95883 matches found
The vulnerability of the hidraw_open() function in the drivers/hid/hidraw.c module of the Linux kernel’s device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hidrawopen function in the drivers/hid/hidraw.c module of the Linux device subsystem driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...
The vulnerability of the crypto_free_instance() function in the crypto/algapi.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cryptofreeinstance function in the crypto/algapi.c module of the Linux kernel’s cryptographic subsystem is related to situations where there is a competition for resources between different contexts. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the ath12k_dp_rx_h_null_q_desc() function in the drivers/net/wireless/ath/ath12k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kdprxhnullqdesc function in the drivers/net/wireless/ath/ath12k/dprx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker t...
The vulnerability of the `psm_init_power_state_table()` function in the `drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c` driver, a component of the Direct Rendering Infrastructure (DRI) graphics card driver for AMD-based Linux operating systems. This vulnerability allows an attacker to cause a system failure.
The vulnerability of the psminitpowerstatetable function in the drivers/gpu/drm/amd/pm/powerplay/hwmgr/pppsm.c driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability could allow ...
The vulnerability of Adobe Experience Manager’s content and media data management system lies in the insufficient protection of website structures, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
The vulnerability of Adobe Audition’s audio editor, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.
The vulnerability of Adobe Audition is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the intel_prepare_plane_fb() function in the drivers/gpu/drm/i915/display/intel_atomic_plane.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the intelprepareplanefb function in the drivers/gpu/drm/i915/display/intelatomicplane.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to the use of pointers. Exploiting this vulnerability could allow an...
The vulnerability of Windows operating system backup services allows attackers to increase their privileges.
The vulnerability of Windows operating system backup services is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Microsoft Office software package relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office package is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of Windows Admin Center, related to the lack of measures taken to protect the website structure, allows attackers to perform spear-phishing attacks.
The vulnerability of the Windows Admin Center management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Brokering File System BFS in Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the function da9063_check_xvp_constraints() in the module drivers/regulator/da9063-regulator.c of the Linux kernel’s voltage and current regulator driver software allows a hacker to cause a service failure.
The vulnerability of the da9063checkxvpconstraints function in the drivers/regulator/da9063-regulator.c module of the Linux kernel’s voltage and current regulator driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the f2fsMoveInline_dirents() function in the fs/f2fs/inline.c module of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the f2fsMoveInlinedirents function in the fs/f2fs/inline.c module of the F2FS file system in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `panthor_gem_create_with_handle()` function in the `drivers/gpu/drm/panthor/panthor_gem.c` file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the panthorgemcreatewithhandle function in the drivers/gpu/drm/panthor/panthorgem.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the copying of buffers without checking the size of...
The vulnerability of the current_value_show() function in the drivers/platform/x86/think-lmi.c module of the X86 device driver framework of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the currentvalueshow function in the drivers/platform/x86/think-lmi.c module of the Linux operating system’s X86 device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the arch_prepare_kprobe() function in the arch/powerpc/kernel/kprobes.c module of the PowerPC platform supports Linux’s PowerPC kernel. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the archpreparekprobe function in the arch/powerpc/kernel/kprobes.c module, which is part of the PowerPC platform support for the Linux operating system, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the sdio_release_func() function in the drivers/mmc/core/sdio_bus.c file of the MMC/SD/SDIO card driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sdioreleasefunc function in the drivers/mmc/core/sdiobus.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the hci_add_adv_monitor() function in the net/bluetooth/hci_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hciaddadvmonitor function in the net/bluetooth/hcicore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of Adobe Experience Manager’s content and media data management system lies in the insufficient protection of website structures, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to insufficient validation of input data, allows a hacker to bypass security measures.
The vulnerability of the professional video editing software Adobe Premiere Pro is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass security measures...
The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Microsoft .NET software platform and the Visual Studio Code editor, related to errors in handling symbolic links, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Microsoft .NET software platform and the code editor Visual Studio Code is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Content Delivery Manager component in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Content Delivery Manager component for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the implementation of the Remote Desktop Protocol (RDP) on Windows operating systems allows a hacker to compromise and disclose sensitive information.
The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to deficiencies in securing access to personal information. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the XML analysis mechanism in security systems and the Nessus vulnerability assessment tool allows attackers to execute arbitrary SQL queries.
The vulnerability of the XML analysis mechanism of the security system and the Nessus vulnerability assessment tool is related to the lack of measures taken to protect the SQL query structure during the processing of the nessus file. Exploiting this vulnerability allows an attacker to execute...
The vulnerability of the eeprom_prepare_data() function in the net/ethtool/eeprom.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the eeprompreparedata function in the net/ethtool/eeprom.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
The vulnerability of the cros_typec_get_switch_handles() function in the drivers/platform/chrome/cros_ec_typec.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the crostypecgetswitchhandles function in the drivers/platform/chrome/crosectypec.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the ext4_mb_use_preallocated() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4mbusepreallocated function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the Adobe Bridge file manager, related to integer overflow, allows an attacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Experience Manager’s content and media data management system lies in the insufficient protection of website structures, which allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...
The vulnerability of the Microsoft .NET Framework software lies in the possibility of an operation occurring outside the buffer boundaries in memory, which allows a malicious actor to cause a system failure.
The vulnerability of the Microsoft .NET Framework software platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Microsoft SQL Server database management system, related to errors in data type mixing, allows attackers to disclose sensitive information.
The vulnerability of the Microsoft SQL Server database management system is related to type mixing errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.
The vulnerability of the Windows Backup Service in operating systems relates to competitive access to resources a state of competition. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to type confusion errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the OLERead::read() function in the src/PhpSpreadsheet/Shared/OLERead.php script of the PhpSpreadsheet library allows a hacker to trigger a service failure.
The vulnerability of the OLERead::read function in the src/PhpSpreadsheet/Shared/OLERead.php script of the PhpSpreadsheet library is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the WP_Query class in the WordPress content management system allows attackers to execute arbitrary code and gain unauthorized access to confidential information.
The vulnerability of the WPQuery class in the WordPress content management system is related to the lack of protection for the SQL query structure when processing the authornotin parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain unauthorized access to...
The vulnerability of the get_items() function in the WordPress content management system allows a hacker to bypass security restrictions, execute arbitrary code, and gain unauthorized access to protected information.
The vulnerability of the getitems function in the WordPress content management system is related to the occurrence of synchronization issues between the permission check array, the allowed endpoints list, and the execution array. Exploiting this vulnerability could allow an attacker to bypass...
The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the gzfileGetContents() method in the src/PhpSpreadsheet/Reader/Gnumeric.php script of the PhpSpreadsheet library allows a attacker to cause a service failure.
The vulnerability of the gzfileGetContents method in the src/PhpSpreadsheet/Reader/Gnumeric.php script of the PhpSpreadsheet library is related to incorrect processing of highly compressed input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
The vulnerability of the damon_sysfs_commit_input() function in the mm/damon/sysfs.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the damonsysfscommitinput function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to cause ...
The vulnerability of the clk_wzrd_register_divider() function in the drivers/clk/xilinx/clk-xlnx-clock-wizard.c file of the clock controller driver for Samsung Exynos CPUs with Linux operating system. This vulnerability allows a hacker to cause a service failure.
The vulnerability of the clkwzrdregisterdivider function in the drivers/clk/xilinx/clk-xlnx-clock-wizard.c file of the clock controller driver for Samsung Exynos Linux operating system’s cores is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the rds_tcp_reset_callbacks() function in the net/rds/tcp.c module, which is part of the networking functions of the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the rdstcpresetcallbacks function in the net/rds/tcp.c module, which implements networking functions for the Linux operating system’s kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...
The vulnerability of the components camel-netty-http and camel-undertow in the Apache Camel framework allows attackers to disclose protected information.
The vulnerability of the camel-netty-http and camel-undertow components of the Apache Camel framework is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...