95883 matches found
The vulnerability of the MixCoder_Code() function in the XZ Decoder component of the 7-Zip archive decoder allows a hacker to execute arbitrary code.
The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the `django.http.HttpRequest.get_signed_cookie()` function in the Django web application framework allows a hacker to disclose protected information.
The vulnerability of the django.http.HttpRequest.getsignedcookie function in the Django web application framework is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by this mechani...
The vulnerability of the gf_filter_pid_inst_swap_delete_task() function in the file /filter_core/filter_pid.c of the MP4Box package from the GPAC multimedia platform allows a perpetrator to trigger a service failure.
The vulnerability of the gffilterpidinstswapdeletetask function in the /filtercore/filterpid.c file of the MP4Box multiplexer for multimedia platforms GPAC is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the gf_sei_load_from_state_internal() function in the /filters/sei_load.c file of the MP4Box packaging tool of the GPAC multimedia platform allows a attacker to cause a service failure.
The vulnerability of the gfseiloadfromstateinternal function in the /filters/seiload.c file of the MP4Box package from the GPAC multimedia platform is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failur...
The vulnerability of the gf_filter_pid_reconfigure_task_discard() function in the /filter_core/filter_pid.c file, implemented by the MP4Box package for the GPAC multimedia platform, allows a malicious actor to trigger a service failure.
The vulnerability of the gffilterpidreconfiguretaskdiscard function in the /filtercore/filterpid.c file of the MP4Box package for the GPAC multimedia platform is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the gf_filter_in_parent_chain() function in the file /filter_core/filter_pid.c, implemented by the MP4Box component of the GPAC multimedia platform, allows a malicious actor to trigger a service failure.
The vulnerability of the gffilterinparentchain function in the /filtercore/filterpid.c file of the MP4Box encoder for the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `createExchange()` function in the IggyFetchRecords class of the camel-iggy component of the Apache Camel framework allows a attacker to disclose protected information.
The vulnerability of the createExchange function in the IggyFetchRecords class of the camel-iggy component of the Apache Camel framework is related to insufficient validation of input data when processing user-defined message headers. Exploiting this vulnerability could allow an attacker to...
Vulnerabilities of the `ns_printrrf`, `ns_printrr`, and `fp_nquery` functions in the GNU C Library, allowing attackers to execute arbitrary code
The vulnerability of the nsprintrrf, nsprintrr, and fpnquery functions in the GNU C Library lies in their reliance on buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the RDPEAR NDR RDP-client parser allows a hacker to induce a service failure.
The vulnerability of the RDPEAR NDR RDP-client FreeRDP lies in a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
The vulnerability of the gf_filter_pid_inst_swap_delete_task() function in the filter_core/filter_pid.c file of the MP4Box package of the GPAC multimedia platform allows a perpetrator to trigger a service failure.
The vulnerability of the gffilterpidinstswapdeletetask function in the filtercore/filterpid.c file of the MP4Box package for the GPAC multimedia platform is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the django.core.mail.backends.smtp.EmailBackend() function in the Django web application framework allows a hacker to disclose protected information.
The vulnerability of the django.core.mail.backends.smtp.EmailBackend function in the Django web application framework involves the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the decoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the DCM decoder in the console-based image editing tool ImageMagick is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the `django.utils.cache.has_vary_header()` function in the Django web application framework allows attackers to disclose sensitive information that should be protected.
The vulnerability of the django.utils.cache.hasvaryheader function in the Django web application framework is related to incomplete comparisons with missing factors. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.
The vulnerability of the FoxitPDFReaderUpdater.exe service, a tool for viewing electronic documents in PDF format within the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF, is related to an uncontrolled pathfinding mechanism. Exploiting this vulnerabilit...
The vulnerability of the console-based graphic editor ImageMagick, related to unlimited resource distribution, allows a hacker to cause a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the net/core/flow_dissector.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/core/flowdissector.c module of the Linux operating system is related to data type mixing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the console-based graphic editor ImageMagick, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.
The vulnerability of the console-based graphic editor ImageMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the vmw_cmd_check() function in the drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the vmwcmdcheck function in the drivers/gpu/drm/vmwgfx/vmwgfxexecbuf.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an...
The vulnerability of the rsi_coex_attach() function in the drivers/net/wireless/rsi/rsi_91x_coex.c driver for wireless communication adapters in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rsicoexattach function in the drivers/net/wireless/rsi/rsi91xcoex.c file of the wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the dwc3_qcom_interconnect_init() function in the drivers/usb/dwc3/dwc3-qcom.c driver for the DesignWare USB3-based controller in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dwc3qcominterconnectinit function in the drivers/usb/dwc3/dwc3-qcom.c driver for the DesignWare USB3-based controller in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the uio_dmem_genirq_irqcontrol() function in the drivers/uio/uio_dmem_genirq.c driver for Linux’s user input/output kernel allows a attacker to cause a system failure.
The vulnerability of the uiodmemgenirqirqcontrol function in the drivers/uio/uiodmemgenirq.c driver for Linux kernel’s input/output subsystem is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the vmw_mksstat_add_ioctl() function in the drivers/gpu/drm/vmwgfx/vmwgfx_msg.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the vmwmksstataddioctl function in the drivers/gpu/drm/vmwgfx/vmwgfxmsg.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the absence of references to the actively allocated resources. Exploiting this vulnerability can allow an...
The vulnerability of the ipw_wdev_init() function in the drivers/net/wireless/intel/ipw2x00/ipw2200.c file of the Intel wireless adapter driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ipwwdevinit function in the drivers/net/wireless/intel/ipw2x00/ipw2200.c file of the Intel wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an...
The vulnerability of the Dovecot mail server, related to insufficient input validation, allows attackers to trigger a service failure.
The vulnerability of the Dovecot mail server is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module on the Django web application development platform allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Cassandra export module in the Glances monitoring tool’s application programming interface allows a perpetrator to execute arbitrary code.
The vulnerability of the Cassandra export module in the Glances monitoring tool’s application programming interface is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the dln2_probe() function in the drivers/mfd/dln2.c module of the MFD controller driver for the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the dln2probe function in the drivers/mfd/dln2.c module of the MFD controller driver for the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the decNumberFromString() function in the jq JSON file processing tool allows a attacker to cause a service failure.
The vulnerability of the decNumberFromString function in the jq JSON processing tool is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mvebu_gicp_probe() function in the drivers/irqchip/irq-mvebu-gicp.c file of the Linux kernel’s IRQ chip driver allows a attacker to cause a service failure.
The vulnerability of the mvebugicpprobe function in the drivers/irqchip/irq-mvebu-gicp.c file of the Linux kernel’s IRQ chip driver is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the io_uring_cmd_timestamp() function in the io_uring/cmd_net.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iouringcmdtimestamp function in the iouring/cmdnet.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to buffer overflows based on stacks. Exploiting this vulnerability could allow a remote attacker to compromise the confidentialit...
The vulnerabilities of the functions rxe_mr_alloc() and rxe_mr_init_user() in the driver/infiniband/sw/rxe/rxe_mr.c file of the Linux operating system’s InfiniBand driver module allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions rxemralloc and rxemrinituser in the driver/infiniband/sw/rxe/rxemr.c module of the Linux operating system’s InfiniBand driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise th...
The vulnerability of the netsec_register_mdio() function in the drivers/net/ethernet/socionext/netsec.c file of the Linux kernel’s network adapter driver module allows a hacker to cause a service failure.
The vulnerability of the netsecregistermdio function in the drivers/net/ethernet/socionext/netsec.c file of the Linux network adapter driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the kfd_mem_dmamap_userptr() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the kfdmemdmamapuserptr function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper memory release mechanisms memory leaks. Exploiting this...
The vulnerability of the Local Mail Transfer Protocol (LMTP) used by Dovecot and OX Dovecot Pro mail servers, which is related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the Local Mail Transfer Protocol LMTP used by Dovecot and OX Dovecot Pro mail servers involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...
The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to improper control of resource identifiers (“resource injection”), allows attackers to cause service failures.
The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the dovecot-acl file in Dovecot and OX Dovecot Pro mail servers, due to access control deficiencies, allows attackers to trigger service interruptions.
The vulnerability of the dovecot-acl file of Dovecot and OX Dovecot Pro is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the jv_contains() function in the jq JSON processing tool allows a hacker to cause a service failure.
The vulnerability of the jvcontains function in the jq JSON processing tool is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the hdm_probe() function in the drivers/most/most_usb.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hdmprobe function in the drivers/most/mostusb.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the qcom_cpufreq_hw_read_lut() function in the drivers/cpufreq/qcom-cpufreq-hw.c module of the Linux kernel frequency scaling driver allows a hacker to cause a system failure.
The vulnerability of the qcomcpufreqhwreadlut function in the drivers/cpufreq/qcom-cpufreq-hw.c module, a frequency scaling driver for Linux processors, is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the bpf_trampoline_update() function in the kernel/bpf/trampoline.c module, which supports the BPF interpreter for Linux kernels, allows a hacker to trigger a service failure.
The vulnerability of the bpftrampolineupdate function in the kernel/bpf/trampoline.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to trigger a...
The vulnerability of the function of_dra7_atl_clk_probe() in the module drivers/clk/ti/clk-dra7-atl.c of the clock controller driver for Samsung Exynos Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the function ofdra7atlclkprobe in the module driver/clk/ti/clk-dra7-atl.c of the clock controller for the Samsung Exynos processor in Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the jq JSON processing tool, related to integer overflow, allows a attacker to cause a service failure.
The vulnerability of the jq JSON processing tool is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the qcom_cpufreq_krait_name_version() function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file, a frequency scaling driver for the Linux kernel, allows a hacker to cause a system failure.
The vulnerability of the qcomcpufreqkraitnameversion function in the drivers/cpufreq/qcom-cpufreq-nvmem.c frequency scaling driver for Linux operating systems is related to the absence of references to an active, allocated resource. Exploiting this vulnerability could allow an attacker to trigger...
The vulnerability of the gaokun_ucsi_remove() function in the drivers/usb/typec/ucsi/ucsi_huawei_gaokun.c driver for the UCSI USB Type-C interface in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gaokunucsiremove function in the drivers/usb/typec/ucsi/ucsihuaweigaokun.c driver for the UCSI USB Type-C interface in the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise th...
The vulnerability of the ethtool_get_link_ksettings() function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions allows a hacker to cause a service failure.
The vulnerability of the ethtoolgetlinkksettings function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform software platform allows a perpetrator to gain full control over the application.
The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform relates to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using th...
The vulnerability of the Zabbix Agent 2 component of the Zabbix IT-infrastructure monitoring system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Zabbix Agent 2 component of the Zabbix IT infrastructure monitoring system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the f2fs_start_discard_thread() function in the fs/f2fs/segment.c file of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the f2fsstartdiscardthread function in the fs/f2fs/segment.c file of the F2FS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...