95883 matches found
The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ASHLAR encoder in the console-based graphic editor ImageMagic, related to incorrect restrictions on the path name to the directory, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the TableNG component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary code.
The vulnerability of the TableNG component of the Grafana monitoring and observation platform is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the `ReindentFilter._get_offset()` function in the `sqlparse/filters/reindent.py` file of the SQL parser module for Python Sqlparse allows a attacker to compromise the accessibility of protected information.
The vulnerability of the ReindentFilter.getoffset function in the sqlparse/filters/reindent.py file of the SQL parser module for Python’s Sqlparse is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the qusb2_phy_probe() function in the drivers/phy/qualcomm/phy-qcom-qusb2.c file of the Linux kernel’s PHY driver allows a hacker to cause a service failure.
The vulnerability of the qusb2phyprobe function in the drivers/phy/qualcomm/phy-qcom-qusb2.c file of the Linux kernel’s PHY driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the xe_sync_entry_parse() function in the drivers/gpu/drm/xe/xe_sync.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the xesyncentryparse function in the drivers/gpu/drm/xe/xesync.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to insufficient checking of exception conditions. Exploiting this vulnerability could allow an attacker to cause...
The vulnerability of the rsi_kill_thread() function in the drivers/net/wireless/rsi/rsi_common.h module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the rsikillthread function in the drivers/net/wireless/rsi/rsicommon.h file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pvr_fwTraceDebugfsInit() function in the drivers/gpu/drm/imagination/pvr_fwTrace.c driver, a part of the Direct Rendering Infrastructure (DRI) kernel driver for Linux operating systems. This vulnerability allows an attacker to cause a service failure.
The vulnerability of the pvrfwTraceDebugfsInit function in the drivers/gpu/drm/imagination/pvrfwTrace.c file of the Direct Rendering Infrastructure DRI driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the vti6_init_net() function in the net/ipv6/ip6_vti.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vti6initnet function in the net/ipv6/ip6vti.c module of the Linux kernel’s IPv6 implementation is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the rds_ib_setup_qp() function in the net/rds/ib_cm.c module of the Linux kernel’s networking functions allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rdsibsetupqp function in the net/rds/ibcm.c module of the Linux kernel’s networking functions is related to unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the aa_sock_msg_perm() function in the security/apparmor/lsm.c module of the AppArmor security component for the Linux operating system allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the aasockmsgperm function in the security/apparmor/lsm.c module of the AppArmor security component of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrit...
The vulnerability of the mcp23s08_probe() function in the drivers/pinctrl/pinctrl-mcp23s08_spi.c driver for Linux kernel’s PINCTRL output devices allows a hacker to cause a service failure.
The vulnerability of the mcp23s08probe function in the drivers/pinctrl/pinctrl-mcp23s08spi.c file of the Linux kernel’s GPIO controller driver is related to the pointer assignment. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the bond_do_ioctl() function in the drivers/net/bonding/bond_main.c file of the Linux kernel network device driver allows a attacker to cause a service failure.
The vulnerability of the bonddoioctl function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the qcom_slim_ngd_ctrl_probe() function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the qcomslimngdctrlprobe function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the agp_amd64_probe() function in the drivers/char/agp/amd64-agp.c file of the Linux kernel driver module allows a hacker to cause a system failure.
The vulnerability of the agpamd64probe function in the drivers/char/agp/amd64-agp.c file of the Linux kernel driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the s3c64xx_spi_remove() function in the drivers/spi/spi-s3c64xx.c file of the Linux operating system’s SPI device driver allows a attacker to cause a service failure.
The vulnerability of the s3c64xxspiremove function in the drivers/spi/spi-s3c64xx.c file of the Linux kernel’s SPI device driver is related to the pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the kvm_vcpu_init_nested() function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the kvmvcpuinitnested function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the hbh_mt6_check() function in the net/ipv6/netfilter/ip6t_hbh.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to access protected information or cause a service failure.
The vulnerability of the hbhmt6check function in the net/ipv6/netfilter/ip6thbh.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to access protected...
The vulnerability of the AppAuthentication::verifyCode() method in the packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php file of the component set for the accelerated development of the Filament PHP framework Laravel allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the AppAuthentication::verifyCode method in the packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php file of the Filament PHP framework’s Laravel set is related to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow an...
The vulnerability of the Qualcomm IPA module driver drivers/net/ipa/reg/gsi_reg-v5.0.c in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the Qualcomm IPA module driver in the Linux operating system’s kernel, located at drivers/net/ipa/reg/gsireg-v5.0.c, is related to incorrect type conversion or casting. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of the functions dvcman_call_on_receive() and dvcman_channel_close() in the channels/drdynvc/client/drdynvc_main.c file of the RDP client FreeRDP, which allows a intruder to gain unauthorized access to protected information
The vulnerabilities of the functions dvcmancallonreceive and dvcmanchannelclose in the file channels/drdynvc/client/drdynvcmain.c of the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker operating remotely...
The vulnerability of the JNDIRealm component in the Apache Tomcat application server allows a hacker to bypass security restrictions.
The vulnerability of the JNDIRealm component in the Apache Tomcat application server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...
The vulnerability of the sub_41802C() function in the /boafrm/formLtefotaUpgradeFibocom file of the LTE Module Firmware Upgrade component of the D-Link DIR-825M router’s microprogramming system allows a intruder to execute arbitrary code.
The vulnerability of the sub41802C function in the /boafrm/formLtefotaUpgradeFibocom file of the LTE Module Firmware Upgrade component of the D-Link DIR-825M router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability coul...
The vulnerability of Windows Event Logging, a service in the Windows operating system, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Windows Event Logging service is related to the improper saving of generated signatures due to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the appendElement() function in the XML document access and management module XMLDOM allows a attacker to cause a service failure.
The vulnerability of the appendElement function in the XML document access and management module XMLDOM is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software, allowing a hacker to gain full control over the system
The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system...
The vulnerability of the tpm_dev_release() function in the drivers/char/tpm/tpm-chip.c module of the Linux operating system’s character device driver for TPM-core devices allows a hacker to trigger a service failure.
The vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module of the Linux TPM-devices driver module is related to improper inter-process communication for critical data deletion. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the vfio_group_ioctl_set_container() function in the drivers/vfio/group.c module of the VFIO device driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the vfiogroupioctlsetcontainer function in the drivers/vfio/group.c module of the VFIO device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __ftrace_event_enable_disable() function in the kernel/trace/traceevents.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.
The vulnerability of the ftraceeventenabledisable function in the kernel/trace/traceevents.c module, which supports Linux operating system’s kernel tracing, is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service...
The vulnerability of the __do_adjtimex() function in the kernel/time/timekeeping.c module of the Linux operating system’s timer subsystem allows a attacker to cause a service failure.
The vulnerability of the doadjtimex function in the kernel/time/timekeeping.c module of the Linux operating system’s timer subsystem is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the swap_writeout() function in the mm/swap_state.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the swapwriteout function in the mm/swapstate.c module of the Linux kernel’s memory management subsystem is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the cdns_resume() function in the drivers/usb/cdns3/core.c file of the Linux operating system’s device driver framework allows a hacker to induce a service failure.
The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the usblp_probe() function in the drivers/usb/class/usblp.c file of the Linux operating system’s USB device driver module allows a malicious actor to cause a service failure.
The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the idpf_idc_vport_dev_down() function in the drivers/net/ethernet/intel/idpf/idpf_idc.c module of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the idpfidcvportdevdown function in the drivers/net/ethernet/intel/idpf/idpfidc.c module of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the btrfs_read_disk_super() function in the fs/btrfs/volumes.c module of the Linux kernel file system allows a attacker to cause a service failure.
The vulnerability of the btrfsreaddisksuper function in the fs/btrfs/volumes.c file of the Linux kernel’s file system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the dmemcg_limit_write() function in the kernel/cgroup/dmem.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dmemcglimitwrite function in the kernel/cgroup/dmem.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nested_sync_control_from_vmcb02() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the nestedsynccontrolfromvmcb02 function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow ...
The vulnerability of the ctrlcmd_bye() function in the net/qrtr/ns.c module allows a hacker to trigger a service failure for Qualcomm IPC kernel-based Linux operating systems.
The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the mchp_coreqspi_transfer_one() function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux operating system’s SPI device driver allows a hacker to cause a service failure.
The vulnerability of the mchpcoreqspitransferone function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux kernel’s SPI device driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the vmclock_miscdev_mmap() function in the drivers/ptp/ptp_vmclock.c file of Linux kernel systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the vmclockmiscdevmmap function in the drivers/ptp/ptpvmclock.c file of Linux kernel operating systems is related to incorrect execution permissions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protect...
The vulnerability of the LibreNMS network monitoring system, related to the lack of protection for the website structure, allows attackers to perform cross-site scripting attacks (XSS) and increase their privileges.
The vulnerability of the LibreNMS network monitoring system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS and increase their privileges...
The vulnerability in the function amdgpu_dm_hpd_init() of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for Linux kernel allows a attacker to cause a service failure.
The vulnerability of the amdgpudmhpdinit function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmirq.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker...
The vulnerability of the __kvm_apic_update_irr() function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86-based Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the kvmapicupdateirr function in the arch/x86/kvm/lapic.c module of the virtualization subsystem on the x86-based Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the tracing_release_pipe() function in the kernel/trace/trace.c module, which supports kernel tracing in the Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the tracingreleasepipe function in the kernel/trace/trace.c module, which supports kernel tracing in Linux operating systems, is related to the absence of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a...
The vulnerability of the iscsit_close_session() function in the drivers/target/iscsi/iscsi_target.c file of the Linux kernel’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iscsitclosesession function in the drivers/target/iscsi/iscsitarget.c file of the Linux kernel’s TCM driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the sock_recv_cmsgs() function in the include/net/sock.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the sockrecvcmsgs function in the include/net/sock.h module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `__btrfs_run_delayed_items()` function in the fs/btrfs/delayed-inode.c file of the Btrfs file system in the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the btrfsrundelayeditems function in the fs/btrfs/delayed-inode.c file of the Btrfs file system in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mpi3mr_probe() function in the drivers/scsi/mpi3mr/mpi3mr_os.c file of the Linux operating system’s SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mpi3mrprobe function in the drivers/scsi/mpi3mr/mpi3mros.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the bfqq_request_over_limit() function in the block/bfq-iosched.c module exposes the block-level support for the Linux operating system, allowing a hacker to cause a service failure.
The vulnerability of the bfqqrequestoverlimit function in the block/bfq-iosched.c module related to Linux’s block-level kernel support involves errors related to division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pci_endpoint_test_ioctl() function in the drivers/misc/pci_endpoint_test.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pciendpointtestioctl function in the drivers/misc/pciendpointtest.c module of the Linux kernel is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...