92298 matches found
The vulnerability of the sidx_box_read() function in the src/isomedia/box_code_base.c file of the GPAC multimedia platform allows a perpetrator to cause a service failure.
The vulnerability of the sidxboxread function in the src/isomedia/boxcodebase.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the `io.netty.handler.codec.http3.QpackDecoder` component in the Netty framework, which is used for developing network applications, servers, and clients. This vulnerability allows a attacker to cause a service failure.
The vulnerability of the io.netty.handler.codec.http3.QpackDecoder component in the Netty framework, which is used for developing network applications, servers, and clients, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to disclose protected information.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...
The vulnerability of the extractBodyFromJms() function in the camel-jms Java framework by Apache Camel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the extractBodyFromJms function in the camel-jms Java framework by Apache Camel is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the Web Proxy Auto-Discovery Protocol (WPAD) implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Web Proxy Auto-Discovery Protocol WPAD implementation in Windows operating systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability in the implementation of the SMB protocol in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the SMB protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of the mod_xml2enc module in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modxml2enc module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the library for acceleration of data loading and preprocessing in NVIDIA DALI, related to deficiencies in the deserialization mechanism, allows a hacker to execute arbitrary code.
The vulnerability of the library for acceleration of data loading and preprocessing in NVIDIA DALI is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Micrometer library in the Spring Boot web application framework allows a attacker to cause a service failure.
The vulnerability of the Micrometer library in the Spring Boot web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted HTTP requests...
The vulnerability of the magick-distribute-cache service in the console-based image editing tool ImageMagick allows a hacker to disclose protected information.
The vulnerability of the magick-distribute-cache service in the console-based image editing tool ImageMagick is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the libcurl library in software applications for interacting with servers via cURL allows a hacker to gain unauthorized access to protected information.
The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the Python programming language’s pip module, related to the inclusion of functions from an unreliable and uncontrolled area, allows a perpetrator to execute arbitrary code.
The vulnerability of the Python programming language’s pip module is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
The vulnerability of the elng_box_read() function in the src/isomedia/box_code_base.c file, belonging to the MP4Box encoder of the GPAC multimedia platform, allows a hacker to disclose protected information or cause service failures.
The vulnerability of the elngboxread function in the src/isomedia/boxcodebase.c file, belonging to the MP4Box encoder of the GPAC multimedia platform, is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to reading data outside of the allowed range in memory, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors involves reading data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...
The vulnerability of the Open Asset Import Library’s 3D model import library (Assimp) lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code and cause system failures.
The vulnerability of the Open Asset Import Library Assimp, a library for importing 3D models, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service interruptions...
Vulnerability of .NET and Microsoft Visual Studio software platforms, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.
The vulnerability of .NET and Microsoft Visual Studio software platforms is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability in the net/core/skbuff.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the webbrowser module in the CPython interpreter allows a hacker to execute arbitrary commands.
The vulnerability of the webbrowser module in the CPython interpreter is related to the lack of measures taken to protect data at the operating level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the RAR5 file archiver WinRAR’s recovery processing system and the UnRAR decompression tool allows a perpetrator to execute arbitrary code.
The vulnerability of the RAR5 file archiver WinRAR’s volume recovery processing system, as well as the UnRAR decompression tool, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the API CONSUMER_GROUP_DESCRIBE mechanism used by the Apache Kafka messaging broker allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the API CONSUMERGROUPDESCRIBE mechanism used by the Apache Kafka messaging broker is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the ipoa_test() function in the IPoA WAN Connection Setup component of TRENDnet TEW-635BRM’s microprogramming router allows a hacker to execute arbitrary code.
The vulnerability of the ipoatest function in the IPoA WAN Connection Setup component of TRENDnet TEW-635BRM software for routers exposes the system to attack. This vulnerability arises from the lack of measures taken to neutralize specific elements in the output data. Exploiting this vulnerabili...
The vulnerability of the Undertow web server, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the Undertow web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the server daemon incusd in the container management system and the Incus virtual machine manager allows a hacker to trigger a service failure.
The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Open WebUI web interface, related to deficiencies in the authentication process, allows a perpetrator to gain access to read and modify data.
The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to and modify data...
The vulnerability of the client OVN in the container management system and the Incus virtual machine manager allows a attacker to carry out a “man-in-the-middle” attack.
The vulnerability of the client OVN in the container management system and the Incus virtual machine manager is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...
The vulnerability of the Moby container isolation system creation software lies in synchronization errors when using a common resource, allowing an attacker to read and write arbitrary files.
The vulnerability of the Moby container isolation system creation software is related to synchronization errors when using a common resource “Race Conditions”. Exploiting this vulnerability allows an attacker to read and write arbitrary files...
The vulnerability of the tr.Next() method in the container management system and the Incus virtual machine manager allows a attacker to trigger a service failure.
The vulnerability of the tr.Next method in container management systems and the Incus virtual machine manager is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the document converter in Markdown syntax in HTML RDiscount, related to the operation of writing beyond the buffer boundaries in memory, allows attackers to trigger a service failure.
The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of Ollama’s artificial intelligence-based web interface, Open WebUI, allows a hacker to gain unauthorized access to protected information.
The vulnerability of Ollama’s AI-based web interface, Open WebUI, is related to the lack of authentication during the processing of endpoints like /api/generate, /api/embed, /api/embeddings, and /api/show. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to...
The vulnerability of the start_httpd() function in the Web Service component of TRENDnet TEW-635BRM allows a attacker to execute arbitrary code.
The vulnerability of the starthttpd function of the Web Service component of TRENDnet TEW-635BRM software lies in the issue where the operation exceeds the buffer boundaries in memory when processing the devicename parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...
The vulnerability of the server daemon incusd in the container management system and the Incus virtual machine manager allows a hacker to trigger a service failure.
The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the handling of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the DefaultHttpRequest and DefaultFullHttpRequest classes in the Netty framework for developing network applications, servers, and client protocols allows a attacker to send hidden HTTP requests (HTTP Request Smuggling attack).
The vulnerability of the DefaultHttpRequest and DefaultFullHttpRequest classes in the Netty framework for developing network applications, servers, and client protocols is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTT...
The vulnerability of the Django web application software lies in its ability to send session cookies, which allows an attacker to gain unauthorized access to protected information.
The vulnerability of the Django web application framework relates to the ability to send session cookies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, allows attackers to execute arbitrary JavaScript code (XSS).
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...
The vulnerability of the NATS messaging system server, related to deficiencies in authentication procedures, allows attackers to bypass existing security mechanisms and increase their privileges.
The vulnerability of the NATS messaging system server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain increased privileges...
The vulnerability of ZTE MU5250 Wi-Fi routers’ microprogramming software, related to insufficient protection of operational data, allows attackers to disclose confidential information.
The vulnerability of ZTE MU5250 Wi-Fi router microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
The vulnerability of the post.parsedata() function in ZTE ZXHN H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q microprogramming devices allows a hacker to trigger a service failure.
The vulnerability of the post.parsedata function in ZTE ZXHN H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, and H196Q routers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious...
The vulnerability of the etree.iterparse() and ETCompatXMLParser() functions in the Lxml library for processing XML and HTML markup allows attackers to read arbitrary files.
The vulnerability of the etree.iterparse and ETCompatXMLParser functions in the Lxml library for processing XML and HTML markup is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to read arbitrary files...
The vulnerability of the txtin_process_texml() function on the GPAC multimedia platform allows a hacker to trigger a service failure.
The vulnerability of the txtinprocesstexml function on the GPAC multimedia platform is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Moby container isolation system creation software lies in its uncontrolled search element, which allows a hacker to escalate their privileges and execute arbitrary code.
The vulnerability of the Moby containerization system’s software lies in an uncontrolled element of the search process when unpacking xz or gzip compressed archives. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
The vulnerability of the server demon Incus in the container management system and the Incus Virtual Machine Manager allows a hacker to perform an SSRF attack.
The vulnerability of the server daemon incus in the container management and virtual machine manager system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack...
The vulnerability of the server daemon incusd in the container management system and the Incus virtual machine manager allows a hacker to trigger a service failure.
The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the handling of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the futex_key_to_node_opt() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the futexkeytonodeopt function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the sub_41EC14() function in the ssi service of TRENDnet TEW-821DAP wireless access points allows a hacker to execute arbitrary code.
The vulnerability of the sub41EC14 function in the ssi service of TRENDnet TEW-821DAP wireless access points is related to the execution of an operation outside the buffer in memory when processing the nslookuptarget parameter. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the svg_parse_strings() and gf_svg_parse_attribute() functions on the GPAC multimedia platform allows a hacker to induce a service failure.
The vulnerability of the svgparsestrings and gfsvgparseattribute functions on the GPAC multimedia platform is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the contains_dotdot() function in the RDP client FreeRDP allows a hacker to read and write arbitrary files.
The vulnerability of the contains.dot function in the RDP client FreeRDP is related to a single-byte offset error. Exploiting this vulnerability could allow an attacker to read and write arbitrary files remotely...
The vulnerability of the svgin_process() function on the GPAC multimedia platform allows a hacker to induce a service failure.
The vulnerability of the svginprocess function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the formCertListInfo() function in the Tenda CH22 router software allows a hacker to execute arbitrary code.
The vulnerability of the formCertListInfo function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...