98239 matches found
Jenkins Node Disconnection Code Execution
The vulnerability of the mechanism for processing descriptions of node disconnection reasons in Jenkins automation is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary co...
Containerd CRI Plugin Arbitrary Command Execution
The vulnerability of the mechanism for processing container configuration tags in the CRI-plugin for Containerd is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
Podman WORKDIR Security Restriction Bypass
The vulnerability of the WORKDIR processing mechanism in the software platform for managing and launching OCI containers, Podman, is related to the tracking of symbolic links. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions...
OpenBao secret encryption management system Name Reference DoS
The vulnerability of the OpenBao encryption and secret management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Erlang/OTP Type of Man-in-the-Middle
The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...
Kibana Visualization File Management Bypass
The vulnerability of the file and attachments management mechanism of the Kibana visualization service involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows an attacker to circumvent security restrictions remotely...
FreeRDP Buffer Overflow RCE
The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
libssh Use-After-Free
The vulnerability of the libssh library lies in the repeated release of previously released memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FreeRDP Zero Division DoS
The vulnerability of the RDP client FreeRDP is related to division by zero errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Kibana Reporting Unauthorized Access
The vulnerability of the Reporting component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Kibana Machine Learning Data Compromise
The vulnerability of the Machine Learning plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...
FFmpeg IAMF demultiplexer DoS
The vulnerability of the IAMF demultiplexer in the FFmpeg multimedia library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Synthetics Plugin Bypass Security Restrictions
The vulnerability of the Synthetics plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass security restrictions while operating remotely...
Vim Code Execution
The vulnerability of the Vim text editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
GitPython Command Execution
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
MongoDB Collection Schema Unauthorized Access
The vulnerability of the journal message formation mechanism, when checking the schema of the MongoDB database management system’s collection, is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...
MongoDB ldapQueryPassword Unauthorized Access
The vulnerability of the ldapQueryPassword parameter processing mechanism in the MongoDB database management system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
Kibana DoS
The vulnerability of the mechanism for processing internal API requests of the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
GitLab Memory Reclamation Code Execution
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a memory reclamation error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SCRAM PostgreSQL DoS
The vulnerability of the SCRAM Salted Challenge Response Authentication Mechanism mechanism in the PostgreSQL PgBouncer connection pool lies in the dereferencing of pointers due to the lack of validation for a required attribute in the end-message parser. Exploiting this vulnerability allows a...
PostgreSQL PgBouncer Infinite Loop DoS
The vulnerability of the PostgreSQL PgBouncer connection pool software lies in the execution of a loop with an unreachable exit condition „Infinite loop“ due to a numerical overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
SCRAM PostgreSQL DoS
The vulnerability of the SCRAM Salted Challenge Response Authentication Mechanism mechanism in the PostgreSQL PgBouncer connection pool software is related to uncontrolled resource consumption due to the lack of a limit on the number of iterations required to generate a password. Exploiting this...
PDF writing buffer overflow Code Execution
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Linux kernel Resource Control DoS
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
grep jline-builtins module DoS
The vulnerability of the grep command in the jline-builtins Java library for processing console input in JLine is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux kernel Use-After-Free
The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Linux kernel Memory Reclamation DoS
The vulnerability of the Linux operating system’s kernel is related to a memory reallocation error. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Memory Leak DoS
The vulnerability of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Control Flow DoS
The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Resource Control DoS
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Resource Control DoS
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
pdns/dnsdistdist/html/local.js Arbitrary HTML Injection
The vulnerability of the update function in the pdns/dnsdistdist/html/local.js file of the load balancer and proxy for DNS traffic is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTML code...
pgAdmin 4 Output Encoding
The vulnerability of the pgAdmin 4 database management tool is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Perl-Crypt-DSA Data Compromise
The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...
Perl-DBI Code Execution
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Perl-DBI Buffer Overflow RCE
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
BuildKit DoS
The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
pgAdmin 4 DoS
The vulnerability of the pgAdmin 4 database management tool is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
MuPDF PDF Viewer Memory Reclamation DoS
The vulnerability of the MuPDf PDF viewer program is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause service interruptions...
golang-x-net Uncontrolled Resource Consumption DoS
The vulnerability of the golang-x-net package in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Erlang/OTP DoS
The vulnerability of the Erlang/OTP software platform is related to deficiencies in prediction capabilities. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Erlang/OTP Path Traversal Unauthorized Access
The vulnerability of the Erlang/OTP software platform is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Etcd RBAC Permission Bypass
The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...
MinIO Privilege Escalation
The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
MinIO Privilege Escalation
The vulnerability of the MinIO object storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
Netty Insufficient Randomness Unauthorized Access
The vulnerability of the framework used for developing network applications, servers, and client protocols based on Netty lies in the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
GoBGP Zero Pointer DoS
The vulnerability of the GoBGP edge gateway protocol is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
golang-x-image Resource Exhaustion DoS
The vulnerability of the golang-x-image package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
Erlang/OTP Authentication Bypass
The vulnerability of the Erlang/OTP software platform is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to influence the confidentiality and integrity of the protected information...
Asynchronous Python-daphne Unlimited Resource Distribution DoS
The vulnerability of the asynchronous Python-daphne web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...