95883 matches found
The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s acceptable limits, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to reading data from buffer files beyond acceptable limits. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Open vSwitch software-based multi-level switch lies in the reading of data beyond the allowed buffer limits, which allows a hacker to cause a service failure.
The vulnerability of the Open vSwitch multi-level switch lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Open vSwitch multi-level switch software lies in the fact that an operation outside the buffer boundaries in memory can lead to a service failure for the attacker.
The vulnerability of the Open vSwitch multi-level switch lies in the fact that the output of operations goes beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the JIT component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows attackers to gain access to confidential data and compromise data integrity.
The vulnerability of the JIT component in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromis...
The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a intruder to access confidential data.
The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the email client Thunderbird relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow, allows a hacker to cause a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Corosync cluster engine, related to integer overflows, allows a attacker to cause a service failure.
The vulnerability of the Corosync cluster engine is related to a numerical overflow condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Sensor Data Service system service in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Sensor Data Service system service in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the software platform for conducting marketing campaigns with Adobe Campaign Classic lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Adminer’s database management software lies in its improper external handling of file names or paths, allowing attackers to execute arbitrary code.
The vulnerability of Adminer’s database management software lies in improper external manipulation of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the madvise_args_are_sane() function in the drivers/gpu/drm/xe/xe_vm_madvise.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to access protected information or cause a service failure.
The vulnerability of the madviseargsaresane function in the drivers/gpu/drm/xe/xevmmadvise.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...
The vulnerability of the parse_stream() function in the Expat.xs component of the libxml-parser-perl library allows a attacker to cause a denial-of-service attack.
The vulnerability of the parsestream function in the Expat.xs component of the libxml-parser-perl library is related to the escape character being output outside of the buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the SOGo software server, related to the lack of protective measures for website structures, allows attackers to access confidential data and compromise data integrity.
The vulnerability of the SOGo collaborative software server relates to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of the data...
The vulnerability of the management server’s functionality for the SOGo collaborative work software lies in the lack of protective measures for SQL query structures. This allows attackers to gain access to confidential data and compromise data integrity.
The vulnerability of the management server’s software for collaborative work, SOGo, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and affect the integrity of the data...
The vulnerability of the lib/nghttp2_session.c component, part of the HTTP/2 implementation by Nghttp2, allows a attacker to cause a service failure.
The vulnerability of the lib/nghttp2session.c component in the HTTP/2 implementation of Nghttp2 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the d6_dhcpc.c component in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure
The vulnerability in the d6dhcpc.c component of the UNIX command-line utilities in BusyBox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Mesa video driver library, related to writing beyond the buffer boundaries, allows a hacker to cause a service failure.
The vulnerability of the Mesa video driver library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability in the `net/mptcp/pm_kernel.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/mptcp/pmkernel.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the SOGo software server for collaborative work lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.
The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
The vulnerability of the SSHFS file remote management program lies in the improper definition of symbolic links before accessing the file. This allows a malicious actor to trigger a service failure.
The vulnerability of the SSHFS file system for remote file management is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of HPLIP printer drivers, related to the occurrence of operations beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of HPLIP printer drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the 389 Directory Server server, related to the provision of unlimited memory, allows a attacker to cause a service failure.
The vulnerability of the 389 Directory Server catalog service server lies in the provision of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability in the Security component of Firefox web browsers, Firefox ESR, and the Thunderbird email client allows attackers to access confidential data and compromise data integrity.
The vulnerability of the Security component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...
The vulnerability of the Engine component in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, allows a perpetrator to gain access to confidential data.
The vulnerability of the Engine component in web browsers such as Firefox and Firefox ESR, as well as in the Thunderbird email client, is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
The vulnerability of the Disability Access APIs in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, allows a malicious actor to trigger a service failure.
The vulnerability of the Disability Access APIs in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client: This vulnerability arises from operations beyond the buffer in memory, allowing attackers to trigger a service failure.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component in Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to reading data outside the buffer in memory, allows attackers to exploit the protected information.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to the use of an unreliable search path, allows a hacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the inclusion of functions from an unreliable and uncontrolled area, allows a perpetrator to execute arbitrary code.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the AdminerFileUpload plugin in the plugins/file-upload.php module of the Adminer database management system allows a hacker to execute arbitrary code.
The vulnerability of the AdminerFileUpload plugin in the plugins/file-upload.php software for managing databases in Adminer relates to the unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability in the `init_kfd_vm()` function of the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c driver, a component of the AMD GPU kernel for Linux operating systems, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the initkfdvm function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...
The vulnerability of the xfrm_policy_fini() function in the net/xfrm/xfrm_policy.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to situations where there is a competition for context switching. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...
The vulnerability of the rpcrdma_post_recvs() function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.
The vulnerability of the rpcrdmapostrecvs function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation is related to incorrect resource initialization. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the lasso_node_init_from_message_with_format function in the Lasso library, which stems from improper memory release before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the lassonodeinitfrommessagewithformat function in the Lasso library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the DNS LDNS library, related to the lack of a mechanism for verifying the source of data, allows attackers to compromise the integrity of the data.
The vulnerability of the DNS LDNS library is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
The vulnerability of the mtk-smi component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the mtk-smi component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mvm component of the Linux kernel’s Wi-Fi module allows a hacker to cause a service failure.
The vulnerability of the mvm component in Linux kernel-based Wi-Fi modules is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the QEMU hardware emulation software, related to executing a loop with an unavailable exit condition, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
The vulnerability in the io_uring/kbuf.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the iouring/kbuf.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the hw/9pfs/codir.c component of the QEMU hardware emulation software allows a hacker to induce a service failure.
The vulnerability of the hw/9pfs/codir.c component of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of HPLIP printer drivers, related to the failure to clean input data, allows a violator to trigger a service failure.
The vulnerability of HPLIP printer drivers is related to the lack of measures taken to clean incoming data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Backup component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows a hacker to trigger a service failure.
The vulnerability of the Backup component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Audio/Video components in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows attackers to gain access to confidential data.
The vulnerability of the Audio/Video components in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential dat...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...