96422 matches found
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks stems from errors in verifying cryptographic signatures. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Yokogawa CENTUM VP SCADA system, which stems from the use of rigidly encrypted accounting data, allows a intruder to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Yokogawa CENTUM VP SCADA system is related to the use of strictly encrypted accounting data. Exploiting this vulnerability could allow an intruder to compromise the confidentiality and integrity of the protected information...
The vulnerability of the distributed resource management system, which optimizes workloads in Siemens Altair Grid Engine data centers, is related to errors in the certificate validation process. These errors allow attackers to disclose password hashes.
The vulnerability of the distributed resource management system, which optimizes workloads in Siemens Altair Grid Engine data centers, is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to disclose password hashes...
The vulnerability of the Open Graph image generation module in the Nuxt OG Image framework for creating web applications and sites using Nuxt.js allows a attacker to perform an SSRF attack.
The vulnerability of the Open Graph image generation module in the Nuxt OG Image framework for creating web applications and sites using Nuxt.js is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack...
The vulnerability of the `nsim_dev_trap_fa_cookie_write` function in the `netdevsim` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nsimdevtrapfacookiewrite function in the netdevsim component of the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ata_tport_add() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the atatportadd function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the drm_dev_init() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drmdevinit function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow a hacker to cause a service failure...
The vulnerability of the can_rx_register() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the canrxregister function in the Linux operating system’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the cortex_a76_erratum_1463225debug_handler() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cortexa76erratum1463225debughandler function in the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the drain_workqueue() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drainworkqueue function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ata_tlink_add() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the atatlinkadd function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the imx_uart_freeze() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the imxuartfreeze function in the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of JetBrains Junie software, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of JetBrains Junie software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the ima_get_kexec_buffer() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the imagetkexecbuffer function in the Linux operating system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the arm64 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the qed_iov_getVF_info() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the qediovgetVFinfo function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the svc_exportPut() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the svcexportput function in the Linux operating system’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `move_pages_huge_pmd()` function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the movepageshugepmd function in the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the Open Graph Picture generation module in the Nuxt OG Image framework for creating web applications and sites using Nuxt.js allows a hacker to execute arbitrary code.
The vulnerability of the Open Graph Picture Generation module in the Nuxt OG Image framework for creating web applications and websites related to Nuxt.js is related to the lack of security measures for protecting the website structure. Exploiting this vulnerability allows a malicious actor to...
The vulnerability of the `alloc_huge_page()` function in the Linux operating system’s `mm/hugetlb.c` module, which allows a hacker to cause a service failure
The vulnerability of the allochugepage function in the mm/hugetlb.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Google Chrome’s DevTools component, which allows a hacker to bypass security restrictions
The vulnerability of Google Chrome’s DevTools component is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions using a specially crafted HTML page...
The vulnerability of the blk_register_queue() function in the block/blk-sysfs.c module, which is part of the Linux kernel’s block-level support, allows a attacker to cause a service failure.
The vulnerability of the blkregisterqueue function in the block/blk-sysfs.c module, which is part of the Linux kernel’s block-level support, relates to the absence of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the __rvu_flr_handler() function in the drivers/net/ethernet/marvell/octeontx2/af/rvu.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rvuflrhandler function in the drivers/net/ethernet/marvell/octeontx2/af/rvu.c file of the Ethernet network adapter driver for the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the `tracing_err_log_open()` function in the kernel/trace/trace.c module, which supports Linux operating system traceability, allows a malicious actor to cause a service failure.
The vulnerability of the tracingerrlogopen function in the kernel/trace/trace.c module, which supports Linux operating system traceability, is related to the pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Google Chrome browser’s Navigation function, which allows a hacker to circumvent navigation restrictions
The vulnerability of Google Chrome’s Navigation function is related to improper authorization. Exploiting this vulnerability allows a malicious actor to circumvent navigation restrictions by using a specially created HTML page...
The vulnerability of the Downloads component of the Google Chrome browser allows a hacker to replace the user interface.
The vulnerability of the Downloads component of the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of the rb_end_commit() function in the Linux operating system’s kernel allows a attacker to compromise the accessibility of protected information.
The vulnerability of the rbendcommit function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...
The vulnerability of the hinic_get_stats64() function in the drivers/net/ethernet/huawei/hinic/hinic_main.c file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.
The vulnerability of the hinicgetstats64 function in the drivers/net/ethernet/huawei/hinic/hinicmain.c file of the Linux kernel’s Ethernet network adapter driver is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the driver module md/raid10.c of several Linux device drivers (RAID and LVM), which allows a hacker to cause a service failure.
The vulnerability in the drivers/md/raid10.c driver for multiple Linux device types RAID and LVM involves incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the cfg80211_sme_connect() function in the net/wireless/sme.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cfg80211smeconnect function in the net/wireless/sme.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows a attacker to cause a service failure...
The vulnerability of the Extensions component of the Google Chrome browser allows a hacker to replace the user interface.
The vulnerability of the Google Chrome browser’s Extensions component is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface...
The vulnerability of Google Chrome’s DevTools component allows a hacker to bypass security restrictions.
The vulnerability of Google Chrome’s DevTools component is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions using a specially crafted HTML page...
The vulnerability of Google Chrome’s Picture In Picture technology, which allows a perpetrator to compromise the integrity of protected information
The vulnerability of Google Chrome’s Picture In Picture technology is related to an improper limitation on the visual layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information through a specially created HTML page...
The vulnerability of the usbPutHCD() function in the drivers/usb/host/xhci-mtk.c module of the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the usbPutHCD function in the drivers/usb/host/xhci-mtk.c module of the Linux operating system is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Vmware Workstation hypervisor, related to writing beyond the buffer boundaries of memory, allows an attacker to compromise the integrity and accessibility of the protected information.
The vulnerability of Vmware Workstation hypervisor is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...
The vulnerability of the WebAppInstalls component in the Google Chrome browser allows a hacker to replace the user interface.
The vulnerability of the WebAppInstalls component in Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of Google Chrome, related to deficiencies in access control, allows attackers to circumvent security restrictions.
The vulnerability of Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions using a specially crafted HTML page...
The vulnerability of the fsl_qspi_probe() function in the drivers/spi/spi-fsl-qspi.c file of the Linux kernel’s SPI device driver allows a hacker to cause a service failure.
The vulnerability of the fslqspiprobe function in the drivers/spi/spi-fsl-qspi.c file of the Linux kernel’s SPI device driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions psp_hdcp_initialize() and psp_dtm_initialize() in the driver drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allow a malicious actor to cause a service failure.
The vulnerabilities of the functions psphdcpinitialize and pspdtminitialize in the driver drivers/gpu/drm/amd/amdgpu/amdgpupsp.c of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system are related to improper initialization. Exploiting these vulnerabiliti...
The vulnerability of the __dev_queue_xmit() function in the net/core/filter.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the devqueuexmit function in the net/core/filter.c module of the Linux operating system is related to improper handling of length parameters. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Google Chrome’s Skia graphic library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Omnicomm Online monitoring and control service lies in its ability to disclose information, allowing a violator to expose the protected information.
The vulnerability of the Omnicomm Online monitoring and control service is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability in the function `serial8250_unregister_port()` of the `drivers/tty/serial/8250/8250_core.c` file, a driver for console TTY support on the serial port of the Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the serial8250unregisterport function in the driver/tty/serial/8250/8250core.c file of the console support driver for the serial port in the Linux kernel is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could...
The vulnerability of the ext4_writepages() function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ext4writepages function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of VMware Fusion and Vmware Workstation lies in the insufficient restrictions on network connections for certain endpoints, which allows attackers to interrupt or intercept network connections of other guest virtual machines.
The vulnerability of VMware Fusion and Vmware Workstation lies in the insufficient restrictions on network connections for specified endpoints. Exploiting this vulnerability allows a malicious actor to interrupt or intercept network connections to other guest virtual machines remotely...
The vulnerability of the Java framework for securing industrial applications using Spring Security allows attackers to escalate their privileges.
The vulnerability of the Java framework for securing industrial applications using Spring Security involves bypassing authentication through phising techniques. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain unauthorized access to protected information.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...
The vulnerability of Google Chrome, related to deficiencies in access control, allows attackers to circumvent navigation restrictions.
The vulnerability of Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass navigation restrictions by using a specially crafted HTML page...
The vulnerability of Google Chrome’s Picture In Picture technology, which allows a perpetrator to compromise the integrity of protected information
The vulnerability of Google Chrome’s Picture In Picture technology is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information through a specially created HTML page...