95883 matches found
The vulnerability of the parseRibEntry() function in the pkg/packet/mrt/mrt.go file of the GoBGP edge router protocol allows a attacker to cause a service failure.
The vulnerability of the parseRibEntry function in the pkg/packet/mrt/mrt.go file of the GoBGP firewall protocol is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the BGP Header Handler component of the GoBGP border gateway protocol allows a attacker to increase their privileges.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the BGP Header Handler component of the GoBGP border gateway protocol is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the AdjRib.Update() function in the control module for the Adj-RIB BGP protocol of the GoBGP border gateway allows a attacker to cause a service failure.
The vulnerability of the AdjRib.Update function in the Adj-RIB BGP protocol control module of the GoBGP border gateway is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failure...
The vulnerability of the dump_prefixes() function in the src/spell.c file of the Vim text editor allows a hacker to trigger a denial-of-service attack.
The vulnerability of the dumpprefixes function in the src/spell.c file of the Vim text editor is related to the escape of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure...
The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module runtime/autoload/phpcomplete.vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module of the runtime/autoload/phpcomplete.vim text editor in Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/prefix_sid.go file of the SRv6 L3 Service protocol for the border gateway GoBGP allows a attacker to cause a service failure.
The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/prefixsid.go file of the SRv6 L3 Service protocol for the GoBGP edge gateway is related to improper resource cleanup or release. Exploiting this vulnerability could allow a malicious actor to cause service failure...
Vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the services for the NFS ONCRPC XDR driver on the Windows operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Skype for Business Server’s instant messaging program, related to improper external management of file names or paths, allows a hacker to execute arbitrary code.
The vulnerability of the Skype for Business Server’s instant messaging program is related to improper external management of the file name or path. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the gf_media_map_esd() function in the media_tools/isom_tools.c file of the GPAC multimedia platform allows a intruder to cause a service failure.
The vulnerability of the gfmediamapesd function in the mediatools/isomtools.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gf_isom_get_user_data_count() function in the isomedia/isom_read.c file of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfisomgetuserdatacount function in the isomedia/isomread.c file of the multimedia platform GPAC involves the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gf_node_get_tag() function in the scenegraph/base_scenegraph.c file of the GPAC multimedia platform allows a attacker to cause a service failure.
The vulnerability of the gfnodegettag function in the scenegraph/basescenegraph.c file of the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the spell_soundfold_sofo() function in the Vim text editor’s src/spell.c file allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the spellsoundfoldsofo function in the src/spell.c file of the Vim text editor is related to the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...
The vulnerability in the `update_snapshot()` function of the `src/terminal.c` file in the Vim text editor allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the updatesnapshot function in the src/terminal.c file of the Vim text editor is related to the execution of the operation outside the buffer’s memory limits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...
The vulnerability of the ParseIP6Extended() function in the bgp/bgp.go file of the GoBGP border gateway protocol allows a attacker to cause a service failure.
The vulnerability of the ParseIP6Extended function in the bgp/bgp.go file of the GoBGP border gateway protocol is related to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the decoder_context::decodeSliceUnitTiles() function in the libde265/decctx.cc implementation of the h.265 video codec Libde265 allows a malicious actor to cause a service failure.
The vulnerability of the decodercontext::decodeSliceUnitTiles function in the libde265/decctx.cc implementation of the h.265 video codec. Libde265 relies on the output of the operation outside the buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure...
The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.
The vulnerability of the DNS Server component of the Windows operating system is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the TLS ECH traffic analyzer processor in Wireshark allows a hacker to induce a service failure.
The vulnerability of the TLS ECH traffic analyzer processor in Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ParseBody() function in the pkg/packet/bmp/bmp.go file of the BMP Parser component of the GoBGP edge gateway protocol allows a attacker to cause a service failure.
The vulnerability of the ParseBody function in the pkg/packet/bmp/bmp.go file of the BMP Parser component of the GoBGP edge gateway protocol is related to the situation where the output of the operation goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...
The vulnerability of the BGP OPEN message parser in the pkg/packet/bbg module of the edge gateway protocol GoBGP allows a attacker to compromise the integrity of the protected information.
The vulnerability of the BGP OPEN message parser in the pkg/packet/bbg module of the edge gateway protocol GoBGP is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...
The vulnerability of the Windows iSCSI Target service allows a hacker to circumvent security restrictions.
The vulnerability of the Windows iSCSI Target service for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
The vulnerabilities of the functions setDict(), setLongMax(), and setLevel() in the data compression library zstd-jni allow a attacker to cause a service failure.
The vulnerabilities of the functions setDict, setLongMax, and setLevel in the data compression library zstd-jni are related to the possibility of exploiting memory usage after deallocation. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
The vulnerabilities of the ZstdCompressCtx and ZstdDecompressCtx components of the zstd-jni compression library allow attackers to cause service interruptions.
The vulnerability of the ZstdCompressCtx and ZstdDecompressCtx components of the zstd-jni compression library lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...
The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the DDSSQLFilter component in the Fast DDS transfer library, which allows a attacker to cause a service failure
The vulnerability of the DDSSQLFilter component in the Fast DDS library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, relates to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...
Vulnerability of the x509_utils_verify() function in the RDP client FreeRDP, allowing attackers to bypass existing security mechanisms
The vulnerability of the x509utilsverify function in the RDP client FreeRDP is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...
The vulnerability of the Adobe Photoshop graphic editor, related to integer overflow, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Discovery Server component of the Fast DDS library, which allows a perpetrator to execute arbitrary code.
The vulnerability of the Discovery Server component of the Fast DDS library relates to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the /oauth/backchannel-logout web interface based on artificial intelligence in Open WebUI allows a perpetrator to trigger a service failure.
The vulnerability of the /oauth/backchannel-logout web interface component in the Open WebUI system is related to asymmetric resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
The vulnerability of the Actor.name_email_regex() function in the Python library for interacting with Git repositories in GitPython allows a malicious actor to trigger a denial-of-service attack.
The vulnerability of the Actor.nameemailregex function in the Python library for interacting with Git repositories in GitPython is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the ZstdDictCompress component in the zstd-jni data compression library allows a attacker to execute arbitrary code.
The vulnerability of the ZstdDictCompress component in the zstd-jni data compression library is related to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the `serial_process_irp_device_control()` function in the `channels/serial/client/serial_main.c` file of the RDP client FreeRDP, which allows a hacker to trigger a service failure.
The vulnerability of the serialprocessirpdevicecontrol function in the channels/serial/client/serialmain.c file of the RDP client FreeRDP is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause service failure...
The vulnerability of the ReadHeaderField() function in the KeePass password manager’s password management function allows a hacker to cause a service failure.
The vulnerability of the ReadHeaderField function in the KeePass password manager is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created KDBX file...
The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Illustrator, related to deficiencies in authentication procedures, allows a hacker to execute arbitrary code.
The vulnerability of Adobe Illustrator’s graphic editor is related to deficiencies in the authentication process. Exploiting this vulnerability allows a hacker to execute arbitrary code...
The vulnerability of Adobe Illustrator, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Python library for interacting with git repositories, GitPython, arises from improper code generation management. This allows attackers to execute arbitrary code.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) kernel of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the SCTP kernel implementation in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the Zstd.trainFromBufferDirect() function in the zstd-jni data compression library allows a attacker to cause a service failure.
The vulnerability of the Zstd.trainFromBufferDirect function in the zstd-jni data compression library is related to reading beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Vulnerability of the functions CliprdrStream_Read(), wf_cliprdr_server_file_contents_response(), and cliprdr_read_file_contents_response() in the RDP client FreeRDP, allowing a intruder to execute arbitrary code
The vulnerability of the CliprdrStreamRead, wfcliprdrserverfilecontentsresponse, and cliprdrreadfilecontentsresponse functions in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the SOGo collaboration software, related to the handling of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of the Alinto SOPE framework and the SOGo software for collaborative work is related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the RDPDR IRP RDP-client FreeRDP module allows a hacker to gain access to read, write, and delete arbitrary files.
The vulnerability of the RDPDR IRP RDP-client FreeRDP module is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to read, write, and delete arbitrary files...
The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the possibility of introducing or modifying arguments, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the scale_nearest_neighbor() function in the file format decoders and encoders of the libheif library allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Microsoft Power Platform tools, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.
The vulnerability of the Microsoft Power Platform tools is related to insufficient testing of queries on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of the JSON processing library and stream-json, related to algorithmic complexity, allows attackers to cause service failures.
The vulnerability of the JSON processing library and stream-json is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...