The vulnerability of the WriteMPCImage() function in the coders/mpc.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the WriteMPCImage function in the coders/mpc.c component of the console-based ImageMagick graphics editor is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the GetImagePixelCache function in the MagickCore/cache.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the GetImagePixelCache function in the MagickCore/cache.c component of the console image editing tool ImageMagick is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the Symfony software platform for developing and managing web applications stems from insufficient validation of input data, allowing attackers to compromise data integrity.

The vulnerability of the Symfony software platform for developing and managing web applications is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the node_http2 components in the Node.js software platform allows a attacker to cause a service failure.

The vulnerability of the nodehttp2 components in the Node.js software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the x86_android_tabletremove() function in the drivers/platform/x86/x86-android-tablets/core.c driver, which is part of the Linux kernel support for X86 devices. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the x86androidtabletremove function in the drivers/platform/x86/x86-android-tablets/core.c driver for supporting Linux kernel devices is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `nilfs_prepare_segment_for_recovery()` function in the `fs/nilfs2/recovery.c` module of the NILFS2 file system support module for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the nilfspreparesegmentforrecovery function in the fs/nilfs2/recovery.c module of the NILFS2 file system support in the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the fileid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the path-to-regexp transformation library arises from the inefficient computational complexity of regular expressions, allowing attackers to trigger a service failure.

The vulnerability of the path-to-regexp transformation library is related to the inefficient computational complexity of regular expressions. Exploiting this vulnerability can allow an attacker to cause a service failure by overloading the CPU...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the fileid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing the folderid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability in the function ath11k_dp_rx_mon_deliver() of the drivers/net/wireless/ath/ath11k/dp_rx.c file, a driver for Atheros/Qualcomm wireless adapter devices in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath11kdprxmondeliver function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the fromSetWifiGusetBasic() function in Tenda AC8 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetWifiGusetBasic function in the Tenda AC8 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the shareSpeed parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the bcmgenetdesc_rx() function in the drivers/net/ethernet/broadcom/genet/bcmgenet.c file of the Ethernet network adapter driver for Broadcom-based Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bcmgenetdescrx function in the drivers/net/ethernet/broadcom/genet/bcmgenet.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...

The vulnerability of the usbnet_probe() function in the drivers/net/usb/usbnet.c module of the Linux network adapter driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbnetprobe function in the drivers/net/usb/usbnet.c module of the Linux network adapter driver module is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the formSetWanDiag() function in the Tenda G300-F router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetWanDiag function in the Tenda G300-F router’s microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

The vulnerabilities of the `nilfs_relax_pressure_in_lock()` and `nilfs_construct_segment()` functions in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the nilfsrelaxpressureinlock and nilfsconstructsegment functions in the Linux operating system are related to the repeated use of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality, integrity, and...

Vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue is related to the failure to protect the structure of the web page, allowing attackers to execute arbitrary code.

The vulnerability of the platform for creating individual web applications in CRM involves failing to take measures to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the convert___skb_to_skb() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the convertskbtoskb function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerabilities of Node.js’s HTTP components, which allow attackers to trigger service failures

The vulnerability of Node.js’s HTTP components is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Kerberos authentication protocol, which stems from the failure to remove special elements from the LDAP request, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Kerberos authentication protocol lies in the lack of measures taken to neutralize specific elements in the LDAP request. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the stbi__convert_format function in the C/C++ Libstb libraries allows a hacker to cause a service failure.

The vulnerability of the stbiconvertformat function in the C/C++ Libstb library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created pic file...

The vulnerability of the RDMA/mlx5 component of the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the RDMA/mlx5 component of the Linux operating system is related to incorrect handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kvm_get_mode() function in the arch/arm64/include/asm/kvm_host.h support module for the 64-bit ARM processor in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kvmgetmode function in the arch/arm64/include/asm/kvmhost.h support module for the 64-bit ARM processor-based Linux operating system is related to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the iwl_txq_reclaim() function in the drivers/net/wireless/intel/iwlwifi/queue/tx.c file of the Intel wireless driver module for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the iwltxqreclaim function in the drivers/net/wireless/intel/iwlwifi/queue/tx.c file of the Intel wireless driver for Linux operating systems is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the show_ipi_list() function in the arch/loongarch/kernel/smp.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the showipilist function in the arch/loongarch/kernel/smp.c module, which is part of the LoongArch architecture support for the Linux operating system, involves a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the f2fs_abort_atomic_write() function in the fs/f2fs/segment.c module of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the f2fsabortatomicwrite function in the fs/f2fs/segment.c module of the F2FS file system in the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the nilfs_evict inode() function in the fs/nilfs2/inode.c file of the NILFS2 file system in the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the nilfsevict inode function in the fs/nilfs2/inode.c file of the NILFS2 file system in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the failure to protect the SQL query structure during the processing of the QTestId parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the OpenSky flight planning and operational management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

The vulnerability of the raid0_run() function (drivers/md/raid0.c) and raid10_run() function (drivers/md/raid10.c) in the Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the raid0run function drivers/md/raid0.c and raid10run function drivers/md/raid10.c in the Linux kernel is related to buffer overflow based stack-based attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the OnAssocReq() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the OnAssocReq function in the Linux operating system’s kernel is related to buffer overflow based on a stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the web interface of the Fortinet FortiClient Enterprise Management Server (EMS) allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Fortinet FortiClient Enterprise Management Server EMS lies in the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted HTTP requests...

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the selectmonth parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

The vulnerability of the pci_device_is_present() function in the drivers/pci/pci.c module of the Linux operating system’s PCI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcideviceispresent function in the drivers/pci/pci.c module of the Linux operating system’s PCI device driver lies in improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the swap inode_boot_loader() function in the fs/ext4/ioctl.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the swapinodebootloader function in the fs/ext4/ioctl.c file of the Ext4 file system in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ipc_msg_send_request() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipcmsgsendrequest function in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the fc_exch_abts_resp() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fcexchabtsresp function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the type_show() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the typeshow function in the Linux operating system’s kernel is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the radeon_atombios_fini() function in the drivers/gpu/drm/radeon/radeon_device.c driver of the Direct Rendering Infrastructure (DRI) graphics card for Linux kernel cores allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the radeonatombiosfini function in the drivers/gpu/drm/radeon/radeondevice.c file of the DRI graphics card driver for Linux operating systems is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an...

The vulnerability of the si_parse_power_table() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the siparsepowertable function in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the jfs_link() function in the fs/jfs/namei.c file of the JFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jfslink function in the fs/jfs/namei.c file of the JFS file system in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the null_init_tag_set() function in the drivers/block/null_blk/main.c module of the Linux kernel’s block devices driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nullinittagset function in the drivers/block/nullblk/main.c module of the Linux kernel’s block devices driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the HPE Alletra operating system, the HPE Nimble Storage All Flash Arrays, and the HPE Nimble Storage Hybrid Flash Arrays is related to access control errors, which allow attackers to escalate their privileges.

The vulnerabilities of the HPE Alletra operating system, the HPE Nimble Storage All Flash Arrays, and the HPE Nimble Storage Hybrid Flash Arrays are related to access control errors. Exploiting these vulnerabilities can allow attackers to increase their privileges remotely...

The vulnerability of the MFlash file-sharing platform, which allows for unlimited downloading of malicious files, enables a hacker to execute arbitrary code.

The vulnerability of the MFlash file-sharing platform lies in its ability to allow unlimited downloading of malicious files. Exploiting this vulnerability could enable a remote attacker to execute arbitrary code...

The vulnerability of the ReadMVGImage function in the coders/mvg.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the ReadMVGImage function in the coders/mvg.c component of the console image editing tool ImageMagick involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the UCS-2 encoding in the Node.js software platform, which allows a hacker to trigger a service failure.

The vulnerability of the UCS-2 encoding format in the Node.js software platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the Kerberos authentication protocol, related to the lack of use of the assert() function, allows a attacker to cause a service failure.

The vulnerability of the Kerberos authentication protocol is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

The vulnerability of the kdc/do_tgs_req.c component of the Kerberos authentication protocol allows a attacker to induce a service failure.

The vulnerability of the kdc/dotgsreq.c component of the Kerberos authentication protocol is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the WMI_TXSTATUS_EVENTID command in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the WMITXSTATUSEVENTID command in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ena_com_cdesc_rx_pkt_get() function in the drivers/net/ethernet/amazon/ena/ena_eth_com.c file of the Ethernet network adapter support driver for Linux kernel allows a attacker to cause a system failure.

The vulnerability of the enacomcdescrxpktget function in the drivers/net/ethernet/amazon/ena/enaethcom.c file of the Ethernet adapter support driver for Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a...