Siemens network software vulnerabilities related to pointer swapping allow attackers to trigger service interruptions.

The vulnerability of Siemens network software is related to the swapping of pointers. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis allows a perpetrator to execute arbitrary code.

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Spell-file processing mechanism in the text editor Vim, which allows a hacker to trigger a service failure.

The vulnerability of the Spell-file processing mechanism in the text editor Vim relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `init_amd_bd()` function in the `arch/x86/kernel/cpu/amd.c` module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the initamdbd function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the server daemon incusd in the container management system and the Incus virtual machine manager allows a hacker to trigger a service failure.

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the tar.replace() function in the node-tar library on the Node.js software platform allows a hacker to trigger a denial-of-service attack.

The vulnerability of the tar.replace function in the node-tar library of the Node.js software platform is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Уязвимость модуля «Редактор для контент-менеджеров» системы управления содержимым сайтов (CMS) 1С-Битрикс: Управление сайтом, связанная с неполной очисткой временных или вспомогательных ресурсов, позволяющая нарушителю выполнить произвольный код

Уязвимость модуля «Редактор для контент-менеджеров» системы управления содержимым сайтов CMS 1С-Битрикс: Управление сайтом связана с неполной очисткой временных или вспомогательных ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

The vulnerability of the gnutls_x509_crt_check_hostname2() function in the lib/x509/hostname-verify.c file of the GnuTLS cryptographic library allows a attacker to perform a MITM attack.

The vulnerability of the gnutlsx509crtcheckhostname2 function in the lib/x509/hostname-verify.c file of the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to perform a MITM attack...

The vulnerability of the _gnutls_proc_rsa_psk_client_kx() function in the lib/auth/rsa_psk.c file of the GnuTLS cryptographic library allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the gnutlsprocrsapskclientkx function in the lib/auth/rsapsk.c file of the GnuTLS cryptographic library is related to incorrect handling of zero bytes or NULL characters during data exchange. Exploiting this vulnerability could allow an attacker to bypass existing security...

The vulnerability of the DefaultHttp2FrameReader class in the framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause a service failure.

The vulnerability of the DefaultHttp2FrameReader class in the network application development framework for protocols like Netty relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the SP Page Builder component of the JoomShaper application software allows a hacker to execute arbitrary code.

The vulnerability of the SP Page Builder component of the JoomShape application software involves unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the mdp5_pipe_release() function in the drivers/gpu/drm/msm/disp/mdp5/mdp5_pipe.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mdp5piperelease function in the drivers/gpu/drm/msm/disp/mdp5/mdp5pipe.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

The vulnerability of the aiohttp HTTP client, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the aiohttp HTTP client is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis in the software for network routing on Unix-like systems allows attackers to cause service interruptions.

The vulnerability of OSPF traffic analyzer and TLV segment routing analysis tools used in Unix-based systems for network routing implementation is related to integer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the CheckRepoScopedToken() function in the Git repository management system Gitea, which allows a hacker to increase their privileges.

The vulnerability of the CheckRepoScopedToken function in the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the software for storing and analyzing distributed tracebacks of Grafana Tempo allows a perpetrator to cause a service failure due to uncontrolled resource consumption.

The vulnerability of the software for storing and analyzing distributed tracebacks of Grafana Tempo is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the built-in data source “grafana-testdata-datasource” of the Grafana monitoring and analytics platform allows a attacker to trigger a service failure.

The vulnerability of the grafana-testdata-datasource data source used in Grafana monitoring and observability solutions relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the gpiochip_add_data_with_key() function in the drivers/gpio/gpiolib.c file of the Linux kernel’s GPIO driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gpiochipadddatawithkey function in the drivers/gpio/gpiolib.c module of the Linux kernel GPIO driver is related to a race condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the tcf_idrinfodestroy() function in the net/sched/act_api.c module of the net/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfidrinfodestroy function in the net/sched/actapi.c module of the net/sched subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the svc_rdma_copyInline_range() function in the net/sunrpc/xprtrdma/svc_rdma_rw.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the svcrdmacopyInlinerange function in the net/sunrpc/xprtrdma/svcrdmarw.c module of the Linux operating system’s RPC protocol is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the c_start() function in the arch/loongarch/kernel/proc.c module, which supports the LoongArch architecture of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the cstart function in the arch/loongarch/kernel/proc.c module, which supports the LoongArch architecture of the Linux operating system, is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the IPv6 packet processing module in the PAN-OS operating system and the Prisma Access cloud security remote access system allows attackers to bypass existing security mechanisms.

The vulnerability of the IPv6 packet processing module in the PAN-OS operating system and the Prisma Access cloud security remote access system is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms...

The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent, related to errors in the certificate validation process, allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack...

The vulnerability in the virtual machine of the cloud security platform Palo Alto Networks Cortex XDR Broker VM, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the virtual machine on Palo Alto Networks Cortex XDR Broker VM in cloud security platforms relates to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the network traffic processing module of the PAN-OS operating system, as well as the remote access agent for users to access corporate resources and applications, allows a hacker to cause a service failure.

The vulnerability of the network traffic processing module in the PAN-OS operating system, as well as the remote access agent for users to access corporate resources and applications, involves improper handling of unusual or exceptional states. Exploiting this vulnerability can allow a malicious...

The vulnerability of the tarfile module in the Python programming language, which allows attackers to compromise the integrity of protected information

The vulnerability of the tarfile module in the Python programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the mathexp.Resample function on the Grafana monitoring and observation platform allows a hacker to cause a service failure.

The vulnerability of the mathexp.Resample function on the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the `z_erofs_do_map_blocks()` function in the `fs/erofs/zmap.c` file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the zerofsdomapblocks function in the fs/erofs/zmap.c file of the EROFS Enhanced ReadOnly File System file system in the Linux operating system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerabilities of the functions bpf_jit_binary_hdr() and bpf_jit_free() in the kernel/bpf/core.c module of the Linux operating system’s bpf interpreter allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions bpfjitbinaryhdr and bpfjitfree in the kernel/bpf/core.c module of the Linux operating system’s bpf interpreter are related to reading memory beyond the allocated buffer. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality...

The vulnerability in the web interface of the operating system PAN-OS, which allows a perpetrator to disclose protected information

The vulnerability of the PAN-OS operating system’s web management interface is related to the disclosure of information through caching. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the User-ID Terminal Server Agent component of the PAN-OS operating system, as well as the user remote access agent for corporate resources and applications, the Palo Alto Networks Prisma Access Agent, allows a perpetrator to trigger service interruptions or execute arbitrary codes.

The vulnerability of the User-ID Terminal Server Agent component of the PAN-OS operating system, as well as the user remote access agent for corporate resources and applications, namely the Palo Alto Networks Prisma Access Agent, is related to buffer overflow attacks. Exploiting this vulnerabilit...

The vulnerability of the fuse_uring_req_end() function in the fs/fuse/dev_uring.c file of the Linux kernel operating system allows a attacker to trigger a service failure.

The vulnerability of the fuseuringreqend function in the fs/fuse/devuring.c file of the Linux kernel operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfsd_open_local_fh() function in the fs/nfsd/localio.c module, which is part of the NFS network file system support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nfsdopenlocalfh function in the fs/nfsd/localio.c module, which is part of the NFS network file system support in Linux kernel, is related to the use of an invalid file descriptor. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the rt6_make_pcpu_route() function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the rt6makepcpuroute function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...

The vulnerability of the command-line interface of the PAN-OS operating system, allowing a perpetrator to execute arbitrary commands

The vulnerability of the command-line interface of the PAN-OS operating system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Large Scale VPN (LSVPN) module of the PAN-OS operating system, which allows a intruder to disclose protected information

The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the file system of Oracle Solaris, which allows a perpetrator to gain unauthorized access to protected information or cause service failures

The vulnerability of the Oracle Solaris operating system’s file system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the `primehandle_to_fd` function in the `ivpu` component of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the primehandletofd function in the ivpu component of the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Python programming language’s HTTP client module allows attackers to inject arbitrary HTTP headers.

The vulnerability of the Python programming language’s HTTP client module is related to the failure to take measures to neutralize crlf sequences. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

The vulnerability of adding additional tools and integration libraries for the Go language OpenTelemetry framework allows a perpetrator to execute arbitrary code.

The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the fuel_gauge_external_power_changed() function in the drivers/power/supply/axp288_fuel_gauge.c driver of the Linux operating system’s power management driver, which allows a hacker to cause a service failure.

The vulnerability of the fuelgaugeexternalpowerchanged function in the drivers/power/supply/axp288fuelgauge.c file of the Linux kernel’s power management driver is related to the racing scenario. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the DLP agent for remote access to corporate resources and applications by Palo Alto Networks Prisma Access Agent allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DLP agent for remote access to corporate resources and applications by Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the src/filters/dmx_nhml.c component of the GPAC multimedia platform allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the src/filters/dmxnhml.c component of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code...

The vulnerability of the Libjxl library, related to the execution of operations beyond buffer boundaries in memory, allows attackers to cause a service failure.

The vulnerability of the Libjxl library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the parser for BLF files in the Wireshark traffic analyzer software allows a hacker to disclose protected information.

The vulnerability of the Wireshark parser for analyzing BLF files related to traffic analysis in computer networks is linked to errors during initialization. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

The vulnerability of the Large Scale VPN (LSVPN) module of the PAN-OS operating system, which allows a intruder to disclose protected information

The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the smb2_set_ea() function in the fs/smb/server/smb2pdu.c module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the smb2setea function in the fs/smb/server/smb2pdu.c module of the SMB server implementation in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allo...

The vulnerability of the wusb3801probe() function in the drivers/usb/typec/wusb3801.c file of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.

The vulnerability of the wusb3801probe function in the drivers/usb/typec/wusb3801.c file of the Linux USB TypeC driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty arises from deficiencies in HTTP request processing. This allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...

The vulnerability of the TraceQL query language used in the software for storing and analyzing distributed tracebacks of Grafana Tempo allows a attacker to cause a service failure.

The vulnerability of the TraceQL query language used in Grafana Tempo’s storage and analysis software for distributed trace data involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...