74701 matches found
The vulnerability of the soup_uri_decode_data_uri() function in the GNOME graphical interface library libsoup allows a attacker to cause a service failure.
The vulnerability of the soupuridecodedatauri function in the libsoup library, a GNOME graphical interface library, is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted POST reque...
The vulnerability in the Web browser Epiphany, related to the lack of user alerts about unsafe actions, allows a hacker to execute arbitrary code.
The vulnerability in the Web browser Epiphany is related to the lack of user alerts about unsafe actions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup, which allows a attacker to trigger a service denial-of-service attack.
The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted POST request...
The vulnerability of the xmlBuildQName function in the Libxml2 library allows a attacker to cause a service failure.
The vulnerability of the xmlBuildQName function in the Libxml2 library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Dynamics 365 FastTrack Implementation software for resource planning in Microsoft Dynamics 365 allows a hacker to disclose sensitive information.
The vulnerability of the Dynamics 365 FastTrack Implementation software for resource planning in Microsoft Dynamics 365 is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose protected informati...
The vulnerability of the SYSTEM FTP-server command of the PCMan FTP Server allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the SYSTEM FTP-server command of the PCMan FTP Server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...
The vulnerability of the PLS FTP-server command in the PCMan FTP Server allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the PLS FTP-server’s command line interface is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...
The vulnerability of the NOOP command in the PCMan FTP server allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the NOOP command in the PCMan FTP server is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...
The vulnerability of the Windows operating system’s Storage Management Provider component allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki ZTeleworker Gateway network devices allows a perpetrator to trigger a device reboot or cause a service failure.
The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z teleworker gateway devices is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to trigger a device reboot or cause a service failure...
The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z teleworkers allows a hacker to cause a service outage.
The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z teleworkers relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending...
The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z series network devices, known as Teleworker Gateway, allows a intruder to cause a service failure.
The vulnerability of the Cisco AnyConnect VPN server of the microsoftware for Cisco Meraki MX and Cisco Meraki Z series Teleworker Gateways is related to the use of an uninitialized variable during the establishment of an SSL VPN session. Exploiting this vulnerability can allow a malicious actor ...
The vulnerability of the Windows operating system’s Storage Management Provider component allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Redundancy Host Service (RdcyHost.exe) of the FactoryTalk Services Platform allows a attacker to increase their privileges and execute arbitrary code.
The vulnerability of the Redundancy Host Service RdcyHost.exe component of the FactoryTalk Services Platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code...
The vulnerability of the Rockwell Automation FactoryTalk View SE HMI software lies in the fact that operations may escape out of the buffer into memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Rockwell Automation FactoryTalk View SE human-machine interface control software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z series network devices, known as Teleworker Gateway, allows a intruder to cause a service failure.
The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z series Teleworker Gateways is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Windows operating system’s Storage Management Provider component, which allows a hacker to exploit it to disclose protected information
The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Windows operating system’s Storage Management Provider component, which allows a hacker to exploit it to disclose protected information
The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Windows operating system’s Storage Management Provider component, which allows a hacker to exploit it to disclose protected information
The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Windows operating system’s Storage Port Driver allows attackers to disclose sensitive information that is protected by this system.
The vulnerability of the Windows operating system’s Storage Port Driver is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Storage Management Provider component in Windows operating systems allows attackers to disclose sensitive information that is protected by this component’s security measures.
The vulnerability of the Storage Management Provider component in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Secure Channel component of the Cryptographic Services service in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Secure Channel component of the Cryptographic Services service in Windows operating systems is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Remote Desktop application for Windows operating systems arises from reading data beyond the buffer boundaries in memory. This allows an attacker to gain unauthorized access to protected information.
The vulnerability of the Microsoft Remote Desktop application for Windows operating systems relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information from a remote location...
The vulnerability of the Rockwell Automation FactoryTalk View SE HMI software, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Rockwell Automation FactoryTalk View SE human-machine interface control software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Rockwell Automation FactoryTalk View SE HMI software lies in the lack of authentication for critical functions. This allows attackers to bypass security restrictions and write arbitrary files.
The vulnerability of the Rockwell Automation FactoryTalk View SE human-machine interface control software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and write arbitrary files...
The vulnerability of the server of the Zabbix universal monitoring system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Zabbix universal monitoring system is related to manipulating an unknown input, resulting in a time mismatch vulnerability. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Telpo MDM mobile device management platform lies in its ability to disclose information through registration files. This allows a malicious actor to gain unauthorized access to the system with administrative rights and to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Telpo MDM mobile device management platform lies in the ability to disclose information through registration files. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the system with administrative privileges and compromise the...
The vulnerability of the soup_multipart_new_from_message() function in the libsoup library, a graphical interface library for GNOME, allows a attacker to cause a service failure.
The vulnerability of the soupmultipartnewfrommessage function in the GNOME graphical interface library libsoup is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the SimpleOne ITSM automation system allows a perpetrator to execute arbitrary code.
The vulnerability of the SimpleOne ITSM automation system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the f2fs component of the Linux operating system’s kernel is related to improper error handling. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the JBIG2Bitmap::combine() function of the Poppler PDF file rendering library allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the JBIG2Bitmap::combine function in the Poppler PDF rendering library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the PackLinuxElf64::un_DT_INIT() function in the src/p_lx_elf.cpp file of the UPX executable file loader allows a attacker to cause a service failure.
The vulnerability of the PackLinuxElf64::unDTINIT function in the src/plxelf.cpp file of the UPX executable file loader is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the XkbSizeKeySyms() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the XkbSizeKeySyms function in the Wayland protocol for X.Org XWayland, which is implemented by the X Window System X.Org Server, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerability of the Pallets Werkzeug web application library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Pallets Werkzeug web application library is related to an uncontrolled resource consumption in the werkzeug.formparser.MultiPartParser component. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the KVv2 plugin for the Vault Community Edition and Vault Enterprise archiving platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the KVv2 plugin for the Vault Community Edition and Vault Enterprise archiving platform relates to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...
The vulnerability of the XkbChangeTypesOfKey() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the XkbChangeTypesOfKey function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerability of the usb6fire_chip_abort() function in the sound/usb/6fire/chip.c module allows a hacker to trigger a service failure for USB audio devices in Linux operating systems.
The vulnerability of the usb6firechipabort function in the sound/usb/6fire/chip.c module, which supports USB audio devices in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ath12k_dp_free() function in the driver drivers/net/wireless/ath/ath12k/dp.c, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kdpfree function in the drivers/net/wireless/ath/ath12k/dp.c file, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, involves re-liberating memory that has already been freed. Exploiting this vulnerability could allow an...
The vulnerability of the default_operstate() function in the net/core/link_watch.c module exposes the support for network functions in the Linux kernel. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the defaultoperstate function in the net/core/linkwatch.c module related to Linux kernel network functions is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the sunxi_musb_exit() function in the drivers/usb/musb/sunxi.c file of the Linux kernel’s USB driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sunximusbexit function in the drivers/usb/musb/sunxi.c file of the Linux kernel’s USB driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the dax_unshare_iter() function in the fs/dax.c module of the Linux operating system allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the daxunshareiter function in the fs/dax.c module of the Linux operating system’s kernel is related to the lack of checking for the returned value. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected informatio...
The vulnerability of the decompress_chunk() function in the fs/ntfs3/lznt.c file of the Linux kernel’s file system ntfs3 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the decompresschunk function in the fs/ntfs3/lznt.c file of the Linux kernel’s file system ntfs3 is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the parse_amd_vsdb() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c file of the amdgpu kernel in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the parseamdvsdb function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file of the amdgpu kernel in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the f2fs_do_shutdown() function in the fs/f2fs/file.c module of the F2FS file system support module for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the f2fsdoshutdown function in the fs/f2fs/file.c module of the Linux file system support module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the can_create() function in the net/can/af_can.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cancreate function in the net/can/afcan.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the irqreturn_t hi3110can_ist() function in the drivers/net/can/spi/hi311x.c module of the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the irqreturnt hi3110canist function in the drivers/net/can/spi/hi311x.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
The vulnerability of the mpc52xx_spiRemove() function in the driver’s drivers/spi/spi-mpc52xx.c file, which supports SPI devices in the Linux kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mpc52xxspiRemove function in the driver drivers/spi/spi-mpc52xx.c code, which supports SPI devices in the Linux kernel, stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the nf_hook_run_bpf() function in the net/netfilter/nf_bpf_link.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfhookrunbpf function in the net/netfilter/nfbpflink.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the il_isr() function in the net/mac80211/util.c module of the iwlegacy component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ilisr function in the net/mac80211/util.c module of the iwlegacy component of the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the ntfs_file_release() function in the fs/ntfs3/file.c file of the Linux kernel’s file system ntfs3 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ntfsfilerelease function in the fs/ntfs3/file.c file of the Linux kernel’s file system ntfs3 is related to the elevation of privileges. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...