98239 matches found
PyPDF XML Processing DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to errors in processing XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Exim dn_expand() Unauthorized Access
The vulnerability of the dnexpand function in the Exim mail server is related to errors in the representation of certain functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Exim Unauthenticated Access Disclosure
The vulnerability of the Exim mail server is related to errors in representing certain functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PyPDF Excessive Iteration DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to excessive iteration. Exploiting this vulnerability can allow a malicious actor to cause service failures...
PyPDF Excessive Iteration DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to excessive iteration. Exploiting this vulnerability can allow a malicious actor to cause service failures...
PyPDF Uncontrolled Memory Allocation DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
PyPDF Uncontrolled Resource Consumption DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
PyPDF Resource Exhaustion
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Apache ActiveMQ Access Control Bypass
The vulnerability of Apache ActiveMQ-related software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
PyPDF Uncontrolled Resource Consumption DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures...
PyPDF Loop DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
PyPDF Loop DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
ASP.NET Core DoS
The vulnerability of the ASP.NET Core software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
ImageMagic ASHLAR Path Traversal
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
pgAdmin 4 Privilege Escalation
The vulnerability of the pgAdmin 4 database management tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
PHP Redis Valkey Predis Arbitrary Command DoS
The vulnerability of the AbstractAggregateConnection::write method in PHP clients for Redis and Valkey Predis lies in the lack of measures to neutralize CRLF sequences. Exploiting this vulnerability allows an attacker to execute arbitrary commands and cause service failures...
lib/grammar.js reg() Bypass Security
The vulnerability of the reg function in the lib/grammar.js module, which is used for accessing and managing XML documents, is related to errors in processing XML requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...
XMLDOM Document.createElement() XSS
The vulnerability of the Document.createElement function in the XML document access and management module, XMLDOM, is related to errors in processing XML requests. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and perform cross-site scripting attacks XSS...
lib/sax.js XML DOM Buffer Overflow DoS
The vulnerability of the parseElementStartPart function in the lib/sax.js file, a module for defining methods to access and manage XML documents, is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
Linux xhci_irq() Heap Buffer Overflow DoS
The vulnerability of the xhciirq function in the drivers/usb/host/xhci-ring.c file of the Linux USB device driver framework is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
sps30_i2c_read_meas Heap Buffer Overflow DoS
The vulnerability of the sps30i2creadmeas function in the drivers/iio/chemical/sps30i2c.c module of various types of embedded sensors in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
Direct Rendering Infrastructure Heap Buffer Overflow DoS
The vulnerability of the xesyncentryparse function in the drivers/gpu/drm/xe/xesync.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to insufficient checking of exception conditions. Exploiting this vulnerability could allow an attacker to cause...
Fortinet FortiWeb Authentication Bypass
The vulnerability of Fortinet FortiWeb network firewalls is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to bypass existing security restrictions remotely...
PyPDF Uncontrolled Memory Allocation DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Grafana Monitoring Resource Consumption DoS
The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Tenda A18 Router Code Execution
The vulnerability of the fromSetCmdlineRun function in the Tenda A18 router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PyPDF Algorithmic Complexity DoS
The vulnerability of the Python library for working with PDF files, PyPDF, is related to its algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...
.NET DoS
The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
ImageMagick magnify Code Execution
The vulnerability of the “magnify” operation in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ImageMagick FTXT Encoder DoS
The vulnerability of the FTXT encoder in the console-based image editing tool ImageMagick relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ImageMagick PDB Decoder Code Execution
The vulnerability of the PDB console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ImageMagic ASHLAR Encoder DoS
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to the lack of memory release after the effective lifespan of the encoder. Exploiting this vulnerability can allow an attacker to cause a service failure...
FreeRDP RDP Client Unauthorized Access
The vulnerabilities of the functions dvcmancallonreceive and dvcmanchannelclose in the file channels/drdynvc/client/drdynvcmain.c of the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker operating remotely...
lib/grammar.js XML DOM DoS
The vulnerability of the lib/grammar.js file, which is part of the module for determining access methods to XML documents and managing them via XMLDOM, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
lib/dom-parser.js XMLDOM DoS
The vulnerability of the DOMHandler.startElement method in the lib/dom-parser.js file of the XML document access and manipulation module called XMLDOM is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Atlassian Confluence Server Privilege Escalation
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...
Linux kernel cgroup_migrate_add_task Heap Buffer Overflow DoS
The vulnerability of the cgroupmigrateaddtask function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to incorrect handling of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux USB Device Driver Heap Buffer Overflow DoS
The vulnerability of the xhcidisableSlot function in the drivers/usb/host/xhci.c module of the Linux device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Microsoft Edge Data Type Mixing Code Execution
The vulnerability of Microsoft Edge based on Chromium is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the irisvb2stopstreaming function in the drivers/media/platform/qcom/iris/irisvb2.c driver for multimedia devices in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the rsikillthread function in the drivers/net/wireless/rsi/rsicommon.h file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
AppArmor security component Heap Buffer Overflow DoS
The vulnerability of the aasockmsgperm function in the security/apparmor/lsm.c module of the AppArmor security component of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrit...
Linux kernel iptfs_consume_frags Heap Buffer Overflow DoS
The vulnerability of the iptfsconsumefrags function in the net/xfrm/xfrmiptfs.c module, which is part of the Linux kernel’s networking functions, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel RDS IB CM Buffer Overflow DoS
The vulnerability of the rdsibsetupqp function in the net/rds/ibcm.c module of the Linux kernel’s networking functions is related to unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...
Linux kernel signal function Heap Buffer Overflow DoS
The vulnerability of the zapotherthreads function in the kernel/signal.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
KVM Heap Buffer Overflow DoS
The vulnerability of the markpagedirtyinslot function in the virt/kvm/kvmmain.c module of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service...
SLIMbus Driver Heap Buffer Overflow DoS
The vulnerability of the qcomslimngdctrlprobe function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...
Direct Rendering Infrastructure AMD Graphics Buffer Overflow
The vulnerability of the dalvectorreserve function in the drivers/gpu/drm/amd/display/dc/basics/vector.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to a buffer overflow in dynamic memory. Exploiting this vulnerability could...
Linux SPI Buffer Overflow DoS
The vulnerability of the s3c64xxspiremove function in the drivers/spi/spi-s3c64xx.c file of the Linux kernel’s SPI device driver is related to the pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
NVME Kernel Heap Buffer Overflow DoS
The vulnerability of the nvmetctrlfree function in the drivers/nvme/target/core.c module of the NVME driver for the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service failure...