95883 matches found
The vulnerability of the compute_insn_live regs() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the computeinsnlive regs function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux operating systems, is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
The vulnerability of the Rsync file transfer and synchronization utility, related to errors in processing length parameters, allows a hacker to trigger a service failure.
The vulnerability of the Rsync file transfer and synchronization utility is related to errors in processing parameter length settings. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Vulnerability of components of the Linux operating system’s kernel, net/mlx5, which allows a hacker to cause a service failure
The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the QEMU hardware emulation software, related to incorrect calculation of buffer size, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created image file...
The vulnerability of the property.c component in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the property.c component in the console-based image editing tool ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the net/mlx5 component in the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the net/mlx5 component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.
The vulnerability of the QEMU hardware emulation software is related to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability in the lib/LWP/UserAgent.pm module, a set of modules for working with LWP::UserAgent web resources, allows a perpetrator to access confidential data.
The vulnerability of the lib/LWP/UserAgent.pm component, a module for working with LWP::UserAgent web resources, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
The vulnerabilities of the Repo.blame() and Repo.blame_incremental() functions, which are part of the security mechanism for the unsafe_git_revision_options library in the Python library for interacting with Git repositories in GitPython, allow attackers to gain unauthorized access to protected information.
The vulnerability of the Repo.blame and Repo.blameincremental functions in the GitPython library’s unsafegitrevisionoptions protection mechanism is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the setSystemConfig() function in the CGI Handler component of the Totolink-N600R router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the setSystemConfig function in the CGI Handler component of the Totolink-N600R router’s microprogramming system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Windows Media component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows Media component in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Secure Kernel Mode mode in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to improper checking of consistency in input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the ahash_setkey() function in the drivers/crypto/caam/caamalg_qi2.c file of the Linux kernel’s cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ahashsetkey function in the drivers/crypto/caam/caamalgqi2.c file of the Linux kernel’s cryptographic accelerator driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the opinfo_add() function in the fs/smb/server/oplock.c module of the Smb subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the opinfoadd function in the fs/smb/server/oplock.c module of the Smb subsystem in the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a remote attacker to...
The vulnerability of the smb_direct_prepare() function in the fs/smb/server/transport_rdma.c file of the Smb kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smbdirectprepare function in the fs/smb/server/transportrdma.c module of the Smb subsystem in the Linux operating system is related to buffer overflows caused by type conversion errors. Exploiting this vulnerability allows a remote attacker to compromise the...
The vulnerability of the vfe_isr() function in the drivers/media/platform/qcom/camss/camss-vfe-480.c driver for multimedia devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vfeisr function in the drivers/media/platform/qcom/camss/camss-vfe-480.c driver for Linux multimedia devices is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Vulnerability of the io.netty.incubator.netty-incubator-codec-ohttp-hpke-classes-boringssl component of the Netty framework, used for developing network applications, servers, and protocol clients. This vulnerability allows attackers to gain unauthorized access to protected information.
The vulnerability of the io.netty.incubator.netty-incubator-codec-ohttp-hpke-classes-boringssl component, a framework for developing network applications, servers, and protocol clients using Netty, relates to the disclosure of information. Exploiting this vulnerability may allow an attacker,...
The vulnerability of the thermal_zone_device_register_with_trips() function in the drivers/thermal/thermal_core.c driver of the Linux kernel temperature control driver, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the thermalzonedeviceregisterwithtrips function in the drivers/thermal/thermalcore.c driver for controlling kernel temperature in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the usbhs_remove() function in the drivers/usb/renesas_usbhs/common.c driver module of the Linux operating system’s USB device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c driver for Linux USB device controllers is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as well as to...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Submodule._config parser function in the Python library for interacting with Git repositories in GitPython allows a malicious actor to execute arbitrary code.
The vulnerability of the Submodule.config parser function in the Python library for interacting with Git repositories in GitPython is related to incorrect external management of file names or paths. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the SQLite driver software used by Adminer for database management allows a hacker to gain access to delete any files they desire.
The vulnerability of the SQLite driver software used by Adminer for database management involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to gain access and delete any files by sending a specially crafted POST request...
The vulnerability of the jsonArrayContains() function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, allows a perpetrator to execute arbitrary code.
The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an...
The vulnerability of the cqspi_probe() function in the drivers/spi/spi-cadence-quadspi.c file of the Linux kernel’s SPI device driver allows a hacker to cause a system failure.
The vulnerability of the cqspiprobe function in the drivers/spi/spi-cadence-quadspi.c file of the Linux kernel’s SPI device driver relates to the use of an unrecoverable function in a parallel context. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability in the amdgpu_dma_buf_move_notify() function of the drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c driver code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the amdgpudmabufmovenotify function in the drivers/gpu/drm/amd/amdgpu/amdgpudmabuf.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory...
The vulnerability of the `addrconf_permanent_addr()` function in the `net/ipv6/addrconf.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the addrconfpermanentaddr function in the net/ipv6/addrconf.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...
The vulnerability of the roccat_reportevent() function in the drivers/hid/hid-roccat.c module of the device subsystem of the Linux operating system’s user interface driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the roccatreportevent function in the drivers/hid/hid-roccat.c module of the Linux kernel device subsystem driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the scx_cgroup_init() function in the kernel/sched/ext.c module, which is part of the Linux operating system’s resource management framework, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the scxcgroupinit function in the kernel/sched/ext.c module, which is part of the Linux kernel’s resource management subsystem, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure and gain unauthorized access to protected information.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions and gain unauthorized access ...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, and modify data.
The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to add, delete, and modify data...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the formexeCommand() function in the Tenda CH22 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the formexeCommand function in the Tenda CH22 router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the formeditFileName() function in the Tenda CH22 router’s software allows a hacker to execute arbitrary code.
The vulnerability of the formeditFileName function in the Tenda CH22 router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the file-pcx plugin of the Gimp image processing library allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the file-pcx plugin of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...
The vulnerability of the openapi3filter.sliceMapToSlice() function in the kin-openapi file handling library allows a attacker to cause a service failure.
The vulnerability of the openapi3filter.sliceMapToSlice function in the kin-openapi file handling library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the openapi3filter.convertParseError() function in the kin-openapi file handling library allows a attacker to cause a service failure.
The vulnerability of the openapi3filter.convertParseError function in the kin-openapi library is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Windows Bluetooth Port Driver on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...