98363 matches found
Internal Operations Component Full Control
The vulnerability of the Internal Operations component of the Oracle Spares Management software lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to gain full control over the system through HTTP requests...
Windows Event Logging Code Execution
The vulnerability of the Windows Event Logging service is related to overflow of the buffer in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Checkov Code Analysis Code Execution
The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
Remote Desktop Services RCE
The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfnodegettag function in the scenegraph/basescenegraph.c file of the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC audio stream parser DoS
The vulnerability of the Opus audio stream parser on the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...
TrackWriter Component GPAC DoS
The vulnerability of the TrackWriter component of the GPAC multimedia platform relates to the assignment of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Wireshark TLS ECH DoS
The vulnerability of the TLS ECH traffic analyzer processor in Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
C omni-completion module Code Execution
The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vim dump_prefixes Heap Buffer Overflow DoS
The vulnerability of the dumpprefixes function in the src/spell.c file of the Vim text editor is related to the escape of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure...
Vim tree_count_words() Heap Buffer Overflow
The vulnerability of the treecountwords function in the src/spellfile.c file of the Vim text editor is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
AIGP Attribute Parser DecodeFromBytes() Data Compromise
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol is related to the operation of pushing data out of the buffer into memory. Exploiting this vulnerability could allow a malicious actor to...
GoBGP DecodeFromBytes Buffer Overflow DoS
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the GoBGP edge gateway protocol is related to a single-bit offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...
BGP OPEN Message Handler DecodeFromBytes() Privilege Escalation
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the BGP OPEN Message Handler component is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
netrw Plugin RCE
The vulnerability of the netrw text editor plugin in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
MinIO Storage REST API ReadMultiple() Unauthorized Access
The vulnerability of the ReadMultiple function in the Storage REST API of the MinIO object storage server is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
DirectShow Code Execution
The vulnerability of the DirectShow component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Skype for Business Server Code Execution
The vulnerability of the Skype for Business Server’s instant messaging program is related to improper external management of the file name or path. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfnodegettag function in the scenegraph/basescenegraph.c file of the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfhevcreadspsbsinternal function in the mediatools/avparsers.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the cttsboxwrite function in the isomedia/boxcodebase.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfisomgetuserdatacount function in the isomedia/isomread.c file of the multimedia platform GPAC involves the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the smoothparsestreamindex function in the src/mediatools/mpd.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
MIH MPEG DSM-CC eDonkey MEGACO Traffic Analyzer DoS
The vulnerability of MIH, MPEG DSM-CC, eDonkey, and MEGACO protocol decoders, as well as the Wireshark traffic analyzer, is related to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Apache Tomcat EncryptInterceptor Data Compromise
The vulnerability of the EncryptInterceptor component in the Apache Tomcat application server is related to insufficient technical documentation. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
Vim Spell Soundfold DoS
The vulnerability of the spellsoundfoldsal function in the src/spell.c file of the Vim text editor is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a attacker to cause a system failure...
python3complete.vim Code Execution
The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
GoBGP ParseIP6Extended Function DoS
The vulnerability of the ParseIP6Extended function in the bgp/bgp.go file of the GoBGP border gateway protocol is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...
SRv6 L3 Service DecodeFromBytes() Buffer Overflow DoS
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/prefixsid.go file of the SRv6 L3 Service protocol for the GoBGP edge gateway is related to improper resource cleanup or release. Exploiting this vulnerability could allow a malicious actor to cause service failure...
BGP OPEN Message Parser GoBGP Data Compromise
The vulnerability of the BGP OPEN message parser in the pkg/packet/bbg module of the edge gateway protocol GoBGP is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...
GoBGP Adj-RIB BGP DoS
The vulnerability of the AdjRib.Update function in the Adj-RIB BGP protocol control module of the GoBGP border gateway is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failure...
libde265 Heap Buffer Overflow DoS
The vulnerability of the decodercontext::decodeSliceUnitTiles function in the libde265/decctx.cc implementation of the h.265 video codec. Libde265 relies on the output of the operation outside the buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure...
NFS ONCRPC XDR Driver Code Execution
The vulnerability of the services for the NFS ONCRPC XDR driver on the Windows operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfcencsetpssh function in the isomedia/drmsample.c file of the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfodfvvccfgwritebs function in the odf/descriptors.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfmediamapesd function in the mediatools/isomtools.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
libde265 Heap Buffer Overflow DoS
The vulnerability of the decodeSliceUnitWPP function in the libde265/decctx.cc file of the h.265 codec implementation, developed by Libde265, is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause...
Vim ZIP Plugin Command Execution
The vulnerability in the built-in ZIP-plugin of the Vim text editor’s runtime/autoload/zip.vim module is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
Vim Crypt DoS
The vulnerability of the VimCrypt file decoding mechanism in the src/crypt.c file of the Vim text editor lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Vim Code Execution
The vulnerability of the vmsfixfilename function in the Vim/src/osvms.c file of the Vim text editor is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Vim get_text_props Heap Buffer Overflow DoS
The vulnerability of the gettextprops function in the src/textprop.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...
Vim update_snapshot() Buffer Overflow
The vulnerability of the updatesnapshot function in the src/terminal.c file of the Vim text editor is related to the execution of the operation outside the buffer’s memory limits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...
PHP omni-completion module runtime/autoload/phpcomplete.vim Code Execution
The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module of the runtime/autoload/phpcomplete.vim text editor in Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
GoBGP parseRibEntry Function DoS
The vulnerability of the parseRibEntry function in the pkg/packet/mrt/mrt.go file of the GoBGP firewall protocol is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
BGP Header Handler DecodeFromBytes Privilege Escalation
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the BGP Header Handler component of the GoBGP border gateway protocol is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfisomcopysampleinfo function in the isomedia/isomwrite.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the fileinprocess function in the infile.c file of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Vim Spell Soundfold Buffer Overflow
The vulnerability of the spellsoundfoldsofo function in the src/spell.c file of the Vim text editor is related to the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...
Vim Heap Buffer Overflow DoS
The vulnerability of the umgotoline and gettextprops functions in the src/textprop.c file of the Vim text editor is related to the execution of an operation outside the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to cause a system failure...
netrw.vim Command Execution
The vulnerability of the NetrwLocalRmFile function in the runtime/pack/dist/opt/netrw/autoload/netrw.vim file of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability could allow an attacker to...