97848 matches found
Linux net/sched/cls_flow.c Data Compromise
The vulnerability in the net/sched/clsflow.c component of the Linux operating system relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
Linux kernel fs/ocfs2/dlmglue.c DLP Data Compromise
The vulnerabilities of the functions ocfs2dlmseqnext and ocfs2dlmseqshow in the fs/ocfs2/dlmglue.c component of the Linux operating system are related to the failure to release resources after their useful lifespan has ended. Exploiting these vulnerabilities can allow attackers to compromise the...
Linux ext2_dio_write_iter Heap Buffer Overflow DoS
The vulnerability of the ext2diowriteiter function in the fs/ext2/file.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel dev_dax_kmem_remove Heap Buffer Overflow DoS
The vulnerability of the devdaxkmemremove function in the drivers/dax/kmem.c kernel module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Resource Control DoS
The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux net/sched/cls_bpf Buffer Overflow DoS
The vulnerability in the net/sched/clsbpf.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux snp_filter_reserved_mem_regions Heap Buffer Overflow DoS
The vulnerability of the snpfilterreservedmemregions function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Skia Graphic Library Access Disclosure
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...
Skia Graphic Library Access Disclosure
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to improper protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTM...
Wazuh check_token() Privilege Bypass
The vulnerability of the checktoken function on the security monitoring and threat detection platform Wazuh is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms and gain increased privileges...
GitLab Authentication Code Execution
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...
Nginx UI Code Execution
The vulnerability of the config.validateConfigDirectives function in the Nginx UI server’s user interface is related to the use of an incomplete blacklist. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
TP-Link Omada Web Interface Code Execution
The vulnerability of the web interface of TP-Link Omada network switches is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the setupsgiocomponents function in the drivers/crypto/cavium/cpt/cptvfreqmanager.c kernel of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a remote attacker to compromise the...
Linux kernel function setup_sgio_components() Data Compromise
The vulnerability of the setupsgiocomponents function in the drivers/crypto/marvell/octeontx/otxcptvfreqmgr.c file of the Linux kernel is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
Linux fbdev sm501fb Buffer Overflow
The vulnerability of the drivers/video/fbdev/sm501fb.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the hdachdmisetpinportmux function in the sound/soc/codecs/hdachdmi.c component of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
Linux qat_vf_resume_write Heap Buffer Overflow DoS
The vulnerability of the qatvfresumewrite function in the drivers/vfio/pci/qat/main.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...
Linux Btrfs Heap Buffer Overflow DoS
The vulnerability of the btrfsrundelayedrefs function in the fs/btrfs/extent-tree.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Linux kernel firmware loader Heap Buffer Overflow DoS
The vulnerability of the devicecachefwimages function in the drivers/base/firmwareloader/main.c component of the Linux kernel is related to the improper implementation of memory management. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux kernel SMD Function Use-After-Free
The vulnerability of the wcn36xxsmdrspprocess function in the drivers/net/wireless/ath/wcn36xx/smd.c file of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...
Linux Infiniband Hardware Data Compromise
The vulnerability in the components drivers/infiniband/hw/irdma/verbs.c and drivers/infiniband/hw/irdma/verbs.h of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the nvmenshead structure in the drivers/nvme/host/core.c kernel of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
Linux seq_midi Heap Buffer Overflow DoS
The vulnerability in the sound/core/seq/seqmidi.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
Linux kernel addrconf_dad_failure() Buffer Overflow
The vulnerability of the addrconfdadfailure function in the net/ipv6/addrconf.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...
Linux kernel evm_read_xattrs Heap Buffer Overflow DoS
The vulnerability of the evmreadxattrs function in the security/integrity/evm/evmsecfs.c component of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
Linux kernel vxlan_gro_prepare_receive Heap Buffer Overflow DoS
The vulnerability of the vxlangropreparereceive function in the drivers/net/vxlan/vxlancore.c component of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...
Microsoft Visio Graphical Editors Code Execution
The vulnerability of Microsoft Visio graphical editors in Microsoft Office packages and 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Skia Graphic Library Access Disclosure
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...
Skia Graphic Library Access Disclosure
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Linux kernel vhost_zerocopy_complete Heap Buffer Overflow DoS
The vulnerability of the vhostzerocopycomplete function in the drivers/vhost/net.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
Microsoft Visio Graphical Editors Code Execution
The vulnerability of Microsoft Visio graphical editors in Microsoft Office packages and 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Nginx UI CSRF
The vulnerability of the GetCasdoorUri and CasdoorCallback functions in the Nginx UI user interface of the Nginx server is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a remote attacker to execute a CSRF attack...
WNLTK WekaClassifier File Read Write
The vulnerability of the WekaClassifier module in the NLTK library for symbolic and statistical processing of natural language is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to read...
Apache Struts RestfulActionMapper Code Execution
The vulnerability of the RestfulActionMapper component of the Apache Struts software framework is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Windows GDI+ Code Execution
The vulnerability of the Windows GDI+ component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Queue Manager Component Microsoft Message Queuing Service Code Execution
The vulnerability of the Queue Manager component of the Microsoft Message Queuing service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft MANA Network Driver Kernel Privilege Escalation
The vulnerability of the Microsoft MANA Network Driver for Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...
Hyper-V Hardware Virtualization Code Execution
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft Outlook Client Code Execution
The vulnerability of the Microsoft Outlook client and the Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
RAW image plugin Integer Overflow RCE
The vulnerability of the plugin for viewing RAW images is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Windows ALPC Privilege Escalation
The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Trusted Execution Environment Privilege Escalation
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Media Video Decoder Code Execution
The vulnerability of the Media Video Decoder decoder for Windows systems is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
GitLab Integer Overflow Code Execution
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...
Microsoft Excel Code Execution
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Cisco Secure Email Gateway Advanced Malware Protection Privilege Escalation
The vulnerability of the Advanced Malware Protection module of the Cisco Secure Email Gateway protection tool is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain write access to arbitrary files and execute...
Microsoft Excel Code Execution
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the use of memory after release. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...