74701 matches found
The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of TOTOLINK N150RT router microprogramming software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially...
The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of TOTOLINK N150RT router microprogramming software lies in the fact that the operation values are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of TOTOLINK N150RT router microprogramming software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a special...
The vulnerability of the org.xwiki.platform:xwiki-platform-security-requiredrights-default component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the org.xwiki.platform:xwiki-platform-security-requiredrights-default component of the XWiki Platform relates to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...
The vulnerability of the setDeviceName() function in the global.so library of the TOTOLink A950RG router’s software allows a intruder to execute arbitrary commands.
The vulnerability of the setDeviceName function in the global.so library of the TOTOLink A950RG router’s software is due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands by processing the...
The vulnerability of the org.xwiki.platform:xwiki-platform-security-authentication-ui component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows an attacker to gain unauthorized access to protected information.
The vulnerability of the “org.xwiki.platform:xwiki-platform-security-authentication-ui” component of the XWiki Platform involves the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability affects the FSM component of the software used for traffic management, load balancing, and security protection in BIG-IP Next Service Proxy for Kubernetes (SPK), as well as the access control and remote authentication mechanisms in BIG-IP. This allows attackers to cause service failures.
The vulnerability of the fsm component in BIG-IP Next Service Proxy for Kubernetes SPK, as well as in tools for access control and remote authentication, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the pg-cluster component of the BIG-IP Next Central Manage application programming interface allows a attacker to disclose protected information.
The vulnerability of the pg-cluster component of the BIG-IP Next Central Manage application programming interface is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the Access profile component of the access control and remote authentication solution BIG-IP Access Policy Manager allows a perpetrator to trigger a service failure.
The vulnerability of the Access profile component of the BIG-IP Access Policy Manager access control and remote authentication system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the iControl REST component of the access control and remote authentication solution for BIG-IP allows a perpetrator to inject arbitrary commands.
The vulnerability of the iControl REST component of the access control and remote authentication solution for BIG-IP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands remotely...
The vulnerability of the Message routing profiles component of the BIG-IP access control and remote authentication solution allows a perpetrator to cause a service failure.
The vulnerability of the Message routing profiles component in the access control and remote authentication solution BIG-IP is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Message Routing component of the access control and remote authentication solution BIG-IP allows a perpetrator to cause a service failure.
The vulnerability of the Message Routing component in the BIG-IP access control and remote authentication solution is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the access point loading function in Cisco IOS XE wireless local control devices allows a attacker to execute arbitrary commands.
The vulnerability of the Cisco IOS XE wireless local area network controller’s Access Point AP loading function is related to the presence of a strictly encrypted JSON Web Token JWT. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending specially crafted HTTPS...
The vulnerabilities of Machine Learning functions and the Reporting service of the Kibana data visualization platform allow a hacker to execute arbitrary code.
The vulnerability of Machine Learning and Reporting services in the Kibana data visualization platform lies in the lack of a mechanism for controlling changes to object prototypes’ attributes. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially...
The vulnerability of the GPU driver for Mali-based processors based on Arm architecture, which allows a hacker to cause a service failure.
The vulnerability of the Mali graphics processor kernel driver based on Arm architecture is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a system failure...
The vulnerability of the IBM Verify Identity Access system (formerly IBM Security Verify Access) relates to improper code generation, allowing a perpetrator to execute arbitrary code.
The vulnerability of the IBM Verify Identity Access system formerly IBM Security Verify Access is related to improper code generation. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
The vulnerability of software for integrating old and new technologies from IBM EntireX, related to a processing error in exception states, allows a perpetrator to trigger a service failure.
The vulnerability of the software for integrating old and new technologies from IBM EntireX is related to an error in handling exceptional states. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...
The vulnerability of the Latex Proof-Reading module in the Python software repository PyPi allows attackers to carry out XSS attacks.
The vulnerability of the Latex Proof-Reading module in the Python software package PyPi is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, relates to the unlimited download of dangerous files. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, lies in its ability to allow unlimited uploading of sensitive files. Exploiting this vulnerability could enable an attacker operating remotely to gain unauthorized...
The vulnerability of the IBM Personal Communications terminal emulator arises from the possibility of writing operations outside of the buffer in memory, allowing an attacker to exploit their privileges.
The vulnerability of the IBM Personal Communications terminal emulator relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the sprd_i2c_master_xfer() function in the drivers/i2c/busses/i2c-sprd.c module of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the sprdi2cmasterxfer function in the drivers/i2c/busses/i2c-sprd.c module of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the iio_device_unregister() function in the drivers/iio/industrialio-core.c module – The driver supports various types of built-in sensors in the Linux operating system, allowing a hacker to cause a service failure.
Vulnerability of the iiodeviceunregister function in the drivers/iio/industrialio-core.c module – The driver for supporting various types of embedded sensors in the Linux operating system is vulnerable because it involves the repeated release of previously released memory. Exploiting this...
The vulnerability in the cleanupTransaction() function of the fs/btrfs/transaction.c module of the btrfs file system support module in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the cleanupTransaction function in the fs/btrfs/transaction.c module of the btrfs file system support in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the tcf_ct_handle_fragments() function in the net/sched/act_ct.c module of the net/sched/networking subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tcfcthandlefragments function in the net/sched/actct.c module of the net/sched/networking subsystem of the Linux operating system is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to compromise the...
Vulnerability of the prestera_port_handle_event() function in the drivers/net/ethernet/marvell/prestera/prestera_main.c module – a driver for supporting Ethernet adapter devices from Marvell’s Linux operating system. This vulnerability allows an attacker to compromise the integrity of protected information or cause service failures.
Vulnerability of the presteraporthandleevent function in the drivers/net/ethernet/marvell/prestera/presteramain.c module – The Marvell Ethernet network adapter driver for Linux operating systems is vulnerable to uncontrolled resource consumption. Exploitation of this vulnerability could allow an...
Vulnerability of the zynqmp_qspi_exec_op() function in the drivers/spi/spi-zynqmp-gqspi.c module – This driver provides support for SPI devices in the Linux operating system’s kernel. It allows a hacker to cause a service failure.
Vulnerability of the zynqmpqspiexecop function in the drivers/spi/spi-zynqmp-gqspi.c module – The drivers for SPI devices in the Linux operating system involve reusing previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the `hdcp_cmd_is_read{}` structure in the drivers/gpu/drm/amd/display/dc/hdcp/hdcp_msg.c file – This is a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. It allows a hacker to trigger a service failure.
Vulnerability of the hdcpcmdisread structure in the drivers/gpu/drm/amd/display/dc/hdcp/hdcpmsg.c module – Drivers for AMD graphics cards supporting Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable to a single-shift error. Exploiting this vulnerability can allow...
The vulnerability of the detachtasks() function in the kernel/sched/fair.c module of the Linux operating system’s resource management subsystem allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the detachtasks function in the kernel/sched/fair.c module of the Linux operating system’s resource management subsystem is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibili...
The vulnerability of the nft_rhashDestroy() function in the net/netfilter/nft_set_hash.c module of the netfilter component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nftrhashDestroy function in the net/netfilter/nftsethash.c module of the netfilter component of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the __pipelined_op() function in the ipc/mqueue.c module of the IPC inter-process communication subsystem of the Linux operating system allows a attacker to trigger a service failure.
The vulnerability of the pipelinedop function in the ipc/mqueue.c module of the Linux kernel’s interprocess communication subsystem is related to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of software for integrating old and new technologies from IBM EntireX, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the software for integrating old and new IBM EntireX technologies is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of software for integrating old and new technologies from IBM EntireX arises from incorrect restrictions on XML references to external objects, allowing attackers to disclose protected information.
The vulnerability of the software for integrating old and new technologies from IBM EntireX is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the gsf_base64_encode_simple function in the structured file library. The GNOME Project’s libgsf allows attackers to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the gsfbase64encodesimple function in the structured file library: The GNOME Project’s libgsf is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the VPN service module of the HarmonyOS operating system, which allows a perpetrator to trigger a service failure.
The vulnerability of the VPN service module of the HarmonyOS operating system is related to insufficient protection of registration data. Exploiting this vulnerability could allow a hacker to cause a service failure...
The vulnerability of embedded software developed by Qualcomm, related to the use of memory after it is freed, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of microprogramming software in embedded Qualcomm chips is related to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the BRS_netgear_success.html component of the NETGEAR WNR2000v5 router’s embedded software allows a hacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the BRSnetgearsuccess.html component of the NETGEAR WNR2000v5 router’s embedded software is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protect...
The vulnerability of the Linux operating system’s kernel, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.
The vulnerability of the Linux operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the SCSI component in the Linux operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the `nvmet_rdma_send_done()` function in the drivers/nvme/target/rdma.c module of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the nvmetrdmasenddone function in the drivers/nvme/target/rdma.c kernel module of the Linux operating system is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the f2fs_unlock_rpages() function in the fs/f2fs/compress.c module of the F2FS file system support in Linux kernel allows a malicious actor to cause a service failure.
The vulnerability of the f2fsunlockrpages function in the fs/f2fs/compress.c module of the F2FS file system support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sctp_sf_do_dupcook_a() function in the net/sctp/sm_statefuns.c module of the SCTP protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the sctpsfdodupcooka function in the net/sctp/smstatefuns.c module of the Linux operating system’s SCTP protocol implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the ath10k_htc_send_bundle() function in the drivers/net/wireless/ath/ath10k/htc.c module – A driver for Atheros/Qualcomm wireless adapter support in Linux operating systems, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the ath10khtcsendbundle function in the drivers/net/wireless/ath/ath10k/htc.c module – The Atheros/Qualcomm wireless adapter driver for Linux operating systems is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker ...
Vulnerability of the emac_mac_tx_buf_send() function in the drivers/net/ethernet/qualcomm/emac/emac-mac.c module – A driver for supporting Qualcomm Ethernet network adapters in Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the emacmactxbufsend function in the drivers/net/ethernet/qualcomm/emac/emac-mac.c module – The Linux kernel’s Qualcomm Ethernet adapter support driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the gaudi_memset_device_memory() function in the drivers/misc/habanalabs/gaudi/gaudi.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the gaudimemsetdevicememory function in the drivers/misc/habanalabs/gaudi/gaudi.c module of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the mtk_iommu_hw_init() function in the drivers/iommu/mtk_iommu.c module – This driver for Linux’s IOMMU kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mtkiommuhwinit function in the drivers/iommu/mtkiommu.c module – Linux’s IOMMU kernel support driver is vulnerable due to the use of the NULL pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the f2fs_get_unusable_blocks() function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux kernel allows a attacker to compromise the integrity of protected information or cause service failures.
The vulnerability of the f2fsgetunusableblocks function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux’s operating system is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or...
Vulnerability of the rtrs_clt_remove_path_from_sysfs() function in the drivers/infiniband/ulp/rtrs/rtrs-clt.c module – A driver for supporting RTRS server and client-side in the Linux operating system, which allows a hacker to cause service failure
Vulnerability of the rtrscltremovepathfromsysfs function in the drivers/infiniband/ulp/rtrs/rtrs-clt.c module – The driver for server and client support for the RTRS kernel in the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerabilit...
The vulnerability of the uclamp_bucket_id() function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, allows a hacker to gain access to protected information or cause service failures.
The vulnerability of the uclampbucketid function in the kernel/sched/core.c module related to the Linux operating system’s resource management support involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...