97848 matches found
Linux netfilter xt_nat_checkentry_v0 Heap Buffer Overflow
The vulnerability of the xtnatcheckentryv0 function in the net/netfilter/xtnat.c component of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Skia Graphic Library Access Information Disclosure
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to protected information through a specially created HTML page...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the amdgpuamdkfdgpuvmfreememoryofgpu function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the radeonringrestore function in the drivers/gpu/drm/radeon/radeonring.c kernel module of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Resource Control Compromise
The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources during its existence. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux kernel TSI721 DPC Buffer Overflow
The vulnerability of the tsi721dbdpc function in the drivers/rapidio/devices/tsi721.c component of the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the integrity and accessibility of protected information...
Microsoft Office SharePoint Privilege Escalation
The vulnerability of the Microsoft Office SharePoint web platform for collaborative work and document management is related to errors in verifying cryptographic signatures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Resilient File System Code Execution
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Navigation section DoS
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
Navigation section Microsoft Edge Google Chrome Protected Information Access
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Linux fs/afs/rxrpc Heap Buffer Overflow DoS
The vulnerability of the fs/afs/rxrpc.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Navigation section Microsoft Edge Google Chrome Protected Information Access
The vulnerability of the Navigation section in Microsoft Edge and Google Chrome relates to the disclosure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the vmuqueryblocks function in the drivers/mtd/maps/vmu-flash.c component of the Linux kernel is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system failure...
Wazuh improper recursive links DoS
The vulnerability of the Wazuh security monitoring and threat detection platform is related to improper restrictions on recursive references to entities in the DTD. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Google Chrome Microsoft Edge Information Disclosure
The vulnerability of the QUICK UDP Internet Connections protocol implementation in Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created...
MediaCapture Component Protected Information Access
The vulnerability of the MediaCapture component in Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Linux drivers/char/tlclk.c Heap Buffer Overflow DoS
The vulnerability of the tlclkcleanup function in the drivers/char/tlclk.c component of the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
Linux Distributed ARP Table Buffer Overflow DoS
The vulnerability of the net/batman-adv/distributed-arp-table.c component in the Linux operating system is related to the operation of moving beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality and accessibility of protected...
Microsoft Dynamics NAV Auth Bypass Info Disclosure
The vulnerability of the integrated business management system Microsoft Dynamics NAV lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Windows Security App Memory Use After Free Privilege Escalation
The vulnerability of the Windows Security App antivirus program is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges...
cURL Use-After-Free
The vulnerability of the software for interacting with servers via cURL is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Excel Code Execution
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to reading data beyond the allowed range in memory. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...
Wazuh security.update_user() Bypass
The vulnerability of the security.updateuser function on the monitoring and threat detection platform Wazuh is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers operating remotely to bypass existing security mechanisms...
Wazuh check_remote_commands() Code Execution Root Privileges
The vulnerability of the checkremotecommands function on the security monitoring and threat detection platform Wazuh is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...
Wazuh authd Unauthorized Access
The vulnerability of the authd module of the Wazuh security monitoring and threat detection platform relates to the disclosure of information. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...
Nginx UI Code Execution
The vulnerabilities in the api/config/add.go, api/config/modify.go, and mcp/config/configmodify.go scripts of the Nginx UI user interface are related to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker who operates remotely to execute arbitrary code,...
WmServiceMock Module Code Execution
The vulnerability of the WmServiceMock module of the IBM WebMethods Integration integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Nginx UI Server Privilege Escalation
The vulnerability in the api/user/router.go code of the Nginx UI server’s user interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and increase their privileges...
Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS
The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux driver power supply core Heap Buffer Overflow DoS
The vulnerability in the drivers/power/supply/powersupplycore.c component of the Linux operating system is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux nfsd4 DropRevokedStid() DoS
The vulnerability of the nfsd4 DropRevokedStid function in the fs/nfsd/nfs4state.c component of the Linux operating system is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Linux tegra_ahub_put_value_enum Heap Buffer Overflow DoS
The vulnerability of the tegraahubputvalueenum function in the sound/soc/tegra/tegra210ahub.c component of the Linux operating system is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
Linux kernel Set RQ Size Buffer Overflow
The vulnerability of the setrqsize function in the drivers/infiniband/hw/mlx5/qp.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the qcadmphdr function in the drivers/bluetooth/hciqca.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel BPF Buffer Overflow DoS
The vulnerability of the bpfprogmapcompatible function in the kernel/bpf/core.c file of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
Linux watchdog DoS
The vulnerability of the watchdogunregisterdevice function in the drivers/watchdog/watchdogcore.c component of the Linux operating system’s kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux create_sdw_dailinks Heap Buffer Overflow
The vulnerability of the createsdwdailinks function in the sound/soc/amd/acp/acp-sdw-sof-mach.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the kfddqmsuspendbadqueuemes function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Linux operating system is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow an attacker to cause a service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the drmsyncobjfindfence function in the drivers/gpu/drm/drmsyncobj.c kernel module of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux kernel srpt_get_desc_tbl Heap Buffer Overflow
The vulnerability of the srptgetdesctbl function in the drivers/infiniband/ulp/srpt/ibsrpt.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...
Linux kernel Crypto SHA204A RCE
The vulnerability of the functions atmelsha204arngreadnonblocking and atmelsha204arngread in the Linux kernel’s drivers/crypto/atmel-sha204a.c file is related to insufficient resource control during their existence. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the athtxedmatasklet function in the drivers/net/wireless/ath/ath9k/xmit.c file of the Linux kernel is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the rtwpcirxnapi function in the drivers/net/wireless/realtek/rtw88/pci.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...
rtw89_update_6ghz_rnr_chan_ax Heap Buffer Overflow DoS
The vulnerability of the rtw89update6ghzrnrchanax function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Microsoft Visio Graphical Editors Code Execution
The vulnerability of Microsoft Visio graphical editors in Microsoft Office packages and 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Wazuh fim_generate_alert() DoS
The vulnerability of the fimgeneratealert function on the security monitoring and threat detection platform Wazuh involves an escape from the buffer boundary into memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Nginx UI Authentication Bypass
The vulnerability of the Nginx UI server’s user interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
DN-Link DIR-868L CGI Handler System Call Code Execution
The vulnerability of the system function in the HNAP CGI Handler component of D-Link DIR-868L router microprogramming software is related to the lack of measures taken at the control level to prevent data corruption. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...