95883 matches found
The vulnerability in the `dist/routes/oauth2/index.js` file of the software platform for creating custom interfaces via language models (LLM) allows a attacker to perform an SSRF attack and expose sensitive information.
The vulnerability of the dist/routes/oauth2/index.js file of the software platform for creating user interfaces through Language Model LLMs like Flowise relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker to perform an SSRF attack...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML page...
The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...
The vulnerabilities in the functions ac97_adapter_release(), ac97_add_adapter(), and snd_ac97_controller_register() of the sound/ac97/bus.c module of the Linux kernel sound subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions ac97adapterrelease, ac97addadapter, and sndac97controllerregister in the sound/ac97/bus.c module of the Linux kernel audio subsystem is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the dwcmshc_rk3568_set_clock() function in the drivers/mmc/host/sdhci-of-dwcmshc.c driver for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dwcmshcrk3568setclock function in the drivers/mmc/host/sdhci-of-dwcmshc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the scarlett2_usb_get_config() function in the sound/usb/mixer_scarlett2.c module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information in Linux operating systems’ USB audio devices.
The vulnerability of the scarlett2usbgetconfig function in the sound/usb/mixerscarlett2.c module, which supports USB audio devices in Linux operating systems, is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerabilities of the functions cmpc_accel_sensitivity_show_v4() and cmpc_accel_sensitivity_store_v4() in the module drivers/platform/x86/classmate-laptop.c of the X86 device driver framework of the Linux operating system, which allow a malicious actor to cause service failures.
The vulnerabilities of the functions cmpcaccelsensitivityshowv4 and cmpcaccelsensitivitystorev4 in the driver/platform/x86/classmate-laptop.c file of the Linux kernel device driver framework are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to cause system...
The vulnerability of the romfs_fill_super() function in the fs/romfs/super.c module of the Linux kernel file system allows a hacker to cause a service failure.
The vulnerability of the romfsfillsuper function in the fs/romfs/super.c module of the Linux kernel file system is related to the lack of checking of the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the switchtec_ntb_init_mw() function in the drivers/ntb/hw/mscc/ntb_hw_switchtec.c driver for Linux’s non-visible kernel bridges allows a attacker to access protected information or cause service failures.
The vulnerability of the switchtecntbinitmw function in the drivers/ntb/hw/mscc/ntbhwswitchtec.c driver for Linux’s non-visible kernel bridges is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service...
The vulnerability of the arm_cmn_discover() function in the drivers/perf/arm-cmn.c module of the Linux kernel’s performance monitoring driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the armcmndiscover function in the drivers/perf/arm-cmn.c file of the Linux kernel’s performance monitoring driver relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...
The vulnerability of the WebGL component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the WebGL component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the Input component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the WebCodecs component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the WebCodecs component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Printing component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Printing component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows attackers to circumvent existing security restrictions.
The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.
The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the rsi_mac80211_attach() function in the drivers/net/wireless/rsi/rsi_91x_mac80211.c driver for wireless communication adapters in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the rsimac80211attach function in the drivers/net/wireless/rsi/rsi91xmac80211.c driver for wireless communication adapters in the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the tegra_qspi_combined_seq_xfer() function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the __ioam6_fillTraceData() and ioam6_validateTraceHdr() functions in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ioam6fillTraceData and ioam6validateTraceHdr functions in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the tcpmss_mt() function in the net/netfilter/xt_tcpmss.c module of the netfilter component of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the tcpmssmt function in the net/netfilter/xttcpmss.c module of the netfilter component of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the fore200e_shutdown() function in the drivers/atm/fore200e.c module of the Linux network adapter driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fore200eshutdown function in the drivers/atm/fore200e.c module of the Linux network adapter driver relates to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the kfd_event_page_set() function in the drivers/gpu/drm/amd/amdkfd/kfd_events.c driver for the Direct Rendering Infrastructure (DRI) of AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the kfdeventpageset function in the drivers/gpu/drm/amd/amdkfd/kfdevents.c module of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to out-of-buffer writing. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the __get_sregs2() function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getsregs2 function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the spectre_bhb_loop_affected() function in the arch/arm64/kernel/proton-pack.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the spectrebhbloopaffected function in the arch/arm64/kernel/proton-pack.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to cau...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Aura component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Aura component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Views component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created PDF file...
The vulnerability of the Views component in Google Chrome and Microsoft Edge browsers allows attackers to perform spear-phishing attacks.
The vulnerability of the Views component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...
The vulnerability of the DOM components in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the nfc_unregister_device() function in the net/nfc/core.c module of the NFC subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfcunregisterdevice function in the net/nfc/core.c module of the Linux NFC subsystem is related to the mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the DOM components in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to cause a service failure using a malicious file...
The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the functions set_secret() and ceph_crypto_key_decode() in the net/ceph/crypto.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions setsecret and cephcryptokeydecode in the net/ceph/crypto.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow a remote attacker t...
The vulnerability of the damon_sysfs_context_add_dirs() function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the damonsysfscontextadddirs function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...