PostgresConnector.connect() Code Execution

The vulnerability of the PostgresConnector.connect function on the MCP-server, when used to interact with DBHub databases, is related to the use of an incomplete black list. Exploiting this vulnerability could allow an attacker to gain unauthorized read and write access, or execute arbitrary code...

Wireshark Dot11DecryptFtMicCheck Buffer Overflow DoS

The vulnerability of the Dot11DecryptFtMicCheck function epan/crypt/dot11decrypt.c, a traffic analyzer for computer networks in Wireshark, is related to the operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures...

Wireshark frame_add_comment function Heap Buffer Overflow DoS

The vulnerability of the frameaddcomment function in the Wireshark network traffic analyzer program epan/dissectors/packet-frame.c is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause service failures...

Wireshark g_ascii_strtoull Heap Buffer Overflow DoS

The vulnerability of the gasciistrtoull function in the Wireshark network traffic analyzer is related to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service failures...

MBIM Protocol DoS

The vulnerability of the MBIM protocol dissector epan/dissectors/packet-mbim.c and the Wireshark traffic analyzer is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a attacker to cause service failures...

lib/resolver-compat.js Code Execution

The vulnerability of the LegacyResolver.customResolve function in the lib/resolver-compat.js file of the NodeVM library’s vm2 module is related to authentication process vulnerabilities. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

phpMyFAQ ChatController XSS

The vulnerability in the phpMyFAQ application’s file phpMyFAQ/src/phpMyFAQ/Controller/Frontend/Api/ChatController.php is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information...

Wireshark csnStreamDissector Heap Buffer Overflow DoS

The vulnerability of the csnStreamDissector component epan/dissectors/packet-csn1.c in the Wireshark network traffic analyzer allows an attacker to cause a service failure by executing the operation outside of the buffer in memory...

Wireshark netmon_process_record function DoS

The vulnerability of the netmonprocessrecord function, a traffic analyzer in Wireshark, is related to the lack of input data validation for cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark dissect_tiff_ifd() DoS

The vulnerability of the dissecttiffifd function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability can allow attackers to cause service failures...

axios shouldBypassProxy function DoS

The vulnerability of the shouldBypassProxy function in the axios library’s lib/helpers/shouldBypassProxy.js file is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

libsndfile Heap Buffer Overflow DoS

The vulnerability of the psfbinheaderreadf function in the library for reading and writing audio files in libsndfile is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Wazuh _getattributes() Heap Buffer Overflow

The vulnerability of the getattributes function in the src/osxml/osxml.c file of the security monitoring and threat detection platform Wazuh is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Packet-synphasor Heap Buffer Overflow DoS

The vulnerability of the wmemfilescope function in the SYNCHROPHASOR dissector component packet-synphasor.c, a traffic analyzer for Wireshark computer networks, is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause service failures...

Catapult DCT2000 File Parser DoS

The vulnerability of the Catapult DCT2000 file parser, a packet analyzer for computer networks developed by Wireshark, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failures...

WiresharkZipHelper unzip DoS

The vulnerability of the WiresharkZipHelper::unzip function in the Wireshark network traffic analyzer is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a attacker to cause service failures or execute arbitrary code...

Sharkd Traffic Analyzer DoS

The vulnerability of the Sharkd traffic analyzer in Wireshark relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a hacker to cause service failures...

Wireshark keycode2keysymString DoS

The vulnerability of the keycode2keysymString function in the Wireshark network traffic analyzer is related to the operation that occurs outside of the buffer in memory. Exploiting this vulnerability could allow a hacker to cause a service failure...

phpMyFAQ StopWords Method Compromise

The vulnerability of the StopWords::add method in the phpMyFAQ web application’s file phpMyFAQ/src/phpMyFAQ/StopWords.php relates to the lack of measures taken to protect the SQL query structure when processing the word parameter. Exploiting this vulnerability allows an attacker to compromise the...

VFIO device driver Heap Buffer Overflow DoS

The vulnerability of the vfiocdxsetmsitrigger function in the driver/vfio/cdx/intr.c driver for VFIO devices in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux hardware monitoring driver pt5161l_read_block_data Heap Buffer Overflow

The vulnerability of the pt5161lreadblockdata function in the drivers/hwmon/pt5161l.c file of the Linux operating system’s device monitoring driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...

rxgk_extract_token Heap Buffer Overflow DoS

The vulnerability of the rxgkextracttoken function in the net/rxrpc/rxgkapp.c module, which is part of the RxRPC session support for the Linux operating system’s kernel, stems from an improper check on the returned value by this function. Exploiting this vulnerability could allow a remote attacke...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the stratix10rsuprobe function in the drivers/firmware/stratix10-rsu.c file of the Linux kernel firmware driver is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Azure Arc Name Reference Privilege Escalation

The vulnerability of the Azure Arc local infrastructure connection software relates to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

SMC Protocol Heap Buffer Overflow DoS

The vulnerability of the smcclcwaitmsg function in the net/smc/smcclc.c module of the SMC protocol family implementation in the Linux operating system’s kernel is related to the race condition that occurs when a common resource is used. Exploiting this vulnerability allows a remote attacker to...

TP-Link Archer AX53 dnsmasq Module Command Execution

The vulnerability of the dnsmasq module in the microprogramming-based routing software for TP-Link Archer AX53 relates to the failure to take measures to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute...

Linux kernel USB gadget driver Heap Buffer Overflow DoS

The vulnerability of the setlinkstate function in the drivers/usb/gadget/udc/dummyhcd.c file of the Linux USB gadget driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failure...

Linux kernel target_tg_pt_gp_members_show Heap Buffer Overflow DoS

The vulnerability of the targettgptgpmembersshow function in the drivers/target/targetcoreconfigfs.c driver of the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

Linux Kernel amd.c init_amd_zen2 Heap Buffer Overflow

The vulnerability of the initamdzen2 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux kernel support for x86 platforms, is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel Cryptographic Subsystem Heap Buffer Overflow DoS

The vulnerability of the aeadrecvmsg function in the crypto/algifaead.c module of the Linux kernel’s cryptographic subsystem is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

TP-Link Wi-Fi Router Privilege Escalation

The vulnerability of the HTTP server software in Wi-Fi routers from TP-Link, such as the Archer NX200, NX210, NX500, and NX600, is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges and impact the confidentialit...

kubectl cp Arbitrary File Write

The vulnerability of the kubectl cp command in the Kubernetes command line tool relates to an incorrect path name limitation. Exploiting this vulnerability could allow a remote attacker to write arbitrary files...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the ov5647sctrl function in the drivers/media/i2c/ov5647.c module of the Linux operating system’s multimedia device driver is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

D-Link DIR-822A Router Tunnel Set Params Buffer Overflow

The vulnerability of the tunnelsetparams function in the L2TP Control Message Parser component of D-Link DIR-822A router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

D-Link R95 Router Code Execution

The vulnerability of the /bin/ssi file of the DHMAPI component in D-Link R95 router microprogramming software is related to the lack of measures taken to neutralize special elements in the NTPServer parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code,...

USB-HID Protocol Analyzer DoS

The vulnerability of the USB-HID protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, is related to insufficient processing of the format string. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Dissector ISO 15765 Analyzers Wireshark Data Compromise

The vulnerability of the ISO 15765 and ISO 10681 discrivers of the Wireshark network traffic analyzer is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker operating remotely to compromise the integrity and accessibility of...

Open Interface Service Web Module Privilege Escalation

The vulnerability of the Open Interface Service in the web module of the Siemens Siveillance Control video surveillance and security management software is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to enhance their privileges and...

Azure SQL Database SQL Injection

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Panthor driver Heap Buffer Overflow DoS

The vulnerability of the groupreleasework function in the drivers/gpu/drm/panthor/panthorsched.c module of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously released memory. Exploiti...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the vc4hdmihotpluginit function in the drivers/gpu/drm/vc4/vc4hdmi.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to deficiencies in handling exceptional conditions. Exploiting this vulnerability can allow an attacker to...

Linux mux_mmio_probe Heap Buffer Overflow DoS

The vulnerability of the muxmmioprobe function in the drivers/mux/mmio.c module of the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to cause service failures...

Linux kernel media data preparation driver Heap Buffer Overflow DoS

The vulnerability of the tegrachanneltryformat function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux USB Device Driver RNDIS Buffer Overflow

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

rtw_get_ie_ex Heap Buffer Overflow

The vulnerability of the rtwgetieex function in the drivers/staging/rtl8723bs/core/rtwieee80211.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the mdc800deviceread function in the drivers/usb/image/mdc800.c file of the Linux device driver module is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to cause a service failure...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nfqnlrecvverdict function in the net/netfilter/nfnetlinkqueue.c module of the netfilter component of the Linux operating system is related to improper resource management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel OVPN TCP Socket Detach

The vulnerability of the ovpntcpsocketdetach function in the drivers/net/ovpn/tcp.c file of the Linux kernel’s network device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the eip93unregisteralgs function in the drivers/crypto/inside-secure/eip93/eip93-main.c file of the Linux kernel cryptographic accelerator driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause...

exynos DRM Heap Buffer Overflow DoS

The vulnerability of the vidiconnectionioctl function in the drivers/gpu/drm/exynos/exynosdrmvidi.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the use of an unreliable pointer. Exploiting this vulnerability can allow an attacker to access protected...