92434 matches found
The vulnerability of the fromDhcpListClient() function (/goform/DhcpListClient) in the Tenda FH1202 router software allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda FH1202 router software lies in the issue where the operation exceeds the buffer limits in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of D-Link DIR-513 router microprogramming software, caused by buffer overflows, allows attackers to execute arbitrary code and trigger a service failure.
The vulnerability of D-Link DIR-513 router microprogramming software arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...
The vulnerability of the qmimux_rx_fixup() function in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the qmimuxrxfixup function in Linux operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the functions __is_bitmap_valid() (fs/f2fs/checkpoint.c) and do_recover_data() (fs/f2fs/recovery.c) in the Linux kernel-based file system F2FS allows a attacker to trigger a service failure.
The vulnerability of the isbitmapvalid function fs/f2fs/checkpoint.c and dorecoverdata function fs/f2fs/recovery.c in the Linux kernel-based file system F2FS is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the cpt_ucode_load_fw() function in the drivers/crypto/cavium/cpt/cptpf_main.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.
The vulnerability of the cptucodeloadfw function in the drivers/crypto/cavium/cpt/cptpfmain.c file of the Linux kernel cryptographic accelerator driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of D-link DIR-823X router microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.
The vulnerability of D-link DIR-823X router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the strcpy() function (/goform/setSysAdm) in the UTT HiPER 810G router software allows a attacker to cause a service failure.
The vulnerability of the strcpy function /goform/setSysAdm in the UTT HiPER 810G router software is related to the operation of writing data beyond the buffer boundaries when processing the passwd1 parameter. Exploiting this vulnerability could allow an attacker to cause a service failure remotel...
The vulnerability of the formEasySetTimezone() function (/goform/formEasySetTimezone), a built-in microprogramming software function of the D-Link DIR-513 router’s web server, allows a malicious actor to cause a service failure.
The vulnerability of the formEasySetTimezone function /goform/formEasySetTimezone in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside of the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could...
The vulnerability of the run_work() function in Linux operating system kernels, which allows a hacker to trigger a service failure.
The vulnerability of the runwork function in Linux operating system kernels relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the dwc3_remove_requests() function in Linux operating system kernels allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the dwc3removerequests function in Linux operating system kernels is related to the situation of signal handling. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of NVIDIA’s ONNX library allows for the execution of arbitrary code, granting attackers enhanced privileges, unauthorized access to protected information, and the ability to replace data.
The vulnerability of the ONNX library’s Model Optimizer function relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code, gain enhanced privileges, obtain unauthorized access to protected information, and replace data...
The vulnerability of the msm_drv_shutdown() function in the drivers/gpu/drm/msm/msm_drv.c file of the Direct Rendering Infrastructure (DRI) driver module of the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the msmdrvshutdown function in the drivers/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI driver module of the Linux operating system is related to the passing of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Faraday::NestedParamsEncoder component in the HTTP client library for Ruby allows a attacker to trigger a service failure.
The vulnerability of the Faraday::NestedParamsEncoder component in the HTTP client library for Ruby lies in its uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the ntfs_truncate() function in the fs/ntfs3/file.c module of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ntfstruncate function in the fs/ntfs3/file.c module of the NTFS file system in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerabilities of the functions dp_display_get_next_bridge() (drivers/gpu/drm/msm/dp/dp_display.c) and dp_parser_find_next_bridge() (drivers/gpu/drm/msm/dp/dp_parser.c) in the Linux kernel’s Direct Rendering Infrastructure (DRI) driver software allow a malicious actor to cause service interruptions.
The vulnerability of the functions dpdisplaygetnextbridge drivers/gpu/drm/msm/dp/dpdisplay.c and dpparserfindnextbridge drivers/gpu/drm/msm/dp/dpparser.c in the Linux kernel’s Direct Rendering Infrastructure DRI driver framework is related to the distribution of resources without any restrictions...
The vulnerability of D-Link DIR-513 router’s microprogramming software, related to the operation of writing data outside the buffer in memory, allows a hacker to cause a service failure.
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing the webpage parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...
The vulnerability of the fromwebExcptypemanFilter() function (/goform/webExcptypemanFilter) in the Tenda F453 router software allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the Tenda F453 router software lies in the issue where the operation exits beyond the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the is_omap_iommu_detached() function in the drivers/iommu/omap-iommu-debug.c file of the Linux operating system’s IOMMU driver allows a attacker to cause a service failure.
The vulnerability of the isomapiommudetached function in the drivers/iommu/omap-iommu-debug.c file of the Linux kernel’s IOMMU driver is related to copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the i2c_mux_reg_probe() function in the drivers/i2c/muxes/i2c-mux-reg.c file of the Linux operating system’s I2C driver kernel allows a attacker to cause a service failure.
The vulnerability of the i2cmuxregprobe function in the drivers/i2c/muxes/i2c-mux-reg.c file of the Linux I2C driver kernel module is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the formSetAutoPing() function (/goform/setAutoPing) in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formSetAutoPing function /goform/setAutoPing of the Tenda i3 wireless access point software lies in the fact that the operation’s results may escape from memory when processing the parameters ping1 and ping2. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the `attr_load_runs_vcn()` function in the `fs/ntfs3/attrib.c` module of the NTFS file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the attrloadrunsvcn function in the fs/ntfs3/attrib.c module of the NTFS file system in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the qcom_slim_ngd_ctrl_probe() function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the qcomslimngdctrlprobe function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver in the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to cause...
The vulnerability of the strcpy() function (/goform/getOneApConfTempEntry) in the UTT HiPER 810G router software allows a attacker to cause a service failure.
The vulnerability of the strcpy function /goform/getOneApConfTempEntry in the UTT HiPER 810G router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the strcpy() function (/goform/formConfigDnsFilterGlobal) in the UTT HiPER 810G router software allows a attacker to cause a service failure.
The vulnerability of the strcpy function /goform/formConfigDnsFilterGlobal in the UTT HiPER 810G router software lies in the possibility of the operation being executed outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the mm/mempool module in Linux operating systems allows a hacker to cause a service failure or memory corruption.
The vulnerability of the mm/mempool module in Linux operating systems is related to access to a buffer with an incorrect length value. Exploiting this vulnerability can allow an attacker to cause service failures or memory corruption...
The vulnerability of the net/batman-adv/bat_iv_ogm.c module in the Linux operating system allows a hacker to trigger a system failure during maintenance operations.
The vulnerability of the net/batman-adv/bativogm.c module in the Linux operating system is related to incorrect calculations of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions binder_alloc_set_vma() and binder_alloc_get_vma() in the driver/android/binder_alloc.c module of the Linux kernel communication driver with the Android kernel allow a attacker to cause a service failure.
The vulnerability of the binderallocsetvma and binderallocgetvma functions in the drivers/android/binderalloc.c module of the Linux kernel’s communication driver with the Android kernel involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the ublk_ctrl_end_recovery() function in the drivers/block/ublk_drv.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.
The vulnerability of the ublkctrlendrecovery function in the drivers/block/ublkdrv.c module of the Linux kernel’s block devices driver is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the fromSetCfm() function (/goform/setcfm) in the Tenda F453 router software allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the fromSetCfm function /goform/setcfm of the Tenda F453 router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the funcname and funcpara1 parameters. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.
The vulnerability of D-Link DIR-513 router’s microprogrammed software is related to the operation of writing data outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Vulnerability of the ctnetlink_change_timeout() function in Linux operating system kernels, which allows a hacker to
The vulnerability of the ctnetlinkchangetimeout function in Linux operating systems is related to the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the `socfpga_gate_init()` function in the `drivers/clk/socfpga/clk-gate.c` driver for the Samsung Exynos CPU in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the socfpgagateinit function in the drivers/clk/socfpga/clk-gate.c driver for the Samsung Exynos CPU in Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `z_erofs_decompress_kickoff()` function in the `fs/erofs/zdata.c` file of the EROFS Enhanced ReadOnly File System kernel of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the zerofsdecompresskickoff function in the fs/erofs/zdata.c module of the EROFS Enhanced ReadOnly File System kernel of the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service...
The vulnerabilities of the functions kcm_rfree() and reserve_rx_kcm() in the net/kcm/kcmsock.c module of the Linux operating system allow a hacker to cause a service failure.
The vulnerability of the functions kcmrfree and reserverxkcm in the net/kcm/kcmsock.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the strcpy() function (/goform/formApMail) in the microprogrammed routing software UTT HiPER 810G allows a hacker to cause a service failure.
The vulnerability of the strcpy function /goform/formApMail in the UTT HiPER 810G router software lies in the fact that the operation’s results are stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ip6fl_seq_show() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ip6flseqshow function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the __update_iostat_latency() function in the fs/f2fs/iostat.c file of the Linux kernel’s F2FS file system allows a hacker to trigger a service failure.
The vulnerability of the updateiostatlatency function in the fs/f2fs/iostat.c file of the Linux file system’s F2FS kernel involves operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerabilities of the functions gntdev_map_grant_pages() and __unmap_grant_pages_done() in the driver/xen/gntdev.c file of the Linux kernel’s device driver for memory buffer devices allow a attacker to trigger a service failure.
The vulnerabilities of the functions gntdevmapgrantpages and unmapgrantpagesdone in the driver/xen/gntdev.c file of the Linux kernel device driver for memory buffer devices are related to a memory leak. Exploiting these vulnerabilities could allow an attacker to cause a system failure...
The vulnerability of the OpenBao encryption and secret management system arises from errors in restricting the assignment of security tokens. This allows attackers to enhance their privileges.
The vulnerability of the OpenBao encryption and secret management system is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...
The vulnerability of the queue_rq() function in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the queuerq function in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the __radix_tree_create() function in the net/qrtr/af_qrtr.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the radixtreecreate function in the net/qrtr/afqrtr.c module of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the authentication module in cloud software for creating and using Nextcloud data storage allows a hacker to escalate their privileges.
The vulnerability of the authentication module in cloud software for creating and using Nextcloud data storage involves flaws in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms involve insecure privilege management, allowing attackers to escalate their privileges.
The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework is related to access control errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the function drm_dp_get_adjust_request_post_cursor() in the drivers/gpu/drm/drm_dp_helper.c module of Linux kernel allows a hacker to gain unauthorized access to protected information or cause service failure.
The vulnerability of the drmdpgetadjustrequestpostcursor function in the drivers/gpu/drm/drmdphelper.c module of Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability of the tcm_loop_target_reset() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the tcmlooptargetreset function in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the driver/hid/hid-logitech-hidpp.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/hid/hid-logitech-hidpp.c module in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the UDP packet reception function in QUIC’s libcurl library, a software library for interacting with servers via cURL, allows a attacker to cause a service failure.
The vulnerability of the UDP packet reception function in the QUIC library of the cURL software for interacting with servers is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the Platform component for data analysis and management in Oracle Financial Services Analytical Applications Infrastructure allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP request...
The vulnerability of the JWT/OIDC authentication method of the OpenBao encryption and secret management system allows attackers to perform XSS attacks.
The vulnerability of the JWT/OIDC authentication method of the OpenBao encryption system is related to the lack of mechanisms for encoding or shielding the output data. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...