98239 matches found
Glances secure_popen Command Execution
The vulnerability of the securepopen function in the Glances monitoring tool glances/secure.py is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...
Trivy Unlimited Resource Distribution DoS
The vulnerability of the Trivy scanner is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Erlang/OTP Code Execution
The vulnerability of the Erlang/OTP software platform lies in the ability to use hard-coded keys of the platform. Exploiting this vulnerability allows a remote attacker to execute arbitrary code before the operating system is loaded...
Erlang/OTP Privilege Escalation
The vulnerability of the Erlang/OTP software platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Gitea Authentication Bypass Info Disclosure
The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
libssh Error Handling DoS
The vulnerability of the libssh library is related to deficiencies in handling error situations. Exploiting this vulnerability could allow an attacker to cause a service failure...
libssh Loop DoS
The vulnerability of the libssh library lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Perl-DBI Resource Exhaustion DoS
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Perl-DBI Buffer Overflow DoS
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves reading beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Kibana Authentication Bypass Unauthorized Access
The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
FreeRDP RCE
The vulnerability of the RDP client FreeRDP is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
FFmpeg S/PDIF Multiplexer Disclosure DoS
The vulnerability of the S/PDIF multiplexer in the FFmpeg multi-media library relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...
FFmpeg vf_hqdn3d Heap Buffer Overflow DoS
The vulnerability of the video processing filter vfhqdn3d in the FFmpeg multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...
FFmpeg LCL/ZLIB Decoder Disclosure
The vulnerability of the LCL/ZLIB video decoder in the FFmpeg multimedia library is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
Fleet Server Host Service Identification Processing Bypass
The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...
Perl-Crypt-DSA Digital Signature File Access Unauthorized Information Disclosure
The vulnerability of the Perl-Crypt-DSA digital signature package relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
MongoDB Internal Convert Bucket Index Stats DoS
The vulnerability of the $internalConvertBucketIndexStats processing mechanism in the MongoDB database management system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Erlang/OTP Uncontrolled Resource Consumption DoS
The vulnerability of the Erlang programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Erlang/OTP DoS
The vulnerability of the Erlang/OTP software platform lies in the lack of integrity checks for messages. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted TCP segments...
Erlang/OTP DoS
The vulnerability of the Erlang/OTP software platform is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Entity Analytics Watchlist Module Security Solution Kibana Bypass
The vulnerability of the access control processing mechanism for the Entity Analytics Watchlist module of the Security Solution service in the Kibana data visualization platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypa...
Elasticsearch Uncontrolled Recursion DoS
The vulnerability of the Elasticsearch search engine is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Elasticsearch DoS
The vulnerability of the Elasticsearch search engine is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
FreeRDP Buffer Overflow DoS
The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
FreeRDP Buffer Overflow DoS
The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
libssh Heap Buffer Overflow DoS
The vulnerability of the libssh library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
libssh Uncontrolled Resource Consumption DoS
The vulnerability of the libssh library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
libssh Improper Return Value DoS
The vulnerability of the libssh library is related to improper checking of the return value of a function. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
libssh Resource Exhaustion DoS
The vulnerability of the libssh library is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
libssh Authentication Bypass Info Disclosure
The vulnerability of the libssh library is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
BuildKit indefinite resource distribution DoS
The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Kibana Data Visualization Service Access Control Unauthorized Access
The vulnerability of the access control mechanism of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Helm Unvalidated Array Indexing
The vulnerability of the package manager for Kubernetes Helm is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
FFmpeg VobSub Code Execution
The vulnerability of the VobSub subtitle multiplexer in the FFmpeg multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
FFmpeg ADX Decoder Disclosure DoS
The vulnerability of the ADX audio decoder in the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, cause service failures, or execute arbitrary code...
FFmpeg TDSC Video Decoder Memory Corruption
The vulnerability of the TDSC video decoder in the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to damage memory, cause system failures, or execute arbitrary code...
FFmpeg vf_swaprect Heap Buffer Overflow DoS
The vulnerability of the vfswaprect video filter in the FFmpeg multimedia library is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow attackers to corrupt memory, cause service failures, or execute arbitrary code...
Vim Buffer Overflow
The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vim Code Execution
The vulnerability of the Vim text editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
Vim Integer Overflow DoS
The vulnerability of the Vim text editor is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Apache Tomcat Session Duration Unauthorized Access
The vulnerability of the Apache Tomcat application server is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
MongoDB Trim LTRIM RTRIM DoS
The vulnerability of the $trim, $ltrim, and $rtrim functions in the MongoDB database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
MongoDB BSON Document Verification DoS
The vulnerability of the BSON document verification mechanism in the MongoDB database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Elastic Defend Unauthorized Access
The vulnerability of the Elastic Defend component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Etcd gRPC Authorization Bypass
The vulnerability of the gRPC authentication mechanism for Etcd configuration stores is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...
Python-daphne HTTP Request Smuggling
The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...
Kibana XSS
The vulnerability of the Kibana data visualization service is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
FFmpeg vf_floodfill Heap Buffer Overflow DoS
The vulnerability of the vffloodfill video filter in the FFmpeg multimedia library is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to damage memory, cause service failures, or execute arbitrary code...
Kibana Visualization Unauthorized Access
The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Perl-Crypt-DSA DoS
The vulnerability of the Perl-Crypt-DSA digital signature package is related to insufficient entropy. Exploiting this vulnerability can allow an attacker to cause a service failure...