95883 matches found
The vulnerability in the `drivers/nvme/target/fc.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/nvme/target/fc.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `scan_get_next_rmap_item()` function in the mm/ksm.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the scangetnextrmapitem function in the mm/ksm.c component of the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.
The vulnerability of the Work Folder Service in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the HTTP.sys driver on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows DNS service for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Windows Installer component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the NTFS file system in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Linux operating system’s driver/gpu/drm/amd/amdgpu cores allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s components such as drivers, GPU, DRM, AMD, and AMDGPU cores is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the driver for the afd.sys auxiliary function in Windows Sockets operating systems allows a hacker to increase their privileges.
The vulnerability of the driver for the afd.sys auxiliary function in Windows Sockets operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the fs/ntfs3 component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the bpf component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the drivers and COMEDIC components of the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the drivers and COM components in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Import/Export Data function of the pgAdmin 4 database management tool, which allows a hacker to execute arbitrary operating system commands on the server.
The vulnerability of the Import/Export Data function of the pgAdmin 4 database management tool is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on the server remotely...
The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability of the functions kvaser_usb_leaf_wait_cmd() and kvaser_usb_leaf_read_bulk_callback() in the kernel module drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c of the Linux operating system, which allows a hacker to cause a service failure
The vulnerabilities of the functions kvaserusbleafwaitcmd and kvaserusbleafreadbulkcallback in the kernel module drivers/net/can/usb/kvaserusb/kvaserusbleaf.c of the Linux operating system are related to the execution of a loop with an unreachable exit condition. Exploiting these vulnerabilities...
The vulnerability of the have_mon_and_osd_map() function in the net/ceph/ceph_common.c kernel module of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the havemonandosdmap function in the net/ceph/cephcommon.c kernel module of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the fs/ntfs3 component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Microsoft Office software package, related to integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office package is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the btrfs_clear_space_info_full() function in the btrfs module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the btrfsclearspaceinfofull function in the btrfs module of the Linux kernel is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the cloud service for storing immutable confidential records and logs in Azure Confidential Ledger allows a perpetrator to execute arbitrary code.
The vulnerability of cloud services for storing confidential records and logs in Azure Confidential Ledger is related to the use of dangerous methods or functions. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code...
The vulnerability of the mechanism for recording audit entries for system calls to the ptrace() function in the operating system kernel of FreeBSD allows a perpetrator to bypass existing security mechanisms.
The vulnerability of the mechanism for recording audit entries for system calls to the ptrace function in FreeBSD operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms...
The vulnerability of the API-endpoint component of VK WorkMail’s corporate email service allows a hacker to execute arbitrary commands.
The vulnerability of the API-endpoint component of VK WorkMail’s corporate email service is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the Linux operating system’s kernel, related to the use of an uninitialized resource, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to cause a service failure...
The vulnerability of the Windows GDI+ interface on Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the Windows GDI+ interface on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the corporate platform Microsoft Teams, related to the lack of authentication, allows a perpetrator to elevate their privileges.
The vulnerability of the corporate platform Microsoft Teams is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Azure Active Directory identity management and protection platform, related to modifications of expected data, allows attackers to escalate their privileges.
The vulnerability of the Azure Active Directory identity management and protection platform is related to modifications of assumed data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Azure SQL Database cloud relational database, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.
The vulnerability of Azure SQL Database cloud relational database is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of Azure SQL Managed Instance, a PaaS service, arises from insufficient network connection restrictions for specified endpoints. This allows attackers to escalate their privileges.
The vulnerability of Azure SQL Managed Instance PaaS is related to insufficient network connection restrictions for specified endpoints. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the zfs_ioc_userspace_many() function in the OpenZFS component of FreeBSD-based operating systems allows a attacker to increase their privileges.
The vulnerability of the zfsiocuserspacemany function in the OpenZFS component of FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain increased privileges...
The vulnerability of the Query Engine component of the Loki logging aggregation and storage system allows a attacker to trigger a service failure.
The vulnerability of the Query Engine component of the Loki logging aggregation and storage system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability in the Linux operating system’s driver/dclk/mediatek/clk-mtk.c component allows a hacker to cause a service failure.
The vulnerability of the drivers/clk/mediatek/clk-mtk.c component in the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the functions bitPutcs_aligned() and bitPutcs_unaligned() in the Linux kernel’s drivers/video/fbdev/core/bitblit.c file, which allows a hacker to cause a service failure.
The vulnerability of the functions bitPutcsaligned and bitPutcsunaligned in the Linux kernel’s drivers/video/fbdev/core/bitblit.c module lies in the fact that they allow data buffers to be read beyond their permitted limits. Exploiting this vulnerability could enable an attacker to cause a servic...
The vulnerability of the LiveTableResults component of the XWiki Platform, a platform for creating collaborative web applications. The XWiki Platform allows attackers to expose protected information.
The vulnerability of the LiveTableResults component in the XWiki platform, which is used for creating collaborative web applications, stems from deficiencies in restricting access to personal information. Exploiting this vulnerability could allow a malicious actor to disclose protected informatio...
The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the wp-login.php file within the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the wp-login.php file in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the driver/regulator/core.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the drivers/regulator/core.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions queue_gso_packets() and queue_userspace_packet() in the openvswitch kernel module of Linux allow a hacker to cause a service failure.
The vulnerability of the queuegsopackets and queueuserspacepacket functions in the openvswitch kernel module of Linux operating systems is related to a single-byte offset error. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Windows Telephony Service in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Telephony Service in Windows operating systems is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Microsoft Excel, Microsoft Office, and 365 Apps for Enterprise programs, related to data type conversion errors, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel, Microsoft Office, and 365 Apps for Enterprise programs is related to data type conversion errors. Exploiting this vulnerability can allow attackers to execute arbitrary code by sending a specially crafted malicious file...
The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to insufficient validation of input data, allows attackers to disclose protected information.
The vulnerability of Microsoft PowerPoint presentation templates, Microsoft Office packages, and 365 Apps for Enterprise lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the HTTP.sys driver on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the system library Microsoft Local Security Authority Server (lsasrv) on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Local Security Authority Server lsasrv system library in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Windows kernel component of the Windows operating system allows attackers to enhance their privileges.
The vulnerability of the Windows Kernel component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the corporate platform Microsoft Teams, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.
The vulnerability of the corporate platform Microsoft Teams is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
The vulnerability of the ZFS_IOC_RECV_NEW handler of the OpenZFS component in FreeBSD’s operating systems allows a attacker to corrupt memory.
The vulnerability of the ZFSIOCRECVNEW handler of the OpenZFS component in FreeBSD-related operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to corrupt memory...
The vulnerability of the file renaming function of the Joomla Content Editor (JCE) in the Joomla content management system allows attackers to create or replace arbitrary files.
The vulnerability of the file renaming function of the Joomla Content Editor JCE in the Joomla content management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to create or replace arbitrary files...