98239 matches found
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the function batadvblapurgeclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a remote attacker to cause...
OpenVPN Module Unauthorized Access
The vulnerability of the OpenVPN module of TP-Link Archer AX53 networking hardware is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information using a specially crafted file...
TP-Link Wi-Fi Router Configuration Compromise
The vulnerability of the configuration of Wi-Fi router microprogramming software from TP-Link, such as the Archer NX200, NX210, NX500, and NX600 models, lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality...
command-line interface (CLI) of Security Bypass
The vulnerability of the command-line interface CLI of TP-Link Wi-Fi router microprogramming systems such as Archer NX200, NX210, NX500, and NX600 is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remo...
Crosswork Data Gateway SQL Injection
The vulnerability of the Crosswork Data Gateway data collection platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
JavaScript extend() Function Heap Buffer Overflow DoS
The vulnerability of the extend function in the shared/utils.mjs JavaScript library used for creating Swiper sliders is related to uncontrolled changes to object prototypes. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...
L2TP Control Channel Parser Heap Buffer Overflow DoS
The vulnerability of the tunnelsetparams function in the tunnel.c file of the L2TP Control Channel Parser component of the D-Link DIR-895L router microprogramming system is related to the escape operation from the buffer into memory. Exploiting this vulnerability could allow a remote attacker to...
Microsoft Word Office Suites Buffer Overflow
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Network Connection Broker Privilege Escalation
The vulnerability of the Network Connection Broker component of the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
WebClient Service Privilege Escalation
The vulnerability of the WebClient Service on Windows operating systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges...
Azure SQL Database Privilege Escalation
The vulnerability of the Azure SQL Database cloud relational database is related to insufficient validation of queries on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Linux kernel DRI Heap Buffer Overflow DoS
The vulnerability of the vc4savehangstate function in the drivers/gpu/drm/vc4/vc4gem.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux Driver Heap Buffer Overflow DoS
The vulnerability of the iriscreateinternalbuffer function in the drivers/media/platform/qcom/iris/irisbuffer.c file, a driver for multimedia devices in the Linux kernel, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting thi...
Linux Kernel DRI DoS
The vulnerability of the rzg2lmipidsiatomicdisable function in the drivers/gpu/drm/renesas/rz-du/rzg2lmipidsi.c driver of the Direct Rendering Infrastructure DRI component of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can...
Nouveau Driver Heap Buffer Overflow DoS
The vulnerability of the nouveauconnectorauxxfer function in the drivers/gpu/drm/nouveau/nouveauconnector.c file of the Nouveau graphics driver for Linux-based systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...
rtw_restruct_wmm_ie() Function Information Disclosure
The vulnerability of the rtwrestructwmmie function in the drivers/staging/rtl8723bs/core/rtwmlme.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the disarmkprobeftrace function in the kernel/kprobes.c module of the Linux operating system is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...
netfilter Heap Buffer Overflow DoS
The vulnerability of the nfnlcthelperdumptable function in the net/netfilter/nfnetlinkcthelper.c module of the netfilter component of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to caus...
Linux kernel unshare_fs DoS
The vulnerability of the unsharefs function in the kernel/fork.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Microsoft Fabric Data Management Platform Privilege Escalation
The vulnerability of the Microsoft Fabric data management platform is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Linux device tree driver Heap Buffer Overflow DoS
The vulnerability of the testdrvprobe function in the drivers/of/unittest.c module of the device tree driver and kernel open-source software for Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to...
Linux hardware monitoring driver pt5161l_read_block_data Heap Buffer Overflow
The vulnerability of the pt5161lreadblockdata function in the drivers/hwmon/pt5161l.c file of the Linux operating system’s device monitoring driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...
Linux Kernel RxRPC DoS
The vulnerability of the rxkadverifyresponse function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow a remote...
mtk_jpeg_release Heap Buffer Overflow DoS
The vulnerability of the mtkjpegrelease function in the drivers/media/platform/mediatek/jpeg/mtkjpegcore.c driver for multimedia devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacke...
Azure Data Factory Privilege Escalation
The vulnerability of the Azure Data Factory service is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
SMC Protocol Heap Buffer Overflow DoS
The vulnerability of the smcclcwaitmsg function in the net/smc/smcclc.c module of the SMC protocol family implementation in the Linux operating system’s kernel is related to the race condition that occurs when a common resource is used. Exploiting this vulnerability allows a remote attacker to...
Linux kernel multimedia device driver Heap Buffer Overflow DoS
The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the strpabortstrp function in the net/strparser/strparser.c module of the Linux kernel is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Splunk MCP Server Command Execution
The vulnerability of the application’s database management component for data processing and analysis in Splunk MCP Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
Linux MPTCP pm_add_timer Heap Buffer Overflow DoS
The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
Linux kernel target_tg_pt_gp_members_show Heap Buffer Overflow DoS
The vulnerability of the targettgptgpmembersshow function in the drivers/target/targetcoreconfigfs.c driver of the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...
Linux Kernel mac80211 Stack Heap Buffer Overflow DoS
The vulnerability of the function ieee80211invokefastrx in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux operating system, is related to the control element that is called in a multi-threaded context with a non-final static element or member. Exploiting this vulnerability...
Linux ieee80211_dfs_radar_detected_work Buffer Overflow
The vulnerability of the function ieee80211dfsradardetectedwork in the net/mac80211/util.c module of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
MTD memory driver Heap Buffer Overflow DoS
The vulnerability of the spinorparamsshow function in the drivers/mtd/spi-nor/debugfs.c file of the MTD memory driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to access protected...
Linux kernel amdgpu_ib_get_value amdgpu_ib_set_value DoS
The vulnerabilities of the functions amdgpuibgetvalue and amdgpuibsetvalue in the drivers/gpu/drm/amd/amdgpu/amdgpuring.h module of the Linux operating system are related to incorrect calculation of buffer sizes. Exploiting these vulnerabilities can allow attackers to access protected information...
Linux SCTP Heap Buffer Overflow DoS
The vulnerability of the sctpsendmsg function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to compromise the...
amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu Heap Buffer Overflow DoS
The vulnerability of the amdgpuamdkfdgpuvmallocmemoryofgpu function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the copying of buffers without checking the size of the...
TP-Link Archer AX53 dnsmasq Module Command Execution
The vulnerability of the dnsmasq module in the microprogramming-based routing software for TP-Link Archer AX53 relates to the failure to take measures to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute...
Crosswork Data Gateway Path Traversal
The vulnerability of the Crosswork Data Gateway data collection platform is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Cisco Secure Workload protection Multi-cloud Data Center Input Validation
The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of t...
Grafana MCP Server SSRF
The vulnerability of the grafanaapirequest tool on the Grafana MCP Server platform, which is used for monitoring and surveillance, is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the pgshiftleveltottl function in the arch/arm64/kvm/nested.c file of Linux operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Kafka Protocol Decoder Wireshark DoS
The vulnerability of the Kafka protocol decoder and the Wireshark traffic analyzer in computer networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Microsoft Azure Entra ID Compatibility Package Privilege Escalation
The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Azure Arc Name Reference Privilege Escalation
The vulnerability of the Azure Arc local infrastructure connection software relates to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Automated deployment and scaling service Code Execution
The vulnerability of the automated deployment and scaling service for managed Apache Cassandra solutions lies in the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
KVM Kernel DoS
The vulnerability of the KVM kernel component in the Linux operating system is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
AMD GPU VCN V2 5 DoS
The vulnerability of the vcnv25hwfini function in the drivers/gpu/drm/amd/amdgpu/vcnv25.c driver for AMD GPU cores in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Linux kernel USB gadget driver Heap Buffer Overflow DoS
The vulnerability of the setlinkstate function in the drivers/usb/gadget/udc/dummyhcd.c file of the Linux USB gadget driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failure...