The vulnerability of the document converter in Markdown syntax in HTML RDiscount, related to the operation of writing beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the function nameconstraints_node_list_intersect() in the lib/x509/name_constraints.c file, lines 726-727, of the cryptographic library GnuTLS, allows a attacker to perform a MIT attack.

The vulnerability of the nameconstraintsnodelistintersect function in the lib/x509/nameconstraints.c file, lines 726-727, of the cryptographic library GnuTLS is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to perform a MITM attack...

The vulnerability of the gnutls_x509_crt_check_hostname2() function in the lib/x509/hostname-verify.c file, lines 111,245–265, of the GnuTLS cryptographic library allows a attacker to replace the server and gain unauthorized access to protected information.

The vulnerability of the gnutlsx509crtcheckhostname2 function in the lib/x509/hostname-verify.c file at line 111,245-265 of the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to replace the server and...

The vulnerability of the gnutls_pkcs12_bag_set_data() function in the GnuTLS cryptographic library allows a attacker to damage memory or cause service failures.

The vulnerability of the gnutlspkcs12bagsetdata function in the GnuTLS cryptographic library is related to a single-precision shift error. Exploiting this vulnerability could allow an attacker to corrupt memory or cause service failures...

The vulnerability of the sheet_to_html() function in the artificial intelligence-based web interface Open WebUI allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the sheettohtml function in the Open WebUI artificial intelligence-based web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotel...

The vulnerability of the nmk_pinctrl_dt_subnode_to_map() function in the drivers/pinctrl/nomadik/pinctrl-nomadik.c driver module, which is used by the PINCTRL output controller in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the nmkpinctrldtsubnodetomap function in the drivers/pinctrl/nomadik/pinctrl-nomadik.c driver for Linux kernel-based GPIO controllers is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `dc_state_destruct()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcstatedestruct function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mod_proxy_ftp module in the Apache HTTP Server allows attackers to perform cross-site scripting attacks.

The vulnerability of the modproxyftp module in the Apache HTTP Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the formgponConf function in the /boaform/admin/formgponConf file of the Tenda HG3 router’s microprogramming system, which allows a hacker to execute arbitrary code.

The vulnerability of the formgponConf function in the /boaform/admin/formgponConf file of the Tenda HG3 router’s microprogramming system is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Scheduler component in the microprogramming software for the routing and switching platform RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 allows a attacker to execute arbitrary commands.

The vulnerability of the Scheduler component in the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 lies in the lack of measures to neutralize specific elements. Exploiting this...

The vulnerability of the gnutls_pkcs11_token_set_pin() function in the lib/pkcs11_write.c file of the GnuTLS cryptographic library allows a attacker to cause a service failure.

The vulnerability of the gnutlspkcs11tokensetpin function in the lib/pkcs11write.c file of the GnuTLS cryptographic library is related to a buffer out-of-bounds exception due to a pointer that has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tee_shm_register_user_buf() function in the drivers/tee/tee_shm.c module of the Linux kernel’s trusted execution environment allows a attacker to cause a service failure.

The vulnerability of the teeshmregisteruserbuf function in the drivers/tee/teeshm.c module of the Linux kernel’s trusted execution environment is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the aa_simple_write_to_buffer() function in the security/apparmor/apparmorfs.c module of the AppArmor security component for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the aasimplewritetobuffer function in the security/apparmor/apparmorfs.c module of the AppArmor security component of the Linux operating system’s kernel is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could...

The vulnerability of the M.read() function in the neovim text editor’s View Branch component allows a hacker to execute arbitrary code.

The vulnerability of the M.read function in the neovim text editor’s View Branch component is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the X.509 Certificate Handler component of the cryptographic C++ Botan library allows a perpetrator to forge OCSP responses.

The vulnerability of the X.509 Certificate Handler component of the C++ Botan cryptographic library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to forge OCSP responses remotely...

The vulnerability of the __iov_iter_get_pages_alloc() function in the lib/iov_iter.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the iovitergetpagesalloc function in the lib/ioviter.c module of the Linux operating system’s kernel is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the Open WebUI web interface, related to improper session management, allows a malicious actor to gain access to read, modify, and delete data.

The vulnerability in the Open WebUI artificial intelligence-based web interface is related to improper session management. Exploiting this vulnerability can allow a malicious actor to gain read, modify, and delete access to data...

The vulnerability of the rockchip_spi_config() function in the drivers/spi/spi-rockchip.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipspiconfig function in the drivers/spi/spi-rockchip.c module of the Linux system’s SPI device driver relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the ota_new_upgrade() function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software allows a hacker to execute arbitrary commands.

The vulnerability of the otanewupgrade function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the mtd_check_of_node() function in the drivers/mtd/mtdcore.c file of the memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mtdcheckofnode function in the drivers/mtd/mtdcore.c file of the Linux operating system’s memory driver module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the hash-table implementation of the Slot-Based Execution (SBE) mechanism in the MongoDB database management system allows a hacker to induce a service failure.

The vulnerability of the Slot-Based Execution SBE hash table implementation in the MongoDB database management system is related to a mistake in releasing memory that has already been released. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the `virtio_gpu_get_caps_ioctl()` function in the `drivers/gpu/drm/virtio/virtgpu_ioctl.c` driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the virtiogpugetcapsioctl function in the drivers/gpu/drm/virtio/virtgpuioctl.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of pointers L. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the `tap_get_user()` function in the `drivers/net/tap.c` file of the Linux kernel’s network device driver module allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tapgetuser function in the drivers/net/tap.c file of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the /boaform/formCountrystri file in the microprogramming software for the Tenda HG3 router allows a hacker to execute arbitrary code.

The vulnerability of the /boaform/formCountrystri file of the Tenda HG3 router microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the setDmzCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software, allowing a malicious user to execute arbitrary commands.

The vulnerability of the setDmzCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the amdgpudebugfs_vm_infoShow() function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c driver module allows a hacker to cause a system failure. This vulnerability is related to AMD GPU cores in Linux operating systems that support Direct Rendering Infrastructure (DRI).

The vulnerability of the amdgpudebugfsvminfoShow function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c driver module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the MQTT 5 framework for developing network applications, servers, and clients using Netty protocol allows a hacker to cause a service failure.

The vulnerability of the MQTT 5 framework for developing network applications, servers, and client protocols related to Netty involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the containerd execution environment, related to insecure management of privileges, allows a perpetrator to circumvent existing security restrictions or enhance their privileges.

The vulnerability of the containerd execution environment is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions or enhance their privileges...

The vulnerability of the Open WebUI web interface, related to the lack of authentication, allows a perpetrator to gain access to read, modify, and delete data.

The vulnerability of the Open WebUI web interface relates to the lack of authorization during the processing of the final endpoint /api/v1/retrieval/process/web. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, and delete data...

The vulnerability of the `cachefiles_prepare_write_subreq()` function in the `fs/cachefiles/io.c` module of the Linux kernel file system support module allows a attacker to cause a service failure.

The vulnerability of the cachefilespreparewritesubreq function in the fs/cachefiles/io.c module of the Linux kernel’s file system support module is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the setStorageCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the setStorageCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the DTLS implementation of the GnuTLS cryptographic library allows a attacker to induce a service failure.

The vulnerability of the DTLS protocol implementation of the GnuTLS cryptographic library is related to unpredictable behavior of functions due to inconsistencies in parameter values. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the npm library extract-zip’s mechanism for processing symbolic links allows a hacker to execute arbitrary code.

The vulnerability of the npm library extract-zip’s mechanism for handling symbolic links is related to errors in link processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the software platform’s rendering of wiki markup in a Git-based development environment, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the software platform that renders wiki markup for collaborative code development on Git-based platforms for GitLab EE/CE involves insufficient protection of website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of the Management Daemon (MGD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to induce a service failure.

The vulnerability of the Management Daemon MGD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the nfsd_set_fh_dentry() function in the fs/nfsd/nfsfh.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfsdsetfhdentry function in the fs/nfsd/nfsfh.c module, which supports the Network File System in Linux kernels, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis allows a perpetrator to execute arbitrary code.

The vulnerability of the REST API implementation of the Splunk Enterprise platform for operational analysis is related to the lack of measures taken at the management level when processing the unarchivecmd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the metaencoder of the console-based graphic editor ImageMagick, which allows a hacker to disclose protected information

The vulnerability of the metaencoder in the console-based graphic editor ImageMagick relates to reading data outside of the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the aiohttp HTTP client, related to incorrect pathname restrictions for directories, allows attackers to disclose protected information.

The vulnerability of the aiohttp HTTP client is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by the system...

The vulnerability of the Application.add_domain() function in the aiohttp HTTP client allows a perpetrator to cause a service failure.

The vulnerability of the Application.adddomain function in the HTTP client of aiohttp is related to the use of duplicate headers due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the dlfb ops mmap() function in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the dlfb ops mmap function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cow_file_range() function in the fs/btrfs/inode.c module of the file system Btrfs in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the cowfilerange function in the fs/btrfs/inode.c module of the btrfs file system in the Linux kernel lies in the absence of resource locking in case of errors. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the damon_reclaim_init() function in the mm/damon/reclaim.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the damonreclaiminit function in the mm/damon/reclaim.c module of the Linux kernel’s memory management subsystem is related to improper memory release „memory leak“. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `secure_boot_fuse_state_show()` function in the `drivers/platform/mellanox/mlxbf-bootctl.c` kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the securebootfusestateshow function in the drivers/platform/mellanox/mlxbf-bootctl.c kernel module of the Linux operating system is related to the copying of a buffer without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

The vulnerability of the CsteSystem function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software, allowing a malicious user to execute arbitrary commands.

The vulnerability of the CsteSystem function in the /cgi-bin/cstecgi.cgi file, belonging to the CGI Handler component of the TOTOLINK A8000RU router’s software, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the Request.post() function in the aiohttp HTTP client allows a attacker to trigger a service failure.

The vulnerability of the Request.post function in the aiohttp HTTP client is related to unlimited resource distribution or throttling. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the HTTP message analyzer for the llhttp HTTP client and aiohttp allows attackers to inject arbitrary HTTP headers and circumvent existing security restrictions.

The vulnerability of the HTTP message analyzer for the llhttp HTTP client and aiohttp is related to the failure to handle CRLF sequences in HTTP headers when processing the reason parameter. Exploiting this vulnerability allows an attacker to inject arbitrary HTTP headers and circumvent existing...

The vulnerability of the setNtpCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the setNtpCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary command...

The vulnerability of the setup-sandbox.js file in the vm2 package manager of NPM allows a hacker to execute arbitrary code.

The vulnerability of the setup-sandbox.js file in the vm2 package manager’s library in NPM is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...