74701 matches found
The vulnerability of the formiNICWpsStart() function (/goform/formiNICWpsStar) in the wireless range extender software from Belkin (model F9K1122) allows a intruder to trigger a service failure.
The vulnerability of the formiNICWpsStart function /goform/formiNICWpsStar of the Belkin F9K1122 Wi-Fi range extender software is related to reading data beyond the buffer boundaries in memory when processing the pinCode parameter. Exploiting this vulnerability could allow a malicious actor to...
Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the platform for monitoring, managing, and improving LLM applications lies in the insufficient protection of the website structure, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to insufficient protection of the web page structure when processing the dangerouslySetInnerHTML attribute. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...
The vulnerabilities in the components inode.c, ioctl.c, root-tree.c, and root-tree.h of the Linux operating system’s kernel allow a hacker to cause a service failure.
The vulnerability in the components inode.c, ioctl.c, root-tree.c, and root-tree.h of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the dpll component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.
The vulnerability of the dpll component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
The vulnerability of the mp() function (/goform/mp) in the microprogramming software for Wi-Fi range extension device Belkin F9K1122 allows a intruder to execute arbitrary commands.
The vulnerability of the mp function /goform/mp in the microprogramming software for Wi-Fi range extension by Belkin F9K1122 is related to the lack of measures taken to secure data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
The vulnerability of the formPPTPSetup() function (/goform/formPPTPSetup) of the Wi-Fi range extender software by Belkin F9K1122 allows a intruder to trigger a service failure.
The vulnerability of the formPPTPSetup function /goform/formPPTPSetup of the Belkin F9K1122 Wi-Fi range extender software is related to reading data outside of the buffer in memory when processing the pptpUserName parameter. Exploiting this vulnerability could allow a remote attacker to cause a...
The vulnerability of the nft_tunnel component in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the nfttunnel component in the Linux operating system is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the vmsvga3dSurfaceMipBufferSize() function in the Core component of the Oracle VM VirtualBox software allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability of the vmsvga3dSurfaceMipBufferSize function in the Core component of the Oracle VM VirtualBox software is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...
The vulnerability of the Kconfig components, cpu.c in Linux kernel, allows a hacker to cause a system failure.
The vulnerability of the Kconfig components and the cpu.c kernel in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the formBSSetSitesurvey() function (/goform/formBSSetSitesurvey) in the Wi-Fi range expansion software by Belkin F9K1122 allows a intruder to execute arbitrary commands.
The vulnerability of the formBSSetSitesurvey function /goform/formBSSetSitesurvey of the Belkin F9K1122 Wi-Fi range extender software is related to the lack of measures taken at the control level for data cleaning. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...
The vulnerability of the ath12k module in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ath12k module in the Linux operating system’s kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the xe_migrate.c component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.
The vulnerability of the xemigrate.c component in the Linux operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
The vulnerability of the gpiolib-cdev.c component in the Linux operating system’s kernel allows a hacker to cause service interruptions as well as trigger system failures.
The vulnerability of the gpiolib-cdev.c component in the Linux operating system is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the DHCP Daemon (jdhcpd) on Juniper Networks Junos OS allows a attacker to cause a service failure.
The vulnerability of the DHCP Daemon jdhcpd on Juniper Networks Junos OS stems from operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted DHCP packets...
The vulnerability of the Segnetics SMConfig system configuration tool, which stems from the use of pre-installed credentials, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Segnetics SMConfig system configuration tool is related to the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by sending a specially...
The vulnerability of the Thunderbird email client, related to incorrect processing of the p2-from header, allows attackers to perform spoofing attacks.
The vulnerability of the Thunderbird email client is related to the incorrect processing of the p2-from header. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
The vulnerability of the V8 component in Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the V8 component in Google Chrome browsers is related to errors in data type mixing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code through a specially created HTML page...
The vulnerability in the net/xdp/xsk.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/xdp/xsk.c component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the cmd.c and driver.h components of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the cmd.c and driver.h components of the Linux operating system’s kernel involves reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the alloc_preauth_hash() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the allocpreauthhash function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the editempeducation.php (/admin/editempeducation.php) script of the Employee Management System allows a perpetrator to execute arbitrary code.
The vulnerability of the editempeducation.php /admin/editempeducation.php script of the Employee Management System is related to the failure to remove special elements during the processing of the coursepg parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the config_3g_para function in the microprogramming software of the LBT-T300-T310 industrial router allows a hacker to execute arbitrary code.
The vulnerability of the config3gpara function in the microprogramming software of the LBT-T300-T310 industrial router lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a...
The vulnerability in the ioctl.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ioctl.c component in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the intel/iaa/iaa_crypto_main.c component of the Linux operating system allows a hacker to exploit it, thereby causing a service failure.
The vulnerability in the intel/iaa/iaacryptomain.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the XML Services component of the Oracle BI Publisher software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the XML Services component of the Oracle BI Publisher software for creating reports is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the gf_scene_ns_connect_object() function (compositor/scene_ns.c) in the MP4Box multimedia platform’s utilities allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the gfscenensconnectobject function compositor/scenens.c in the MP4Box multimedia platform’s utilities is related to the pointer manipulation during XMT file processing. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...
The vulnerability of the qplib_fp.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the qplibfp.c component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mpi3mr_app.c and scsi_bsg_mpi3mr.h components of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the mpi3mrapp.c and scsibsgmpi3mr.h components of the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of components sch_taprio.c and taprio.json in the Linux operating system’s kernel, allowing a hacker to cause a service failure
The vulnerability of the schtaprio.c and taprio.json components in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the container management system and the virtual machine manager Incus, related to unlimited resource distribution, allows attackers to bypass security restrictions and cause service failures.
The vulnerability of the container management system and the virtual machine manager Incus is related to the unlimited distribution of resources due to incorrect generation of access control rules for local services based on an access control list. Exploiting this vulnerability can allow a...
The vulnerability of the General HTML Support function (GHS) and the HTML embed panel in the Block Toolbar of the CKEditor editor allows attackers to execute XSS attacks.
The vulnerability of the General HTML Support function and the HTML embed panel in the Block Toolbar WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to carry out XSS attacks remotely...
The vulnerability of Google Chrome and Microsoft Edge browsers allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of Google Chrome and Microsoft Edge browsers is related to the use of unreliable input data during security decision-making. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information by downloadin...
The vulnerabilities in the components tty_ldisc.c, vt.c, and tty_driver.h of the Linux operating system’s kernel allow a hacker to cause a service failure.
The vulnerability in the components ttyldisc.c, vt.c, and ttydriver.h of the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the IBM Facsimile Support for IBM i operating system allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the IBM Facsimile Support for IBM i operating system is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...
The vulnerability of the af_ax25.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the afax25.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the omap_prm.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the omapprm.c component in the Linux operating system’s kernel is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Adobe Experience Manager content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the vfs inode.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the vfs inode.c component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the amdgpu_dm.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the amdgpudm.c component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the hugetlb.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the hugetlb.c component in the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the bcachefs/snapshot.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the bcachefs/snapshot.c component in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to read, modify, or delete data.
The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to data remotely...
The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to gain full control over the application.
The vulnerability of the Oracle Solaris operating system’s file system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the container management system and the virtual machine manager Incus, related to deficiencies in the authentication mechanism, allows attackers to circumvent existing security restrictions and perform spear-phishing attacks.
The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication mechanism, resulting from incorrect rule generation based on the access control list. Exploiting this vulnerability allows a malicious actor to bypass existi...
The vulnerability of the gf_node_get_field_by_name() function (scenegraph/base_scenegraph.c) in the MP4Box utility of the GPAC multimedia platform. This vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack.
The vulnerability of the gfnodegetfieldbyname function scenegraph/basescenegraph.c in the MP4Box utility of the GPAC multimedia platform is related to the pointer manipulation during the processing of MPEG-4 XMT files. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...
The vulnerability of the gf_dash_group_get_audio_channels() function (media_tools/dash_client.c) in the MP4Box utility of the GPAC multimedia platform allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the gfdashgroupgetaudiochannels function mediatools/dashclient.c in the MP4Box utility of the GPAC multimedia platform is related to the pointer manipulation during the processing of DASH manifests. Exploiting this vulnerability could allow an attacker to execute arbitrary co...
The vulnerability of the Introspection Mode feature of the openid-connect plugin for the Apache APISIX cloud API gateway allows a attacker to gain access to the user’s account.
The vulnerability of the Introspection Mode feature in the openid-connect plugin for the Apache APISIX cloud API gateway involves bypassing authentication by using the same secret key. Exploiting this vulnerability could allow a malicious actor to gain access to a user’s account remotely...
The vulnerability of the microprogrammed software of Ruijie NBR2000G, NBR1300G, and Ruijie NBR1000 lies in the insufficient protection of operational data, allowing attackers to gain access to the administrator account.
The vulnerability of the microprogrammed software of Ruijie NBR2000G, NBR1300G, and Ruijie NBR1000 lies in the insufficient protection of operational data during the processing of the /WEBVMS/LEVEL15/ endpoint. Exploiting this vulnerability can allow a malicious actor to gain access to the...