92710 matches found
The vulnerability of the jfs_link() function in the fs/jfs/namei.c file of the JFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jfslink function in the fs/jfs/namei.c file of the JFS file system in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the sja1105_table_delete_entry() function in the drivers/net/dsa/sja1105/sja1105_static_config.c file of the NXP SJA1105 series switch driver for the Linux operating system allows a attacker to access protected information or cause a service failure.
The vulnerability of the sja1105tabledeleteentry function in the drivers/net/dsa/sja1105/sja1105staticconfig.c module of the NXP SJA1105 series switch driver for the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an...
The vulnerability of the MFlash file-sharing platform, which allows for unlimited downloading of malicious files, enables a hacker to execute arbitrary code.
The vulnerability of the MFlash file-sharing platform lies in its ability to allow unlimited downloading of malicious files. Exploiting this vulnerability could enable a remote attacker to execute arbitrary code...
The vulnerability of the lite_font_map() function in the coders/wmf.c component of the ImageMagick console graphics editor allows a hacker to cause a service failure.
The vulnerability of the litefontmap function in the coders/wmf.c component of the ImageMagick console graphics editor is related to the failure to release resources after the expiration of their useful period. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the DestroyImage function in the MagickCore/image.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.
The vulnerability of the DestroyImage function in the MagickCore/image.c component of the ImageMagick console graphic editor is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerabilities of the Buffer.fill() and Bufferalloc() functions in the Node.js software platform allow attackers to cause service failures.
The vulnerability of the Buffer.fill and Bufferalloc functions in the Node.js software platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Node.js software platform, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Node.js software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the smb component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity.
The vulnerability of the smb component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to compromise data integrity...
The vulnerability of the __ext4_fill_super() function in the fs/ext4/super.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4fillsuper function in the fs/ext4/super.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ReadMVGImage function in the coders/mvg.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.
The vulnerability of the ReadMVGImage function in the coders/mvg.c component of the console image editing tool ImageMagick involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Dnsmasq DNS server, related to errors in the implementation of security checks for standard elements, allows attackers to compromise the integrity of data.
The vulnerability of the Dnsmasq DNS server is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
The vulnerability of the Kerberos authentication protocol, related to the lack of use of the assert() function, allows a attacker to cause a service failure.
The vulnerability of the Kerberos authentication protocol is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause a service failure...
The vulnerability of the kdc/do_tgs_req.c component of the Kerberos authentication protocol allows a attacker to induce a service failure.
The vulnerability of the kdc/dotgsreq.c component of the Kerberos authentication protocol is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the WMI_TXSTATUS_EVENTID command in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the WMITXSTATUSEVENTID command in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ena_com_cdesc_rx_pkt_get() function in the drivers/net/ethernet/amazon/ena/ena_eth_com.c file of the Ethernet network adapter support driver for Linux kernel allows a attacker to cause a system failure.
The vulnerability of the enacomcdescrxpktget function in the drivers/net/ethernet/amazon/ena/enaethcom.c file of the Ethernet adapter support driver for Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a...
The vulnerability of the swap inode_boot_loader() function in the fs/ext4/ioctl.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the swapinodebootloader function in the fs/ext4/ioctl.c file of the Ext4 file system in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the UCS-2 encoding in the Node.js software platform, which allows a hacker to trigger a service failure.
The vulnerability of the UCS-2 encoding format in the Node.js software platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
The vulnerability of the hci_conn_del() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to cause a service failure.
The vulnerability of the hciconndel function in the net/bluetooth/hciconn.c module of the Bluetooth subsystem in the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service failures...
The vulnerability of the WriteTIFFImage function in the coders/tiff.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.
The vulnerability of the WriteTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the nvmf_reg_read32() function in the drivers/nvme/host/fabrics.c module of the Linux operating system’s NVME support driver allows a hacker to cause a service failure.
The vulnerability of the nvmfregread32 function in the drivers/nvme/host/fabrics.c module of the Linux kernel’s NVME support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the scrub_submit_extent_sector_read() function in the fs/btrfs/scrub.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.
The vulnerability of the scrubsubmitextentsectorread function in the fs/btrfs/scrub.c module of the Linux file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the definition of the structure imx8mp_blk_ctrl_domain_data{} in the drivers/pmdomain/imx/imx8mp-blk-ctrl.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability related to the definition of the structure imx8mpblkctrldomaindata in the drivers/pmdomain/imx/imx8mp-blk-ctrl.c module of the Linux operating system is linked to errors in the device initialization algorithm. Exploiting this vulnerability can allow an attacker to cause service...
The vulnerability of the gfs2_show_options() function in the fs/gfs2/super.c file of the GFS2 file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the gfs2showoptions function in the fs/gfs2/super.c file of the GFS2 file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rcutasks_rude_wait_gp() function in the kernel/rcu/tasks.h module of the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the rcutasksrudewaitgp function in the kernel/rcu/tasks.h module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the function vb2ops_vdec_queue_setup(), located in the driver/media/platform/mediatek/vcodec/mtk_vcodec_dec.c file of the Linux kernel-based multimedia device drivers, allows a hacker to cause a service failure.
The vulnerability of the function vb2opsvdecqueuesetup in the driver/media/platform/mediatek/vcodec/mtkvcodecdec.c file of the Linux kernel-based multimedia device drivers is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the lookup_ioctl() function in the drivers/md/dm-ioctl.c module of the support for multiple devices (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the lookupioctl function in the drivers/md/dm-ioctl.c module of the Linux support driver for multiple devices such as RAID and LVM is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the TestId parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the testid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the OpenSky flight planning and operational management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the filename parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotel...
The vulnerability of the ext4_truncate() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4truncate function in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the sanity_check_curseg() function in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sanitycheckcurseg function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Rule Based Authorization Plugin for the Apache Solr search engine allows a perpetrator to send arbitrary HTTP requests.
The vulnerability of the Rule Based Authorization Plugin for the Apache Solr search server is related to deficiencies in the authorization process. Exploiting this vulnerability allows a malicious actor to send arbitrary HTTP requests remotely...
The vulnerability of the pot_hole() function in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pothole function in the Linux operating system’s kernel is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the `ntfs_read inode_mount()` function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ntfsread inodemount function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the `__ieee80211_scan_completed()` function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ieee80211scancompleted function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the optc1_enable_optc_clock() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the optc1enableoptcclock function in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the MontageImageCommand function in the MagickWand/montage.c component of the ImageMagick console graphics editor allows a hacker to cause a service failure.
The vulnerability of the MontageImageCommand function in the MagickWand/montage.c component of the ImageMagick console graphics editor is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability could allow a malicious actor to cause...
The vulnerability of the url.parse() function in the Node.js software platform allows attackers to compromise data integrity.
The vulnerability of the url.parse function in the Node.js software platform is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...
The vulnerability of the __hfs_bnode_create() function in the fs/hfs/bnode.c module of the Linux kernel file system allows a attacker to cause a service failure.
The vulnerability of the hfsbnodecreate function in the fs/hfs/bnode.c file of the Linux kernel file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause service failures...
The vulnerability of the nilfs_bmap_lookup_at_level() function in the fs/niljs2/bmap.c file of the NILFS2 file system of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nilfsbmaplookupatlevel function in the fs/nilfs2/bmap.c file of the NILFS2 file system in the Linux operating system is related to incorrect checking of the returned value from this function. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getLogPlan parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the TestId parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the OpenSky flight planning and operational management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...
The vulnerability of the _regulator_do_enable() function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulators driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the regulatordoenable function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulators driver relates to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the `snd_pcm_oss_period_size()` function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sndpcmossperiodsize function in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the cpe_mime_handlers() function in Linksys E9450-SG router software allows a hacker to execute arbitrary code.
The vulnerability of the cpemimehandlers function in the Linksys E9450-SG router’s microprogramming software, where authentication is absent for the critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...
Vulnerability of the platform for creating individual web applications in CRM. The vulnerability lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the platform for creating individual web applications in CRM involves the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the gfs2_dinode_in() function in the fs/gfs2/dir.c file of the GFS2 file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the gfs2dinodein function in the fs/gfs2/dir.c file of the GFS2 file system in the Linux operating system is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `dwc_pcie_register_dev()` function in the `drivers/perf/dwc_pcie_pmu.c` driver module, a Linux kernel performance monitoring driver, allows a attacker to cause a service failure.
The vulnerability of the dwcpcieregisterdev function in the drivers/perf/dwcpciepmu.c driver, a Linux kernel performance monitoring driver, is related to the use of an incorrect device for initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...