95883 matches found
The vulnerability of the Open vSwitch multi-level switch software lies in the fact that an operation outside the buffer boundaries in memory can lead to a service failure for the attacker.
The vulnerability of the Open vSwitch multi-level switch lies in the fact that the output of operations goes beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Policies component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the Policies component in Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a intruder to access confidential data.
The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the email client Thunderbird relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
The vulnerability of the Corosync cluster engine, related to integer overflows, allows a attacker to cause a service failure.
The vulnerability of the Corosync cluster engine is related to a numerical overflow condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the qcom/qdsp6 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the qcom/qdsp6 component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the shmem_sg_alloc_table() function in the drivers/gpu/drm/i915/gem/i915_gem_shmem.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the shmemsgalloctable function in the drivers/gpu/drm/i915/gem/i915gemshmem.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an...
The vulnerability of the OpenSSH cryptographic protection mechanism, which arises from performing operations in the wrong order, allows attackers to gain access to confidential data and compromise the integrity of that data.
The vulnerability of the OpenSSH cryptographic protection lies in the improper execution of certain operations. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise the integrity of those data...
The vulnerability of the Mesa video driver library, related to writing beyond the buffer boundaries, allows a hacker to cause a service failure.
The vulnerability of the Mesa video driver library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the SOGo software server for collaborative work lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.
The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
The vulnerability of the SSHFS file remote management program lies in the improper definition of symbolic links before accessing the file. This allows a malicious actor to trigger a service failure.
The vulnerability of the SSHFS file system for remote file management is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the JSON data processing tool JQ, related to uncontrolled recursion, allows a hacker to cause a service failure.
The vulnerability of the JSON data processing tool JQ is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the Security component of Firefox web browsers, Firefox ESR, and the Thunderbird email client allows attackers to access confidential data and compromise data integrity.
The vulnerability of the Security component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...
The vulnerability of the Backup component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows a hacker to trigger a service failure.
The vulnerability of the Backup component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Autofill component in web browsers Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to compromise data integrity.
The vulnerability of the Autofill component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird relates to the ability to bypass authentication through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...
The vulnerability of the Engine component in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, allows a perpetrator to gain access to confidential data.
The vulnerability of the Engine component in web browsers such as Firefox and Firefox ESR, as well as in the Thunderbird email client, is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the nltk.corpus.reader component in the NLTK library for symbolic and statistical processing of natural language allows a hacker to gain unauthorized access to protected information.
The vulnerability of the nltk.corpus.reader component in the NLTK library for symbolic and statistical processing of natural language is related to improper external management of file names or file paths. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protecte...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the inclusion of functions from an unreliable and uncontrolled area, allows a perpetrator to execute arbitrary code.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the aml_sfc_dma_buffer_setup() function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the amlsfcdmabuffersetup function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the QuerySet.order_by() function in the Django web application framework allows a hacker to gain access to confidential data and influence the integrity of the data.
The vulnerability of the QuerySet.orderby function in the Django web application framework relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise data integrity...
The vulnerability of the DNS LDNS library, related to the lack of a mechanism for verifying the source of data, allows attackers to compromise the integrity of the data.
The vulnerability of the DNS LDNS library is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
The vulnerability of the OpenSSH cryptographic protection mechanism, related to the implementation of an incorrect control flow, allows a attacker to compromise the integrity of data.
The vulnerability of the OpenSSH cryptographic protection lies in the implementation of an incorrect control flow. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data remotely...
The vulnerability of the lib/nghttp2_session.c component, part of the HTTP/2 implementation by Nghttp2, allows a attacker to cause a service failure.
The vulnerability of the lib/nghttp2session.c component in the HTTP/2 implementation of Nghttp2 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the d6_dhcpc.c component in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure
The vulnerability in the d6dhcpc.c component of the UNIX command-line utilities in BusyBox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability in the `net/mptcp/pm_kernel.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/mptcp/pmkernel.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the io_uring/kbuf.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the iouring/kbuf.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the SOGo software server for collaborative work lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.
The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
The vulnerability in the hw/9pfs/codir.c component of the QEMU hardware emulation software allows a hacker to induce a service failure.
The vulnerability of the hw/9pfs/codir.c component of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability in the src/userauth.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to cause a service failure.
The vulnerability in the src/userauth.c component of the SSH2 protocol implementation library Libssh2 is related to errors in number processing. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of HPLIP printer drivers, related to the occurrence of operations beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of HPLIP printer drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of HPLIP printer drivers, related to the failure to clean input data, allows a violator to trigger a service failure.
The vulnerability of HPLIP printer drivers is related to the lack of measures taken to clean incoming data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Disability Access APIs in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, allows a malicious actor to trigger a service failure.
The vulnerability of the Disability Access APIs in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Audio/Video components in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows attackers to gain access to confidential data.
The vulnerability of the Audio/Video components in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential dat...
The vulnerability of the 389 Directory Server server, related to the provision of unlimited memory, allows a attacker to cause a service failure.
The vulnerability of the 389 Directory Server catalog service server lies in the provision of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client: This vulnerability arises from operations beyond the buffer in memory, allowing attackers to trigger a service failure.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component in Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Sensor Data Service system service in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Sensor Data Service system service in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic lies in the insufficient validation of incoming requests, allowing a hacker to execute arbitrary code.
The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the madvise_args_are_sane() function in the drivers/gpu/drm/xe/xe_vm_madvise.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to access protected information or cause a service failure.
The vulnerability of the madviseargsaresane function in the drivers/gpu/drm/xe/xevmmadvise.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...
The vulnerability of the management server’s functionality for the SOGo collaborative work software lies in the lack of protective measures for SQL query structures. This allows attackers to gain access to confidential data and compromise data integrity.
The vulnerability of the management server’s software for collaborative work, SOGo, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and affect the integrity of the data...
The vulnerability of the lasso_node_init_from_message_with_format function in the Lasso library, which stems from improper memory release before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the lassonodeinitfrommessagewithformat function in the Lasso library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mtk-smi component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the mtk-smi component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mvm component of the Linux kernel’s Wi-Fi module allows a hacker to cause a service failure.
The vulnerability of the mvm component in Linux kernel-based Wi-Fi modules is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the QEMU hardware emulation software, related to executing a loop with an unavailable exit condition, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to reading data outside the buffer in memory, allows attackers to exploit the protected information.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...