74701 matches found
The vulnerability in the `net/ipv4/udp_offload.c` module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/ipv4/udpoffload.c module of the Linux operating system is related to incorrect data type conversion. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the application software of the Central Medical Information System of the State Health Information System (GIS SZ), related to the unencrypted storage of critical information, allows a perpetrator to disclose identification data.
The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...
The vulnerability of the recovery environment in Dell SupportAssist OS Recovery, related to the creation of temporary files with insecure permissions, allows a malicious actor to escalate their privileges.
The vulnerability of the recovery environment in Dell SupportAssist OS Recovery relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the read_string() function in the hwmon component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the readstring function in the hwmon component of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the rescan_work_func() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the rescanworkfunc function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `ksmbd_krb5_authenticate()` function in the `ksmbd` component of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the ksmbdkrb5authenticate function in the ksmbd component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...
The vulnerability of the LDAP protocol implementation in HashiCorp’s Vault and Vault Enterprise archiving platforms allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the LDAP protocol implementation in HashiCorp Vault and Vault Enterprise, a platform for archiving corporate information, is related to the improper handling of gaps when processing the usernameasalias parameter. Exploiting this vulnerability can allow an attacker to bypass...
The vulnerability of the DEVICE_PING command in the monitoring and control software for solar energy systems, Tigo Cloud Connect Advanced (CCA), allows a hacker to gain unauthorized access to protected information, execute arbitrary commands, or cause service interruptions.
The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...
The vulnerability in the `drivers/net/phy/mscc/mscc_ptp.c` module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/net/phy/mscc/msccptp.c module of the Linux kernel lies in the lack of memory release after the effective lifespan of the module has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the kernel module drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c kernel of the Linux operating system is related to improper checking of power conditions and hardware states. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the mlb_usio_probe() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mlbusioprobe function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `cscfg_load_config_sets()` function in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the cscfgloadconfigsets function in the Linux operating system kernel arises from a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mlx5 driver for the RDMA subsystem of Linux operating systems allows a hacker to escalate their privileges, execute arbitrary code, or cause service failures.
The vulnerability of the mlx5 driver for the RDMA subsystem of Linux operating systems relates to the ability to access memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or cause service failures...
The vulnerability of the atmtcp_c_send() function in the Linux operating system’s ATM component allows a hacker to trigger a service failure.
The vulnerability of the atmtcpcsend function in the Linux operating system’s ATM component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the API component of the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) allows a perpetrator to execute arbitrary commands.
The vulnerability of the API components of the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands...
The vulnerability of the usb_acpi_add_usb4_devlink() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the usbacpiaddusb4devlink function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the module drivers/gpu/drm/display/drm_hdmi_audio_helper.c of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/gpu/drm/display/drmhdmiaudiohelper.c module of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `update-ldcache` function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability in the update-ldcache function of software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, arises from an improper definition of symbolic references before accessing files. Exploiting this vulnerabili...
The vulnerability of the wled_configure() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the wledconfigure function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the `bnxt_ulp_stop()` and `bnxt_ulp_start()` functions in the Linux operating system’s RoCE kernel driver allow a hacker to trigger a service failure.
The vulnerability of the bnxtulpstop and bnxtulpstart functions in the RoCE kernel driver of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the usbnet_read_cmd() function in the include/linux/etherdevice.h library of Linux kernel allows a hacker to induce a service failure.
The vulnerability of the usbnetreadcmd function in the include/linux/etherdevice.h library of Linux kernel operating systems is a flaw in error handling. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the `total_valid_block_count` function in the fs/f2fs/f2fs.h library of Linux kernel allows a hacker to trigger a denial-of-service attack.
The vulnerability of the totalvalidblockcount function in the fs/f2fs/f2fs.h library of Linux kernel systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the web interface for managing the Cisco Unified Intelligence Center reporting software and the Cisco Unified Contact Center Express operator automation software allows a malicious individual to execute arbitrary commands and increase their privileges.
The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the unlimited download of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and...
The vulnerability of the `cifs_signal_cifsd_for_reconnect()` function in the `fs/smb/client/cifsglob.h` and `fs/smb/client/connect.c` files, which are part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the cifssignalcifsdforreconnect function in the fs/smb/client/cifsglob.h and fs/smb/client/connect.c files, which are part of the SMB client support in Linux kernel, is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain unauthorized access to protected information and perform cross-site scripting attacks.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to access and modify data.
The vulnerability of the Cisco Identity Services Engine ISE’s web management interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and modify data by sending a specially crafted HTTP request...
The vulnerability of the WinRAR file archiver, related to incorrect restrictions on the path name of the restricted directory, allows a hacker to execute arbitrary code.
The vulnerability of the WinRAR file archiver is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability allows an attacker to execute arbitrary code during the extraction of a specially crafted file...
The vulnerability of the kmem_cachedestroy() function in the dswstate.c module of Linux kernel allows a hacker to cause a service failure.
The vulnerability of the kmemcacheDestroy function in the dswstate.c module of Linux kernel systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the br_multicast_port_ctx_init() function in the net/bridge/br_multicast.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the br Multicast Port Context Initialization function in the net/bridge/br Multicast.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the vhciFlush() function in the include/linux/skbuff.h library of the Linux Bluetooth kernel component allows a attacker to execute arbitrary code, gain elevated privileges, or cause a service failure.
The vulnerability of the vhciFlush function in the include/linux/skbuff.h library of the Linux Bluetooth kernel component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code, increase their privileges, or cause service...
The vulnerability of the atm_account_tx() function in the Linux operating system’s kernel component allows a hacker to cause a service failure.
The vulnerability of the atmaccounttx function in the Linux operating system’s kernel component is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the `cscfg_csdev_enable_active_config()` function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the cscfgcsdevenableactiveconfig function in the Linux operating system kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the UEFI Management mode of the microprogramming software in embedded platforms for artificial intelligence NVIDIA Jetson Orin Series, NVIDIA Xavier Series, and IGX Orin allows a perpetrator to execute arbitrary code, gain unauthorized access to read and modify protected information, or cause system failures.
The vulnerability of the UEFI Management mode of microprogramming software in embedded platforms for artificial intelligence, such as NVIDIA Jetson Orin Series, NVIDIA Xavier Series, and IGX Orin, is related to the improper generation of fault reports. Exploiting this vulnerability can allow...
The vulnerability of the ptp_rate() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ptprate function in the Linux operating system’s kernel is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the um_rp_autochannel() function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code.
The vulnerability of the umrpautochannel function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the operation’s output escapes the buffer and is stored in memory when processing the apcliAuthMode2G and apcliAuthMode5G...
The vulnerability of the CP_RESET_CONTEXT_STATE() function in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the CPRESETCONTEXTSTATE function in Linux operating systems is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the page_pool_recycle_in_ring() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the pagepoolrecycleinring function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the IBM Engineering Lifecycle Optimization - Publishing software for creating reports is related to improper neutralization of encoded URI schemes on web pages, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the IBM Engineering Lifecycle Optimization - Publishing software for creating reports is related to improper neutralization of encoded URI schemes on the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the meeting-join function in Cisco WebEx Meetings software allows a perpetrator to carry out a “man-in-the-middle” attack.
The vulnerability of the meeting-join function in Cisco WebEx Meetings software is related to improper verification of certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...
The vulnerability of the dm_get_live_table() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dmgetlivetable function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to cause system failures.
The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures...
The vulnerability of the Vagrant VMWare Utility service lies in the improper assignment of permissions to the critical resource, allowing an attacker to gain read and modify access to files.
The vulnerability of the Vagrant VMWare Utility relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain read and write access to files...
The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet’s FortiNDR (Network Detection and Response), arises from the possibility of copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.
The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...
The vulnerability of PackageKit for macOS operating systems, which allows a hacker to trigger a service failure.
The vulnerability of PackageKit for macOS operating systems is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerabilities of the functions mbedtls_pem_read_buffer() and mbedtls_pk_parse() in the Mbed TLS software allow a attacker to cause a service failure or disclose protected information.
The vulnerability of the mbedtlspemreadbuffer and mbedtlspkparse functions in Mbed TLS is related to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service failures or expose protected information...
The vulnerability of the mbedtls_x509_string_to_names function in Mbed TLS software allows a attacker to execute arbitrary code.
The vulnerability of the mbedtlsx509stringtonames function in Mbed TLS is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the PHP-FPM (FastCGI Process Manager) processor in the Nighthawk WiFi 6 Router software allows a hacker to bypass security restrictions, execute arbitrary code, and gain full control over the system.
The vulnerability of the PHP-FPM FastCGI Process Manager processor in Nighthawk WiFi 6 Router RAX30 involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to bypass security restrictions, execute arbitrary code, or gain full control over the system...
The vulnerability of the Linux operating system’s kernel component, which allows a hacker to cause a service failure
The vulnerability of the Linux operating system’s kernel phy component is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Managed Configuration component for macOS operating systems allows attackers to increase their privileges.
The vulnerability of the Managed Configuration component for macOS operating systems is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability in the WasmToJSException script of the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS allows attackers to execute arbitrary code and trigger a service failure.
The vulnerability of the WasmToJSException script in Safari browsers on macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures within the browser context...