The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain full control over the system.

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain full control over the system...

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

The vulnerability of the punkt_pickle_load() function in the Natural Language processing and statistical processing library package allows a hacker to execute arbitrary code.

The vulnerability of the punktpickleload function in the NLTK library for symbolic and statistical processing of natural language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the getTarSpec() function in the tools/rpmbuild.cc component of the RPM package manager allows a hacker to execute arbitrary code.

The vulnerability of the getTarSpec function in the tools/rpmbuild.cc component of the RPM package manager is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the validatePublicHttpUrl() function in the Lightdash data visualization and analysis tool allows a hacker to gain unauthorized access to protected information and cause service failures.

The vulnerability of the validatePublicHttpUrl function in the Lightdash data visualization and analysis tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause...

The vulnerability of the Repo.clone_from() and Repo.clone() functions in the git/repo/base.py module of the Python library for interacting with Git repositories in GitPython allows a malicious actor to write arbitrary files.

The vulnerability of the Repo.clonefrom and Repo.clone functions in the git/repo/base.py module of the GitPython library for interacting with Git repositories is related to an incorrect path name limitation when processing the --separate-git-dir parameter. Exploiting this vulnerability could allo...

The vulnerability of the `GitConfigParser._read()` function in the `git/config.py` module of the Python library for interacting with Git repositories in GitPython allows a attacker to execute arbitrary code.

The vulnerability of the GitConfigParser.read function in the git/config.py module of the Python library for interacting with Git repositories in GitPython is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to execute arbitra...

The vulnerability of the SQLite driver software used by Adminer for database management allows a hacker to execute arbitrary code.

The vulnerability of the SQLite driver software used by Adminer for database management involves improper code generation practices. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerabilities of the functions pathsec.urlopen(), nltk.data.load(), Downloader.index(), and Downloader.download() in the NLTK library for symbolic and statistical processing of natural language allow attackers to perform SSRF attacks.

The vulnerabilities of the functions pathsec.urlopen, nltk.data.load, Downloader.index, and Downloader.download in the NLTK library for symbolic and statistical processing of natural language are related to insufficient validation of requests on the server side. Exploiting these vulnerabilities...

The vulnerabilities of the functions load_xwd_f2_d1_b1() and load_xwd_f1_d24_b1() in the Gimp image processing library allow a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the loadxwdf2d1b1 and loadxwdf1d24b1 functions in the Gimp image processing library is related to reading values outside of the permitted range in memory. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service...

The vulnerability of the `__acquires()` function in the drivers/usb/chipidea/udc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the rockchip_sfc_probe() function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipsfcprobe function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the s3fwrn82_uart_read() function in the drivers/nfc/s3fwrn5/uart.c file of the Linux operating system’s NFC driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the s3fwrn82uartread function in the drivers/nfc/s3fwrn5/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the q54sj108a2debugfs_read() function in the drivers/hwmon/pmbus/q54sj108a2.c file of the device monitoring driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the q54sj108a2debugfsread function in the drivers/hwmon/pmbus/q54sj108a2.c file, a driver for hardware monitoring in the Linux operating system, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerabilit...

The vulnerability of the scalar_byte_swap() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scalarbyteswap function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the vcn_v3_0_dec_msg() function in the drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c driver for AMD GPU cores in the Direct Rendering Infrastructure (DRI) of the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to access...

The vulnerability of the Windows Bluetooth Port Driver on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ODBC driver for SQL Server on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the ODBC driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems allows attackers to disclose protected information.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the transmission of critical information in open text. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability in the requestInternal HTTP redirection processing function of the urllib package in the Node.js npm package stack allows attackers to access protected information.

The vulnerability of the requestInternal handling function in the urllib package of the Node.js npm package stack involves exposing confidential information to unauthorized entities. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of the formcreateFileName() function in the /goform/formcreateFileName file of the Tenda CH22 router’s microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the formcreateFileName function in the /goform/formcreateFileName file of the Tenda CH22 router microprogramming system is related to the failure to take measures to eliminate special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

The vulnerability of the evws_new_session() function in the Libevent asynchronous event notification library allows a hacker to trigger a service failure.

The vulnerability of the evwsnewsession function in the Libevent asynchronous event notification library is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the evhttp_find_header() function in the evhttp HTTP parser library from the asynchronous event notification library Libevent allows a attacker to cause a service failure.

The vulnerability of the evhttpfindheader function in the evhttp HTTP parser from the Libevent asynchronous event handling library is related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the evtag_unmarshal_header() function in the Libevent asynchronous event notification library allows a attacker to cause a service failure.

The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the keycloak-services component of the Keycloak identity and access management software allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to the system.

The vulnerability of the keycloak-services component of the Keycloak identity and access management software is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to bypass existing security measures and gain unauthorized access to the syst...

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite (ZCS) enterprise email management system allows a hacker to execute arbitrary code.

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the rz_mtu3_count_enable_write() function in the drivers/counter/rz-mtu3-cnt.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rzmtu3countenablewrite function in the drivers/counter/rz-mtu3-cnt.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the reset_add gpio_aux_device() function in the drivers/reset/core.c file of the Linux kernel-based universal reset controller driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the resetadd gpioauxdevice function in the drivers/reset/core.c file of the Linux kernel-based universal reset controller driver relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an...

The vulnerability of the do_become_nonbusy() function in the drivers/comedi/comedi_fops.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the dobecomenonbusy function in the drivers/comedi/comedifops.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow a remote attacker to cause service failure...

The vulnerability of the qla24xx_els_dcmd_iocb() function in the drivers/scsi/qla2xxx/qla_iocb.c driver for SCSI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qla24xxelsdcmdiocb function in the drivers/scsi/qla2xxx/qlaiocb.c driver for Linux SCSI device drivers is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the vub300_disconnect() function in the drivers/mmc/host/vub300.c module of the MMC/SD/SDIO card driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vub300disconnect function in the drivers/mmc/host/vub300.c module of the MMC/SD/SDIO card driver for the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the st_lsm6dsx_fifo_setup() function in the drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c driver module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information in various types of embedded sensors integrated into the Linux operating system.

The vulnerability of the stlsm6dsxfifosetup function in the drivers/iio/imu/stlsm6dsx/stlsm6dsxbuffer.c module of various types of embedded sensors in the Linux operating system is related to reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromi...

The vulnerability of the aml_sfc_probe() function in the drivers/spi/spi-amlogic-spifc-a4.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the gether_disconnect() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the getherdisconnect function in the drivers/usb/gadget/function/uether.c module of the Linux device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the walk_pud_range() function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the walkpudrange function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tcp_ao_verify_hash() function in the net/ipv4/tcp_ao.c module, which is part of the Linux operating system’s IPv4 protocol implementation, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpaoverifyhash function in the net/ipv4/tcpao.c module of the Linux operating system’s IPv4 protocol implementation is related to an incorrect session expiration time. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the __cdns3_gadget_ep_queue() function in the drivers/usb/cdns3/cdns3-gadget.c driver module allows a hacker to cause a service failure.

The vulnerability of the cdns3gadgetepqueue function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the eth_get_drvinfo() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the ipv6_srh_rcv() and seg6_hmac_validate_skb() functions in the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the ipv6srhrcv and seg6hmacvalidateskb functions in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_kprobe_multi_link_attach() function in the kernel/trace/bpfTrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to trigger a system failure.

The vulnerability of the bpfkprobemultilinkattach function in the kernel/trace/bpfTrace.c module, which supports kernel tracing in Linux operating systems, is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to cause a system failure...

The Readout Protection protection mode of microprogramming software for microcontrollers from Puya Semiconductor, models PY32F00X, PY32F0XX, and PY32F403, allows unauthorized access by intruders to the protected information.

The vulnerability of the Readout Protection protection mechanism in microprogramming software for microcontroller devices from Puya Semiconductor, models PY32F00X, PY32F0XX, and PY32F403, is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging...

The vulnerability of the SSHFS file system’s client’s find_base_path() function allows a hacker to execute arbitrary commands.

The vulnerability of the findbasepath function in the SSHFS file system lies in the ability to exploit or modify arguments. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

The vulnerability of the `Response._make_location_absolute()` function in the `src/webob/response.py` file of the WebOb library, which is used for analyzing HTTP requests and generating HTTP responses. This vulnerability allows attackers to carry out phishing attacks.

The vulnerability of the Response.makelocationabsolute function in the src/webob/response.py file, a library for analyzing HTTP requests and generating HTTP responses in WebOb, is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker t...

The vulnerability of the evbuffer_add_buffer_reference() function in the Libevent event-driven library allows a attacker to cause a service failure.

The vulnerability of the evbufferaddbufferreference function in the Libevent event-driven library is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the evhttp_decode_uri_internal() function in the Libevent asynchronous event notification library allows a attacker to cause a service failure.

The vulnerability of the evhttpdecodeuriinternal function in the Libevent asynchronous event notification library is related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the dnsname_to_labels() function in the Libevent event-driven notification library allows a attacker to cause a service failure.

The vulnerability of the dnsnametolabels function in the Libevent asynchronous event notification library is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...