98617 matches found
Linux net/sched/sch_qfq Heap Buffer Overflow DoS
The vulnerability of the qfqresetqdisc function in the net/sched/schqfq.c module, within the net/sched subsystem of the Linux operating system’s kernel, is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Real Estate Property Management System Code Execution
The vulnerability of the Real Estate Property Management System is related to the failure to take measures to neutralize certain elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and execute arbitrary codes...
TRENDnet TEW-432BRP Code Execution
The vulnerability of the formSetFirewallRule function in TRENDnet TEW-432BRP router software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
TP-Link Archer C64 SSH Brute Force
The vulnerability of the SSH service in TP-Link Archer C64 software routers involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack remotely...
cifs-utils cifs_get_spnego_key Privilege Escalation
The vulnerability of the cifsgetspnegokey function in the cifs.upcall tool of the cifs-utils package in Linux kernel systems is related to the lack of authentication for the critical function. Exploiting this vulnerability can allow an attacker to elevate their privileges to root and execute...
Color-Name Code Execution
The vulnerability of the npm library Color-Name is related to the presence of undeclared functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Color Code Execution
The vulnerability of the npm library Color is related to the presence of undeclared features. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PX4 Autopilot Mission Block Overflow
The vulnerability of the missionblock.cpp component in the PX4 Autopilot system management software is related to incorrect handling of values. Exploiting this vulnerability could allow an attacker to alter the flight path of the aircraft...
nossrf SSRF
The vulnerability of the nossrf software is related to insufficient testing of incoming requests. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
Vitest Screenshot Code Execution
The vulnerability of the screenshot-error function in the software testing tool Vitest relates to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and disclose confidential information...
TOTOLINK A7100RU Router Command Execution
The vulnerability of the setWanCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
TOTOLINK A7100RU Router Arbitrary Command Execution
The vulnerability of the setPptpServerCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability could allow an attacker to execute arbitrary...
TOTOLINK A7100RU Router Arbitrary Command Execution
The vulnerability of the setPortalConfWeChat function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken at the management level to protect data. Exploiting this vulnerability could allow an attacker to execute...
TOTOLink A800R Router Code Execution
The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A800R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...
TOTOLINK A7100RU Router Command Execution
The vulnerability of the setSyslogCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s microprogramming system is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a malicious actor to execute...
Totolink A3300R Router Arbitrary Command Execution
The vulnerability of the vsetTr069Cfg function /cgi-bin/cstecgi.cgi of the Totolink A3300R router software is related to the failure to eliminate special elements used in the operating system’s command for processing the stunpass parameter. Exploiting this vulnerability allows a malicious actor t...
AIRI useMarkdown XSS
The vulnerability of the useMarkdown component in the AIRI utility involves improper handling of code generation. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting XSS attacks...
MongoDB Time Series Execution Code
The vulnerability of the MongoDB database management system’s time series collection implementation is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
NVIDIA NeMo Memory Code Execution
The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing is related to the recovery of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain...
TOTOLINK LR350 Router DoS
The vulnerability of the setWiFiGuestCfg function in TOTOLINK LR350 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...
NVIDIA Triton Inference Server Synchronization Error
The vulnerability of the software for deploying and executing AI models in NVIDIA Triton Inference Server previously known as TensorRT Inference Server stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause service failur...
NVIDIA Megatron-LM Training Library Memory Unreliable Code Execution
The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data using ...
NVIDIA Megatron-LM Training Library Memory Unreliable Code Execution
The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data using ...
NVIDIA Megatron-LM Training Library Memory Unreliable Code Execution
The vulnerability of the NVIDIA Megatron-LM training library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized access to protected information, and replace data using ...
hybrid transformation library’s script Code Execution
The vulnerability of the hybrid transformation library for training large language models like NVIDIA Megatron-LM involves the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain elevated privileges, obtain unauthorized acces...
SENADB microprogramming software RCE
The vulnerability of the SENADB microprogramming software for Epson AcuLaser CX17NF-WF printers and scanners is related to the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability can allow an attacker to gain elevated privileges and execute arbitrary...
PIM Core Upload XSS
The vulnerability of the PIM Core Upload module of the PHP software platform, pimcore, is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Mattermost Notification Handler DoS
The vulnerability of the notification handler in the Mattermost instant messaging application is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
msgpack Module DoS
The vulnerability of the msgpack module in the Mattermost instant messaging application is related to an uncontrolled memory consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Mattermost Uncontrolled Resource Consumption DoS
The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption due to the processing of large HTTP requests. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
LXD Container Privilege Escalation
The vulnerability of the isVMLowLevelOptionForbidden function in the LXD container management system is related to the use of an incomplete blacklist when processing input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
pstrip64.sys Kernel Privilege Escalation
The vulnerability of the pstrip64.sys driver, a utility for configuring video card and monitor parameters, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify critical kernel structures or increase their privileges...
SiYuan Personal Knowledge Management System Code Execution
The vulnerability of the SiYuan personal knowledge management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Boards API Focalboard Unauthorized Access
The vulnerability of the Boards API Focalboard interface of the Mattermost instant messaging application relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...
distribution tool access control Privilege Escalation
The vulnerability of the distribution tool’s dissemination function related to access control errors. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
Delmia Apriso Auth Bypass
The vulnerability of the DELMIA Apriso production management system is related to the lack of privileges required to access the application. Exploiting this vulnerability could allow a malicious actor to gain privileged access to the application remotely...
TRENDnet TEW-432BRP formResetStatistic Code Execution
The vulnerability of the formResetStatistic function in TRENDnet TEW-432BRP router software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
IPX image optimizer Path Traversal
The vulnerability of the IPX image optimizer developed by Sharp and SVGO is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain unauthorized access to protected...
TRENDnet TEW-432BRP Form SysLog Code Execution
The vulnerability of the formSysLog function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ActiveX Synactis PDF In-The-Box Control Execute Arbitrary Code
The vulnerability of the ConnectToSynactis method of the ActiveX Synactis PDF In-The-Box control PDFIN1.ocx is related to the issue of operations going out of the buffer in memory when the code generation is not properly managed. Exploiting this vulnerability could allow a remote attacker to...
TOML parser Prototype Pollution
The vulnerability of the TOML parser relates to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to execute a “prototype pollution” attack...
SM2 Handler Component Cryptographic Library Disclosure Information
The vulnerability of the SM2 Handler component in the C++ Botan cryptographic library is related to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow a remote attacker to cause service failures and expose confidential information...
Platinum Host Service Trend Micro Internet Security Code Execution
The vulnerability of the Platinum Host Service antivirus software, Trend Micro Internet Security, is related to improper termination or release of resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code within the context of the SYSTEM process...
AMF Function DoS
The vulnerability of the AMF function in the src/amf/ngap-handler.c script, a tool for creating and managing NR/LTE Open5GS mobile networks, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to cause service interruptions...
TRENDnet TEW-432BRP formSetMACFilter Code Execution
The vulnerability of the formSetMACFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
LibreChat HTTP Request Handler XSS
The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
automation application Conda-build Race Situation Code Execution
The vulnerability of the automation application and the Conda-build package distribution in Python is related to errors in inherited permissions. Exploiting this vulnerability could allow a perpetrator to trigger a “race condition” and execute arbitrary code...
JUnit Open Information Disclosure
The vulnerability of the Java framework JUnit is related to the storage of critical information in an open manner. Exploiting this vulnerability can allow attackers to enhance their privileges...
Color-Convert Code Execution
The vulnerability of the npm library Color-Convert is related to the presence of undeclared capabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PX4 Autopilot Buffer Overflow DoS
The vulnerability of the missionblock.cpp component in the PX4 Autopilot system management software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a hacker to cause a service failure...