98363 matches found
PHP Buffer Overflow DoS
The vulnerability of the PHP interpreter is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
libssh Stack Buffer Overflow RCE
The vulnerability of the libssh library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Perl-DBI Path Traversal
The vulnerability of the Perl-DBI interface for connecting to and working with databases is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
BuildKit Command Injection
The vulnerability of the BuildKit container-building software lies in the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
DNSdist Bypass ACL
The vulnerability of the IncomingHTTP2Connection::handleIncomingQuery function in the pdns/dnsdistdist/dnsdist-nghttp2-in.cc file of the load balancer and proxy for DNS traffic is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor ...
Erlang/OTP DoS
The vulnerability of the Erlang/OTP software platform is related to deficiencies in prediction capabilities. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Etcd gRPC Authorization Bypass
The vulnerability of the gRPC authentication mechanism for Etcd configuration stores is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...
golang-x-net Package Code Execution
The vulnerability of the golang-x-net package in the Golang programming language is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...
Entity Analytics Component DoS
The vulnerability of the Entity Analytics component of the Kibana data visualization service is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Erlang/OTP Authentication DoS
The vulnerability of the Erlang/OTP software platform is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Asynchronous Python-daphne Unlimited Resource Distribution DoS
The vulnerability of the asynchronous Python-daphne web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
pygments DoS
The vulnerability of the pygments syntax highlighting library is related to the use of a regular expression c, which has an inefficient computational cost. Exploiting this vulnerability could allow an attacker to cause a service failure...
golang-x-image Heap Buffer Overflow RCE
The vulnerability of the golang-x-image package, a programming language, is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Kibana DoS
The vulnerability of the Kibana data visualization service is related to an error in handling exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Jenkins URL Redirection Phishing
The vulnerability of the URL redirection check mechanism after a Jenkins automation server is accessed involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...
Jenkins Node Disconnection Code Execution
The vulnerability of the mechanism for processing descriptions of node disconnection reasons in Jenkins automation is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary co...
Containerd CRI Plugin Arbitrary Command Execution
The vulnerability of the mechanism for processing container configuration tags in the CRI-plugin for Containerd is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
Glances secure_popen Command Execution
The vulnerability of the securepopen function in the Glances monitoring tool glances/secure.py is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...
Erlang/OTP Privilege Escalation
The vulnerability of the Erlang/OTP software platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Erlang/OTP Type of Man-in-the-Middle
The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...
Kibana Visualization File Management Bypass
The vulnerability of the file and attachments management mechanism of the Kibana visualization service involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows an attacker to circumvent security restrictions remotely...
FreeRDP Buffer Overflow RCE
The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
libssh Heap Buffer Overflow DoS
The vulnerability of the libssh library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
libssh Uncontrolled Resource Consumption DoS
The vulnerability of the libssh library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
libssh Heap Overflow DoS
The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
BuildKit indefinite resource distribution DoS
The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Kibana Authentication Bypass Unauthorized Access
The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Kibana Machine Learning Data Compromise
The vulnerability of the Machine Learning plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...
Helm Unvalidated Array Indexing
The vulnerability of the package manager for Kubernetes Helm is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
FreeRDP RCE
The vulnerability of the RDP client FreeRDP is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
FFmpeg S/PDIF Multiplexer Disclosure DoS
The vulnerability of the S/PDIF multiplexer in the FFmpeg multi-media library relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...
FFmpeg ADX Decoder Disclosure DoS
The vulnerability of the ADX audio decoder in the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, cause service failures, or execute arbitrary code...
FFmpeg IAMF demultiplexer DoS
The vulnerability of the IAMF demultiplexer in the FFmpeg multimedia library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
FFmpeg LCL/ZLIB Decoder Disclosure
The vulnerability of the LCL/ZLIB video decoder in the FFmpeg multimedia library is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
FFmpeg QR-code Processing Heap Buffer Overflow DoS
The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...
Vim Buffer Overflow
The vulnerability of the Vim text editor is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vim Code Execution
The vulnerability of the Vim text editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
Vim Code Execution
The vulnerability of the Vim text editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
Vim Command Injection
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
Vim Code Execution
The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
lib Image ExifTool GM.pm Code Execution
The vulnerability of the Processmrld function in the lib/Image/ExifTool/GM.pm handler for JPEG/QuickTime/MOV/MP4 metadata processing in the ExifTool library related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow an attacker to execute...
Perl-Crypt-DSA DoS
The vulnerability of the Perl-Crypt-DSA digital signature package is related to insufficient entropy. Exploiting this vulnerability can allow an attacker to cause a service failure...
Erlang/OTP Unauthorized Access
The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Erlang/OTP SSRF
The vulnerability of the Erlang/OTP software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to perform a SSRF attack remotely...
Kibana Timeline Mass Deletion DoS
The vulnerability of the mass deletion mechanism of objects in the Kibana data visualization service’s Timeline feature is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Kibana APM Unauthorized Access
The vulnerability of the Application Performance Monitoring APM component of the Kibana data visualization service is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protecte...
Kibana visualization service DoS
The vulnerability of the Kibana visualization service’s collection management mechanism is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Kibana Authentication Bypass Unauthorized Access
The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Squid Proxy Heap Buffer Overflow
The vulnerability of the Squid proxy server is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Erlang/OTP Unauthenticated Access Disclosure
The vulnerability of the Erlang/OTP software platform is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...