95883 matches found
The vulnerabilities of the functions qede_tpa_cont() and qede_tpa_end() in the driver/net/ethernet/qlogic/qede/qede_fp.c file of the Ethernet network adapter driver for the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions qedetpacont and qedetpaend in the driver/net/ethernet/qlogic/qede/qedefp.c module of the Ethernet network adapter driver for the Linux operating system involve buffer overflow exploits. Exploiting these vulnerabilities could allow attackers to compromise the...
The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of Microsoft Excel editors, related to the swapping of an unreliable pointer, allows a malicious actor to disclose sensitive information.
The vulnerability of Microsoft Excel editors is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...
The vulnerability of the Wireless Network Manager (WNM) for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Wireless Network Manager WNM for Windows operating systems relates to competitive access to resources i.e., a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability in the implementation of the TCP/IP protocol on Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Clip Service on Windows operating systems allows a hacker to escalate their privileges.
The vulnerability of the Windows Clip Service on Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Media component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows Media component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability affects the classes HAProxyMessage and HAProxyMessageEncoder of the Netty framework, which is used for developing network applications, servers, and client protocols. This vulnerability allows an attacker to replace the original data with malicious content.
The vulnerability of the HAProxyMessage and HAProxyMessageEncoder classes in the Netty framework for developing network applications, servers, and clients is related to the failure to handle CRLF sequences properly. Exploiting this vulnerability can allow an attacker to replace legitimate data wi...
The vulnerability in the mm/damon/sysfs.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a system failure.
The vulnerability in the mm/damon/sysfs.c module of the Linux kernel’s memory management subsystem relates to the distribution of resources without any restrictions or controls. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the x86__is_amd_cpu() function in the tools/perf/arch/x86/util/env.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the x86isamdcpu function in the tools/perf/arch/x86/util/env.c module of the Linux operating system’s kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the HTTP-handler fromAdvSetLanip in the microprogramming software for Tenda AC10 allows a attacker to execute arbitrary code, damage memory, or cause a service failure.
The vulnerability of the HTTP-handler fromAdvSetLanip in the Tenda AC10 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code, damage memory, or cause a service...
The vulnerability of the rxe_qp_do_cleanup() function in the drivers/infiniband/sw/rxe/rxe_qp.c module of the Linux operating system’s kernel allows a malicious actor to cause a service failure.
The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the ath11k_dp_rx_process_mon_status() function in the drivers/net/wireless/ath/ath11k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath11kdprxprocessmonstatus function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the gud_prep_flush() function in the drivers/gpu/drm/gud/gud_pipe.c module of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the gudprepflush function in the drivers/gpu/drm/gud/gudpipe.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the snr_uncore_mmio_map() function in the arch/x86/events/intel/uncore_snbep.c module of the Linux operating system’s kernel on the x86 platform allows a hacker to cause a service failure.
The vulnerability of the snruncoremmiomap function in the arch/x86/events/intel/uncoresnbep.c module of the Linux operating system’s kernel on x86 platforms is related to errors during link time. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the overflow of buffers in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the overflow of buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of Adobe Audition’s audio editor lies in its ability to record beyond the buffer limit in memory, allowing a hacker to execute arbitrary code.
The vulnerability of Adobe Audition is related to recording beyond the buffer limits in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the DirectX Graphics Kernel component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the DirectX Graphics Kernel component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the NTFS file system driver in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the NTFS file system driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Runtime component in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the Windows Runtime component in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows Media component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows Media component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of Windows operating system kernels is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Adobe Media Encoder application relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer boundaries in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Microsoft .NET software platform and the Visual Studio Code editor, related to errors in handling symbolic links, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Microsoft .NET software platform and the code editor Visual Studio Code is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the sk_mc_loop() function in the net/core/sock.c module exposes the support for networking functions in the Linux kernel, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the skmcloop function in the net/core/sock.c module related to Linux kernel network functions is associated with improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to disclose protected information
The vulnerability of the Win32k.sys component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of Microsoft Outlook Copilot, an intelligent virtual customer support tool for Outlook, allows a hacker to execute arbitrary commands.
The vulnerability of the intelligent virtual assistant for Microsoft Outlook Copilot is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of Microsoft Windows application stores relates to competitive access to resources (race condition), which allows attackers to escalate their privileges.
The vulnerability of Microsoft Windows application stores is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.
The vulnerability of the Windows Cloud Files Mini Filter Driver in operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows File Explorer on Windows operating systems, allowing a hacker to disclose protected information
The vulnerability of the Windows File Explorer driver in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the /web/jquery/uploader/multi Uploadify.php script of the D-Link DNS-320 network storage software allows a attacker to execute arbitrary code and gain full access to the system.
The vulnerability in the /web/jquery/uploader/multiUploadify.php script of the D-Link DNS-320 network storage software relates to the unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and gain full access to the...
The vulnerability of the function nvme_ctrl_dhchap_ctrl_secret_store() in the driver/nvme/host/core.c file of the Linux operating system’s NVME kernel driver, which allows a hacker to cause a service failure.
The vulnerability of the nvmectrldhchapctrlsecretstore function in the drivers/nvme/host/core.c file of the Linux NVME driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the oauth_verify_response() function in the flask_security/oauth_glue.py file, which is part of the Flask-Security-Too security management tool, allows a attacker to circumvent security restrictions.
The vulnerability of the oauthverifyresponse function in the flasksecurity/oauthglue.py file, a part of the Flask-Security-Too security management tool, is related to vulnerabilities in the authentication process. Exploiting this vulnerability could allow an attacker to circumvent security...
The decoder of the SpdyFrameCodec framework for developing network applications, servers, and clients uses the Netty protocol. This vulnerability allows attackers to cause a service failure.
The vulnerability of the SpdyFrameCodec decoder in the networking application development framework, related to servers and clients using the Netty protocol, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the crypto_rsa_common() function in the libfreerdp/crypto/crypto.c file of the RDP client FreeRDP allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the cryptorsacommon function in the libfreerdp/crypto/crypto.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
Vulnerability of components /api/v1/validate/code and /api/v1/auto_login in the software for visual development of IBM Langflow OSS AI agents, allowing a perpetrator to execute arbitrary code.
The vulnerability of the software components /api/v1/validate/code and /api/v1/autologin of the IBM Langflow OSS visual development agent for AI agents is related to improper code generation management. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...
The vulnerability of the irdma.save_msix.info() function in the drivers/infiniband/hw/irdma/hw.c driver of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the irdma.savemsixinfo function in the drivers/infiniband/hw/irdma/hw.c driver of the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of Adobe Experience Manager’s content and media data management system lies in the insufficient protection of website structures, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
The vulnerability of Adobe Experience Manager’s content and media data management system lies in the insufficient protection of website structures, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to unreliable pointer aliasing. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Windows Terminal emulator for operating systems, which allows a hacker to execute arbitrary code.
The vulnerability of the Windows Terminal emulator for operating systems is related to a numerical overflow issue. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the mtk_vcodec_probe() function in the driver/media/platform/mediatek/vcodec/mtk_vcodec_dec_drv.c file of the Linux operating system’s multimedia device drivers allows a hacker to cause a service failure.
The vulnerability of the mtkvcodecprobe function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver for multimedia devices in Linux operating systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause service...
The vulnerability of the stmmac_dvr_probe() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_main.c file of the Ethernet network adapter driver module from STMicroelectronics’ operating system Linux allows a hacker to cause a service failure.
The vulnerability of the stmmacdvrprobe function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet network adapter driver from STMicroelectronics’ Linux kernel is related to the absence of references to the actively allocated resources. Exploiting this vulnerability cou...
The vulnerability of the do_read inode() function in the fs/f2fs/inode.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the doread inode function in the fs/f2fs/inode.c module of the F2FS file system in the Linux operating system is related to a logical error in the operator precedence. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the init_amd_zen4() function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the initamdzen4 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux kernel support for x86 platforms, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to...
The vulnerability of the prescriptionorderreport.php script of the Hospital Management System allows a hacker to execute arbitrary SQL queries.
The vulnerability of the prescriptionorderreport.php script of the Hospital Management System involves the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the getParameter() function in the AbstractSalesforceProcessor class of the camel-salesforce component of the Apache Camel framework allows a attacker to disclose protected information.
The vulnerability of the getParameter function in the AbstractSalesforceProcessor class of the camel-salesforce component of the Apache Camel framework is related to vulnerabilities in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to disclose sensitive...