpenScape 4000 Manager network management platform is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges and execute...
The vulnerability of the software platform for medical visualization and image processing syngo.plaza, related to the use of weak encryption algorithms, allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.
The vulnerability of the software platform for medical visualization and image processing in syngo.plaza is related to the use of weak encryption algorithms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and gain unauthorized access to protected...
The vulnerability of Siemens NX software for product design, development, and production lies in the fact that operations are performed outside the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Siemens NX software for product design, development, and production is related to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.
The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the software platform for numerical modeling and analysis of products in Simcenter Nastran, as well as the pre-processor Simcenter Femap, arises from reading data beyond the acceptable range in memory. This vulnerability allows a hacker to execute arbitrary code.
The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products, as well as the pre-processor Simcenter Femap, lies in the ability to read data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the record_func_key() function in the kernel/bpf/verifier.c module, part of the BPF interpreter support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the recordfunckey function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the wb inode_writeback_end() function in the fs/fs-writeback.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the wb inodewritebackend function in the fs/fs-writeback.c file of the Linux kernel file system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the httpd component of the formBehaviorManager function in the Tenda AC1206 router microprogramming system allows a attacker to execute arbitrary commands.
The vulnerability of the httpd component of the formBehaviorManager function in the Tenda AC1206 router microprogramming system is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability may allow an attacker to execute arbitrary commands remotely...
The vulnerability of the `firmwareUploadUnregister()` function in the `drivers/base/firmwareLoader/sysfsUpload.c` file of the Linux kernel’s device drivers module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the firmwareUploadUnregister function in the drivers/base/firmwareLoader/sysfsUpload.c file of the Linux kernel’s device drivers module is related to the re-use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
The vulnerability of the dma_resv_get_fences() function in the drivers/dma-buf/dma-resv.c module of the Linux operating system, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dmaresvgetfences function in the drivers/dma-buf/dma-resv.c module of the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the vec_set_vector_length() function in the arch/arm64/kernel/fpsimd.c module allows a hacker to cause a system failure in the ARM 64-bit kernel support of the Linux operating system.
The vulnerability of the vecsetvectorlength function in the arch/arm64/kernel/fpsimd.c module of the Linux operating system’s ARM 64-bit kernel architecture is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the SMB2_sess_auth_rawntlmssp_negotiate() function in the fs/cifs/smb2pdu.c module of the Linux kernel file system allows a hacker to induce a service failure.
The vulnerability of the SMB2sessauthrawntlmsspnegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `__drm_kunit_helper_alloc_drm_device()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the drmkunithelperallocdrmdevice function in the Linux kernel module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the tgl_get_bw_info() function in the drivers/gpu/drm/i915/display/intel_bw.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the tglgetbwinfo function in the drivers/gpu/drm/i915/display/intelbw.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause ...
The vulnerability of the lpfc_issue_els_flogi() function in the drivers/scsi/lpfc/lpfc_els.c module of the Linux SCSI device support driver allows a attacker to cause a service failure.
The vulnerability of the lpfcissueelsflogi function in the drivers/scsi/lpfc/lpfcels.c file of the Linux SCSI device support driver leads to a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010, and Magic BE18000 Wi-Fi routers lies in the lack of measures to protect input data, allowing attackers to execute arbitrary commands.
The vulnerability of H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010, and Magic BE18000 Wi-Fi routers lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of 5G MediaTek wireless communication modules, related to reading data outside the allowed range in memory, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules from MediaTek relates to reading data outside the permitted range in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the “Vzlet SP” software suite, related to deficiencies in the authorization process, allows a perpetrator to gain unauthorized access to protected information or functions.
The vulnerability of the “Vzlet SP” software complex is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...
The vulnerability of the “Vzlet SP” software suite arises from the lack of measures taken to protect the structure of the web page, allowing a hacker to execute arbitrary code.
The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Vzlet SP” software suite arises from the lack of measures taken to protect the structure of the web page, allowing a hacker to execute arbitrary code.
The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Vzlet SP” software suite, related to deficiencies in the authorization process, allows a perpetrator to gain unauthorized access to protected information or functions.
The vulnerability of the “Vzlet SP” software complex is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...
The vulnerability of the “Vzlet SP” software suite arises from the lack of measures taken to protect the structure of the web page, allowing a hacker to execute arbitrary code.
The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Vzlet SP” software suite arises from the lack of measures taken to protect the structure of the web page, allowing a hacker to execute arbitrary code.
The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Vzlet SP” software suite, related to deficiencies in the authorization process, allows a perpetrator to gain unauthorized access to protected information or functions.
The vulnerability of the “Vzlet SP” software complex is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...
The vulnerability of the “Vzlet SP” software suite, related to inconsistencies in responses to incoming requests, allows a perpetrator to gain unauthorized access to protected information or functions.
The vulnerability of the “Vzlet SP” software complex is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...
The vulnerability of the “Vzlet SP” software suite, related to improper code generation, allows a perpetrator to execute arbitrary code.
The vulnerability of the “Vzlet SP” software suite is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Vzlet SP” software suite arises from the lack of measures taken to protect the structure of the web page, allowing a hacker to execute arbitrary code.
The vulnerability of the “Vzlet SP” software complex is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...