90509 matches found
The vulnerability of the id_service.exe method in IDrive’s backup software allows a hacker to execute arbitrary code.
The vulnerability of the idservice.exe method in IDrive’s backup software is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
The vulnerability of the CheckModifierMap() function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to trigger a service failure.
The vulnerability of the CheckModifierMap function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can...
The vulnerability of the application management tools and Flatpak environments relates to the tracking of UNIX-style symbolic links. This allows a malicious actor to gain unauthorized access to protected information and execute arbitrary code.
The vulnerability of the application management tools and Flatpak environments relates to the tracking of symbolic links in UNIX. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information and execute arbitrary code...
The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.
The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands, provided that the user opens a specially crafted file...
The vulnerability of the lzma_indexAppend() function in the XZ compression data compression package allows a hacker to execute arbitrary code.
The vulnerability of the lzmaindexAppend function in the XZ Utils data compression package is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the JavaScript-based Thymeleaf engine arises from the lack of measures taken to neutralize special elements used in the expression language operator, allowing attackers to execute arbitrary code.
The vulnerability of the JavaScript-based Thymeleaf engine is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Dawn component in the Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the Dawn component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...
The vulnerability of the ibmvnic component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ibmvnic component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the red_enqueue() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the redenqueue function in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the kfd_process_device_init_vm() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the kfdprocessdeviceinitvm function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the percpu_init_rwsem() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the percpuinitrwsem function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ext4_fc_reserve_space() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4fcreservespace function in the Linux operating system is related to a single-byte offset error. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fentry_run() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fentryrun function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the get_line_out_pfx() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the getlineoutpfx function in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the frmL7ProtForm() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the frmL7ProtForm function in the Tenda F456 router’s microprogramming software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...
The vulnerability of artificial intelligence servers for applications based on large language models like BricksLLM arises from the failure to protect the SQL query structure when processing the parameter customId. This allows attackers to access protected information or execute arbitrary code.
The vulnerability of the artificial intelligence server for applications based on BricksLL language models relates to the lack of protection for the SQL query structure when processing the customId parameter. Exploiting this vulnerability can allow an attacker to gain access to protected...
The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ramfs_kill_sb() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ramfskillsb function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mwifiex_process_mgmt_packet() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mwifiexprocessmgmtpacket function in the Linux operating system is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the getpeername() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the getpeername function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Jolokia component in the Apache ActiveMQ software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the Jolokia component in the Apache ActiveMQ software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the XkbSetCompatMap() function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, allows a malicious actor to induce a service failure.
The vulnerability of the XkbSetCompatMap function in the XKB component of the Wayland protocol implementation for X.Org XWaylan, as well as in the X.Org Server implementation of the X Window System, is related to a numerical reduction in significance. Exploiting this vulnerability can allow an...
The vulnerability of the ext4_unlink() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the ext4unlink function in the Linux operating system’s kernel is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the follow_automount() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the followautomount function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the des3_ede_encrypt() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the des3edeencrypt function in the Linux operating system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sendmsg() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the sendmsg function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework lies in the uncontrolled distribution of memory resources, which allows a malicious actor to trigger a service failure.
The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the ioctl() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ioctl function in the Linux operating system’s kernel is related to the handling of zero pointers. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the arm64 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the arm64 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the PackageKit package manager, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to gain unauthorized access to the system with root privileges.
The vulnerability of the PackageKit package manager is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system with root privileges...
The vulnerability of the ima_get_kexec_buffer() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the imagetkexecbuffer function in the Linux operating system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the drain_workqueue() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drainworkqueue function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `coresight_release_platform_data()` function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the coresightreleaseplatformdata function in the Linux operating system relates to the possibility of using memory after it is released. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the can_rx_register() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the canrxregister function in the Linux operating system’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pinctrldt_to_map() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the pinctrldttomap function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions test_gen_kprobe/kretprobe_cmd() and test_gen_kprobe_cmd() in the Linux operating system allow a hacker to cause a service failure.
The vulnerability of the testgenkprobe/kretprobecmd and testgenkprobecmd functions in the Linux operating system is related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the xprt_switch function in the sysfs() of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the xprtswitch function in the sysfs of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the migrate_enable() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the migrateenable function in the Linux operating system’s kernel is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `move_pages_huge_pmd()` function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the movepageshugepmd function in the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability in the toolset for creating and emulating SICAM SIAPP SDK containers arises from improper handling of length parameter discrepancies, allowing attackers to trigger a service failure.
The vulnerability in the toolset used for creating and emulating SICAM SIAPP SDK containers is related to improper handling of discrepancies in parameter length. Exploiting this vulnerability can allow attackers to trigger a service failure...
The vulnerability of the User Management Component (UMC) of the SINEC NMS system allows a hacker to execute arbitrary code.
The vulnerability of the User Management Component UMC in the SINEC NMS data transmission network management system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code using specially created DLL files...
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks stems from errors in verifying cryptographic signatures. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Siemens RUGGEDCOM CROSSBOW (SAM-P) access control system, related to deficiencies in access segmentation, allows attackers to enhance their privileges.
The vulnerability of the Siemens RUGGEDCOM CROSSBOW SAM-P access control system lies in its lack of access segmentation capabilities. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the distributed resource management system, which optimizes workloads in Siemens Altair Grid Engine data centers, stems from an uncontrolled search element that allows attackers to execute arbitrary code.
The vulnerability of the distributed resource management system, which optimizes workloads in Siemens Altair Grid Engine data centers, is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created D...
The vulnerability of the macvlan component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the macvlan component in the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ata_tlink_add() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the atatlinkadd function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the imx_uart_freeze() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the imxuartfreeze function in the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Open Graph Picture generation module in the Nuxt OG Image framework for creating web applications and sites using Nuxt.js allows a hacker to execute arbitrary code.
The vulnerability of the Open Graph Picture Generation module in the Nuxt OG Image framework for creating web applications and websites related to Nuxt.js is related to the lack of security measures for protecting the website structure. Exploiting this vulnerability allows a malicious actor to...