92298 matches found
The vulnerability of the JIT-compiler of Mozilla Firefox allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the JIT-compiler of Mozilla Firefox lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of the Windows operating system’s kernel is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
Vulnerability of .NET and Microsoft .NET Framework software frameworks, related to insufficient data authenticity verification, allows attackers to bypass existing security mechanisms.
Vulnerability of .NET software platforms and the Microsoft .NET Framework is related to insufficient validation of data authenticity. Exploitation of this vulnerability can allow attackers to bypass existing security mechanisms remotely...
The vulnerability of the GDI component in Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the GDI component in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the dedoc/scramble package for the Laravel PHP framework allows a hacker to execute arbitrary code.
The vulnerability of the dedoc/scramble package for the Laravel PHP framework is related to incorrect code generation practices. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome’s GPU component, which allows a hacker to trigger a service failure
The vulnerability of Google Chrome’s GPU component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Font component in Google Chrome’s browser allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s Font component is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the axios library lies in the uncontrolled modification of object prototype attributes, which allows attackers to compromise the integrity of the protected information.
The vulnerability of the axios library is related to uncontrolled changes in the attributes of the object’s prototype. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...
The vulnerability of Google Chrome’s SwiftShader library allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s SwiftShader library is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SiteIsolation component in the Google Chrome browser allows a hacker to trigger a service failure.
The vulnerability of the SiteIsolation component in Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of Google Chrome’s user interface allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s user interface relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of Google Chrome’s GPU component allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s GPU component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome’s user interface allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the shouldBypassProxy.js module from the axios library allows a hacker to disclose protected information.
The vulnerability of the shouldBypassProxy.js library from axios is related to incorrect validation of data entered by users. Exploiting this vulnerability can allow an attacker to disclose protected information...
Vulnerability of the JavaScript component: Mozilla Firefox’s WebAssembly browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the s:stepmatch() function in the Vim text editor, which allows a hacker to execute arbitrary code.
The vulnerability of the s:stepmatch function in the Vim text editor is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Windows App Store application store for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows App Store application store for Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of Google Chrome’s FileSystem component, which allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s FileSystem component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the ANGLE library in Google Chrome browsers is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Grafana monitoring and surveillance platform lies in the improper restriction of the path name to the restricted access catalog, which allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Grafana monitoring and observation platform is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Unbound DNS server, related to insufficient validation of input data and improper implementation of functions, allows a hacker to trigger a service failure.
The vulnerability of the Unbound DNS server is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Pillow image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.
The vulnerability of the Pillow image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Pillow image processing library, related to the execution of a loop with an unreachable exit condition, allows a intruder to cause a service failure.
The vulnerability of the Pillow image processing library lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to an incorrect limitation on the path name for the restricted access directory. This allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to an incorrect restriction on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Python library for working with Git repositories in Dulwich, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the Python library for working with Git repositories in Dulwich is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of protection for operational data, allows a violator to gain unauthorized access to protected information.
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the mechanism for checking OAuth2 scopes in the Gitea repository management system allows a hacker to increase their privileges.
The vulnerability of the mechanism for checking the scopes of OAuth2 tokens in the Gitea Git repository management system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the AbstractIoBuffer.resolveClass() method in the Apache MINA network-oriented Java framework allows a attacker to execute arbitrary code.
The vulnerability of the AbstractIoBuffer.resolveClass method in the Apache MINA network-oriented Java application framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the authentication mechanism of the Vangene deltaFlow electronic document management platform, which allows a hacker to increase their privileges
The vulnerability of the authentication mechanism of the Vangene deltaFlow electronic document management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges...
The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility allows a intruder to execute arbitrary code.
The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to generate arbitrary codes...
The vulnerability of the YAML syntax analysis and parsing library js-yaml lies in the uncontrolled modification of object prototype attributes, allowing attackers to compromise the integrity of the protected information.
The vulnerability of the YAML parsing library js-yaml is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
The vulnerability of the lz4-java data compression library, related to the disclosure of information during data transmission, allows attackers to disclose protected information.
The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...
The vulnerability of the brace-expansion library in the Node.js software platform, related to uncontrolled resource consumption, allows attackers to trigger a service failure.
The vulnerability of the brace-expansion library on the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the instrument-based library for generating unique UUIDs lies in the possibility of writing beyond the buffer boundaries, allowing an attacker to cause memory corruption.
The vulnerability of the instrument-based library for generating unique UUIDs is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...
The vulnerability of Java Cryptography Libraries Bouncy Castle for Java FIPS and Bouncy Castle for Java LTS lies in their uncontrolled resource consumption, which allows attackers to cause service failures.
The vulnerability of Java Cryptographic Libraries, specifically Bouncy Castle for Java FIPS and Bouncy Castle for Java LTS, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the amdgpu_userq_get_doorbell_index() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.
The vulnerability of the amdgpuuserqgetdoorbellindex function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the execution of operations outside of memory buffers. Exploiti...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to reading data outside of the allowed range in memory, allowing an attacker to disclose sensitive information.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise arises from the operation beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of GitLab Workhorse’s HTTP request handler on the git-based software platform, which is used for collaborative code development in GitLab CE/EE, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of GitLab Workhorse’s HTTP request handler, a software platform based on git for collaborative code development in GitLab CE/EE, relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of Google Chrome’s DevTools component allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s DevTools component is related to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Unbound DNS server, related to the computational complexity, allows attackers to cause service failures.
The vulnerability of the Unbound DNS server is related to the computational complexity of the algorithms involved. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Unbound DNS server, related to improper blocking of resources, allows a hacker to trigger a service failure.
The vulnerability of the Unbound DNS server is related to improper blocking of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Pillow image processing library, related to integer overflow, allows an attacker to cause a service failure.
The vulnerability of the Pillow image processing library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Pillow image processing library, related to integer overflow, allows an attacker to cause a service failure.
The vulnerability of the Pillow image processing library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Python library for working with Git Dulwich repositories lies in the incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the ConnectedComponentsImage() function in the ImageMagick console graphics editor allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the ConnectedComponentsImage function in the console-based image editing tool ImageMagick is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...