95883 matches found
The vulnerability of the ufx_ops_ioctl() function in the drivers/video/fbdev/smscufx.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ufxopsioctl function in the Linux kernel’s drivers/video/fbdev/smscufx.c module is related to the assignment of an untrusted pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the xfrm6_get_saddr() function in the net/ipv6/xfrm6_policy.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrm6getsaddr function in the net/ipv6/xfrm6policy.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...
The vulnerability of the rds_conn_shutdown() function in the net/rds/connection.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the rdsconnshutdown function in the net/rds/connection.c module, which is part of the Linux kernel’s networking functions, is related to deficiencies in the isolation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the Proxy component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the Proxy component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the Microweber content tagging system allows a hacker to gain unauthorized access to protected information and carry out phishing attacks.
The vulnerability of the Microweber content tagging system’s management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information and...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Glic component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Glic component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Font component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created print file...
The vulnerability of the Mojo web browser components in Google Chrome and Microsoft Edge allows a hacker to trigger a service failure.
The vulnerability of the Mojo web browser components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the QUIC component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the QUIC component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the jfs_iget() function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...
The vulnerability of the nr_route_frame() function in the net/netrom/nr_route.c module, which is part of the networking functions in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nrrouteframe function in the net/netrom/nrroute.c module, which is part of the networking functions in the Linux kernel, relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
The vulnerability of the bond_enslave() function in the drivers/net/bonding/bond_main.c file of the Linux kernel-based network device driver allows a attacker to access protected information or cause service failure.
The vulnerability of the bondenslave function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...
The vulnerability of the `efivar_entry_get()` function in the `fs/efivarfs/vars.c` file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the efivarentryget function in the fs/efivarfs/vars.c file of the Linux kernel file system is related to deficiencies in error handling. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the `fst_remove_one()` function in the `drivers/net/wan/farsync.c` file of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fstremoveone function in the drivers/net/wan/farsync.c file of the Linux kernel network device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the decode_choice() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the netfilter kernel in the Linux operating system allows a attacker to access protected information or cause a service failure.
The vulnerability of the decodechoice function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter kernel in the Linux operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...
The vulnerability of the switchtec_ntb_init_shared() function in the drivers/ntb/hw/mscc/ntb_hw_switchtec.c driver module of the Linux operating system allows a hacker to access protected information or cause service failures.
The vulnerability of the switchtecntbinitshared function in the drivers/ntb/hw/mscc/ntbhwswitchtec.c driver for Linux’s non-visible kernel bridges is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service...
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of XML components in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.
The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the USB component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerability in Google Chrome and Microsoft Edge web browsers, related to reading data beyond the buffer in memory, allows attackers to trigger a service failure.
The vulnerability in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerabilities of the functions qla2x00_update_optrom() and qla2x00_manage_host_stats() in the driver/scsi/qla2xxx/qla_bsg.c module of the SCSI device driver for the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions qla2x00updateoptrom and qla2x00managehoststats in the drivers/scsi/qla2xxx/qlabsg.c module of the SCSI device driver for the Linux operating system are related to operations involving resources after their expiration. Exploiting these vulnerabilities could all...
The vulnerabilities of the functions uacce_put_queue() and uacce_fops_unl_ioctl() in the drivers/misc/uacce/uacce.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the parse_audio_unit() function in the sound/usb/mixer.c module exposes the security of USB audio devices supported by the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the parseaudiounit function in the sound/usb/mixer.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the __sbi_store() and f2fs_sbi_show() functions in the fs/f2fs/sysfs.c file of the F2FS file system driver for the Linux operating system allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the sbistore and f2fssbishow functions in the fs/f2fs/sysfs.c file of the F2FS file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...
The vulnerability of the vmload_vmsave_interception() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vmloadvmsaveinterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise th...
The vulnerability of the mtk_mdp_probe() function in the drivers/media/platform/mediatek/mdp/mtk_mdp_core.c file of the Linux kernel’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mtkmdpprobe function in the drivers/media/platform/mediatek/mdp/mtkmdpcore.c file of the Linux kernel’s multimedia device driver is related to unsynchronized access to shared data in a multi-threaded context. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the Base component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.
The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
The vulnerability of the Tint component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Tint component in Google Chrome and Microsoft Edge relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their permitted limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the Repo.clone_from() function in the Python library for interacting with Git repositories like GitPython allows a malicious actor to execute arbitrary code.
The vulnerability of the Repo.clonefrom function in the Python library for interacting with Git repositories in GitPython is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the DOM components in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerabilities of the functions Repo.archive(), git.ls_remote(), Repo.iter_commits(), and Repo.blame() in the Python library for interacting with Git repositories, GitPython, allow attackers to execute arbitrary commands and overwrite arbitrary files.
The vulnerabilities of the functions Repo.archive, git.lsremote, Repo.itercommits, and Repo.blame in the Python library for interacting with Git repositories in GitPython are related to the lack of data cleaning at the control level. Exploiting these vulnerabilities could allow an attacker to...
The vulnerability of the Git configuration writing module in the Python library for interacting with Git repositories in GitPython allows a attacker to execute arbitrary code.
The vulnerability of the Git configuration writing module in the Python library for interacting with Git repositories in GitPython is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the final point of contact for the dynamic registration mechanism of the OAuth2 software used to manage medical organizations like OpenEMR, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the final point of contact for the dynamic registration mechanism of the OAuth2 software used to manage medical organizations like OpenEMR lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to gain unauthoriz...
The vulnerability of the escape() function in the sql-string.js ORM library by Sequelize allows a attacker to execute arbitrary SQL code.
The vulnerability of the escape function in the sql-string.js ORM library by Sequelize is related to the lack of security measures taken to protect the SQL query structure when processing TODATE and TOTIMESTAMP parameters. Exploiting this vulnerability could allow an attacker to execute arbitrary...
The vulnerability of the OIDC server of MinIO allows a hacker to escalate their privileges.
The vulnerability of the OIDC server of MinIO is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...
The vulnerability of the software for implementing the hypertext environment MediaWiki, related to insufficient protection of operational data, allows a violator to gain unauthorized access to protected information.
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...