98239 matches found
golang-x-image Heap Buffer Overflow RCE
The vulnerability of the golang-x-image package, a programming language, is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Kibana Policy Privilege Escalation
The vulnerability of the mechanism for managing policies of Kibana’s data visualization agents is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Erlang/OTP Unauthenticated Access Disclosure
The vulnerability of the Erlang/OTP software platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Jenkins URL Redirection Phishing
The vulnerability of the URL redirection check mechanism after a Jenkins automation server is accessed involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...
OpenBao Secret Encryption Management System DoS
The vulnerability of the OpenBao encryption and secret management system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Fleet Agent DoS
The vulnerability of the Fleet Agent processing mechanism of the Kibana data visualization service involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
Perl Heap Buffer Overflow DoS
The vulnerability of the Perl programming language is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
libssh Heap Overflow DoS
The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
libssh Arbitrary Command Execution
The vulnerability of the libssh library is related to the lack of measures taken to clean data at the administrative level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...
BuildKit DoS
The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Kibana Cloud Connect Data Compromise
The vulnerability of the Cloud Connect component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...
NVIDIA NVDEC Hardware Decoder
The vulnerability of NVIDIA’s NVDEC hardware decoder in the FFmpeg multimedia library lies in the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...
FFmpeg MACE6 Decoder Memory Damage Code Execution
The vulnerability of the MACE6 decoder for FFmpeg’s multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...
FFmpeg QR-code Processing Heap Buffer Overflow DoS
The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...
MuPDF Buffer Overflow DoS
The vulnerability of the MuPDf PDF viewer program is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vim Buffer Overflow
The vulnerability of the Vim text editor is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vim Code Execution
The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
MongoDB Aggregation DoS
The vulnerability of the aggregation merging mechanism between shards in the MongoDB database management system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
MongoDB Heap Buffer Overflow DoS
The vulnerability of the DocumentStorage::loadLazyMetadata function in the MongoDB database management system is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
GitLab Integer Overflow Code Execution
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...
Linux kernel Control Flow DoS
The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Memory Leak DoS
The vulnerability of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
Kubernetes Cluster Privilege Escalation
The vulnerability of the Kubernetes cluster management software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Linux kernel Use-After-Free
The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Linux kernel Resource Control DoS
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux kernel Resource Control DoS
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
fetchmail DoS
The vulnerability of the fetchmail email reception and forwarding client involves incorrect handling of value separators. Exploiting this vulnerability can allow a remote attacker to cause service failures...
dnsdist handleCORS() Unauthorized Access
The vulnerability of the handleCORS function in the pdns/dnsdistdist/dnsdist-web.cc load balancer and proxy for DNS traffic is related to the use of an untrusted domain policy file. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
pgAdmin 4 Output Encoding
The vulnerability of the pgAdmin 4 database management tool is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Python pip Unauthorized Access
The vulnerability of the Python programming language’s pip module is related to incorrect pathname restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Perl-Crypt-DSA Insufficient Randomness Unauthorized Access
The vulnerability of the Perl-Crypt-DSA digital signature package is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Perl-DBI Database Error DoS
The vulnerability of the Perl-DBI interface for connecting to and working with databases is related to the use of an erroneous operator. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Perl-DBI Path Traversal
The vulnerability of the Perl-DBI interface for connecting to and working with databases is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
BuildKit Path Traversal
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...
BuildKit Command Injection
The vulnerability of the BuildKit container-building software lies in the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
dogtag-pki Authentication Bypass
The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...
AWS CLI Command Execution
The vulnerability of the AWS CLI command-line interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the operating system remotely...
DNSdist PacketReader Function Disclosure DoS
The vulnerability of the PacketReader::skip function in the pdns/dnsparser.hh file of the load balancer and proxy for DNS traffic is related to the operation of pushing data out of the buffer into memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information ...
DNS load balancer DoS
The vulnerability of the handleReadableStream function in the pdns/dnsdistdist/doq.cc file and the processH3DataEvent function in the pdns/dnsdistdist/doh3.cc file, both from the DNS load balancer and proxy components, is related to uncontrolled memory allocation. Exploiting this vulnerability...
HAProxy DoS
The vulnerability of the server software HAProxy is related to an unvalidated return value. Exploiting this vulnerability could allow a malicious actor to cause service failures...
MuPDF PDF Viewer Information Disclosure
The vulnerability of the MuPDf PDF viewer program is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
Entity Analytics Component DoS
The vulnerability of the Entity Analytics component of the Kibana data visualization service is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
PHP-phpseclib Uncontrolled Resource Consumption DoS
The vulnerability of the PHP-phpseclib interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Configurable Storage Parameter Store Etcd RBAC Disclosure
The vulnerability of the RBAC authorization verification mechanism when processing configuration store transactions involving Etcd is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this...
golang-x-image DoS
The vulnerability of the golang-x-image package, a programming language, is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Glances virsh Command Execution
The vulnerability of the virsh function in the Glances/plugins/vms/engines/virsh.py module of the monitoring tool Glances is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
Glances Input Validation
The vulnerability of the application programming interface of the Glances monitoring tool is related to improper verification of the data entered by the user against a list of allowed values. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...
Kibana Authentication Bypass Unauthorized Access
The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Kibana visualization service DoS
The vulnerability of the Kibana visualization service’s collection management mechanism is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Jenkins HTTP Handler Bypass
The vulnerability of Jenkins’ HTTP handler for canceling queue elements is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...