95883 matches found
The vulnerability of HPLIP printer drivers, related to the failure to clean input data, allows a violator to trigger a service failure.
The vulnerability of HPLIP printer drivers is related to the lack of measures taken to clean incoming data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the DNS LDNS library, related to the lack of a mechanism for verifying the source of data, allows attackers to compromise the integrity of the data.
The vulnerability of the DNS LDNS library is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component in Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the d6_dhcpc.c component in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure
The vulnerability in the d6dhcpc.c component of the UNIX command-line utilities in BusyBox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the icmp_build_probe() function in the net/ipv4/icmp.c module of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the icmpbuildprobe function in the net/ipv4/icmp.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the mvm component of the Linux kernel’s Wi-Fi module allows a hacker to cause a service failure.
The vulnerability of the mvm component in Linux kernel-based Wi-Fi modules is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the SOGo software server for collaborative work lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.
The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
The vulnerability of the SOGo software server for collaborative work lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.
The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
The vulnerability of the SOGo software server, related to the lack of protective measures for website structures, allows attackers to access confidential data and compromise data integrity.
The vulnerability of the SOGo collaborative software server relates to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of the data...
The vulnerability of the xfrm_policy_fini() function in the net/xfrm/xfrm_policy.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to situations where there is a competition for context switching. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...
The vulnerability in the src/userauth.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to cause a service failure.
The vulnerability in the src/userauth.c component of the SSH2 protocol implementation library Libssh2 is related to errors in number processing. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the Mesa video driver library, related to writing beyond the buffer boundaries, allows a hacker to cause a service failure.
The vulnerability of the Mesa video driver library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the udhcp_getoption() function in the networking/udhcp/common.c component of the BusyBox command-line utility tools allows a attacker to gain access to confidential data.
The vulnerability of the udhcpgetoption function in the networking/udhcp/common.c component of the BusyBox command-line utility tools on UNIX systems is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to...
The vulnerability of the mctp_flow_prepare_output() function in the net/mctp/route.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mctpflowprepareoutput function in the net/mctp/route.c module of the Linux kernel is related to deficiencies in the deserialization mechanism, due to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerabilities of the Repo.blame() and Repo.blame_incremental() functions, which are part of the security mechanism for the unsafe_git_revision_options library in the Python library for interacting with Git repositories in GitPython, allow attackers to gain unauthorized access to protected information.
The vulnerability of the Repo.blame and Repo.blameincremental functions in the GitPython library’s unsafegitrevisionoptions protection mechanism is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the setSystemConfig() function in the CGI Handler component of the Totolink-N600R router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the setSystemConfig function in the CGI Handler component of the Totolink-N600R router’s microprogramming system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in the fact that information is stored in an open manner, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to the storage of information in an open manner. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) arises from incorrect input of configuration data, allowing attackers to compromise the accessibility of protected information.
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
The vulnerability of the User-Mode Power Service (UMPS) in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the User-Mode Power Service UMPS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the IPMI management tools such as ipmi-sensors, ipmipower, client, OEM, and ipmi-oem allows a malicious actor to trigger a service failure due to buffer overflow.
The vulnerability of the IPMI management tools such as ipmi-sensors, ipmipower, client, OEM, and ipmi-oem relates to buffer overflow attacks on the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure remotely...
The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to incomplete cleaning of temporary or auxiliary resources, allows attackers to disclose protected information.
The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise lies in incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the NTFS file system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component in Windows operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Device Association Service on Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Windows Device Association Service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the registration broker for Windows auxiliary technologies, ATBroker.exe, in Windows operating systems, allows a perpetrator to increase their privileges.
The vulnerability of the ATBroker.exe process responsible for registering auxiliary technologies in the Windows Accessibility Infrastructure affects Windows operating systems. This vulnerability is related to incorrect handling of symbolic links before accessing the file. Exploiting this...
The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktop operations is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Shell command shell in Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the Shell command shell in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the DHCP Server service for Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the DHCP Server service for Windows operating systems is related to a countable amount of loss of significance. Exploiting this vulnerability can allow an attacker, working remotely, to disclose sensitive information...
The vulnerability of the RPC Runtime Library for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the RPC Runtime Library in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the vcpu_block() function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the vcpublock function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the uvc_start_streaming_video() function in the drivers/media/usb/uvc/uvc_queue.c file of the Linux operating system’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the uvcstartstreamingvideo function in the drivers/media/usb/uvc/uvcqueue.c file of the Linux operating system’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the hci_dma_dequeue_xfer() function in the drivers/i3c/master/mipi-i3c-hci/dma.c file of the I3C driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hcidmadequeuexfer function in the drivers/i3c/master/mipi-i3c-hci/dma.c file of the I3C driver in the Linux operating system is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerabilities of the functions free_kthread_struct() and kthread_exit() in the kernel module kthread.c, as well as the function make_task_dead() in the kernel module exit.c of the Linux operating system’s kernels, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions freekthreadstruct and kthreadexit in the kernel module kthread.c, as well as the function maketaskdead in the kernel module exit.c of the Linux operating system’s kernels, is related to the reallocation of previously freed memory due to an implicit violation of...
The vulnerability of the MapServer geographic data rendering system, related to deficiencies in path name restriction, allows attackers to compromise the integrity of the data.
The vulnerability of the MapServer geographic data rendering system is related to deficiencies in path name restriction. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component in Linux operating systems is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the progs/infocmp.c component of the input/output library for the Ncurses terminal allows a hacker to cause a service failure.
The vulnerability in the progs/infocmp.c component of the input/output library for the Ncurses terminal emulator is related to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the driver/spi/spi.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/spi/spi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, is related to integer overflow. This allows attackers to cause system failures.
The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mctp_i2c_recv() function in the drivers/net/mctp/mctp-i2c.c module of the MCTP serial transport driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mctpi2crecv function in the drivers/net/mctp/mctp-i2c.c module of the MCTP serial transport driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...
The vulnerability of the integration module with the Cyrus SASL library for interacting with MongoDB databases. The C driver allows a hacker to cause a service failure.
The vulnerability of the integration module with the Cyrus SASL library for interacting with MongoDB databases involves copying buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the compute_insn_live regs() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the computeinsnlive regs function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux operating systems, is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
The vulnerability of the QEMU hardware emulation software, related to incorrect calculation of buffer size, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the net/mlx5 component in the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the net/mlx5 component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.
The vulnerability of the QEMU hardware emulation software is related to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability in the lib/LWP/UserAgent.pm module, a set of modules for working with LWP::UserAgent web resources, allows a perpetrator to access confidential data.
The vulnerability of the lib/LWP/UserAgent.pm component, a module for working with LWP::UserAgent web resources, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
The vulnerability of the Util-linux command-line utility suite relates to the use of memory after it is freed, allowing an attacker to trigger a service failure.
The vulnerability of the Util-linux command-line utility suite relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...