97848 matches found
Linux kernel mcast module DoS
The vulnerability of the mcast module in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the mlx5/stdtypes.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux kernel verifier.c DoS
The vulnerability of the verifier.c component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux amdgpu_acpi.c DoS
The vulnerability of the amdgpuacpi.c component in the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux SPIWPCMFIU Component DoS
The vulnerability of the drivers/spi/spi-wpcm-fiu.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux mprls0025pa_spi.c DoS
The vulnerability of the mprls0025paspi.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux drivers md dm-zone Buffer Overflow DoS
The vulnerability of the drivers/md/dm-zone.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the mm/pagealloc component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux kernel Media DoS
The vulnerability of the Linux operating system’s kernel media component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux virtio transport DoS
The vulnerability of the net/vmwvsock/virtiotransportcommon.c file in Linux operating systems is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
FreeRDP rpc_client_recv_fragment Heap Buffer Overflow DoS
The vulnerability of the rpcclientrecvfragment function in the libfreerdp/core/gateway/rpcclient.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures and execute arbitrary code...
FreeRDP DSP Decode RCE
The vulnerability of the freerdpdspdecodeopus function in the libfreerdp/codec/dsp.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure and execute arbitrary code...
mlflow/utils/validation.py SSRF
The vulnerability of the validatewebhookurl function in the mlflow/utils/validation.py file of the machine learning lifecycle management platform is related to insufficient validation of server-side requests. Exploiting this vulnerability could allow an attacker to perform an SSRF attack and gain...
phpMyFAQ UserSession Method Unauthorized Access
The vulnerability of the userTracking method in the UserSession class of the src/phpMyFAQ/User/UserSession.php file of the phpMyFAQ web application is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorize...
Ansible collection-community-general Unauthorized Access
The vulnerability of the ansible-collection-community-general package in the Ansible automation system is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Gitea POST /api/v1/repos Component Unauthorized Access
The vulnerability of the POST /api/v1/repos/owner/repo/merge-upstream component of the Git repository management system Gitea is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
.NET Microsoft Visual Studio Authentication Bypass
The vulnerability of .NET and Microsoft Visual Studio software-related programs is related to the improper implementation of authentication algorithms. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...
ASP.NET Core Authentication Bypass
The vulnerability of the ASP.NET Core software platform relates to bypassing authentication using data that is assumed to be unchangeable. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Apache HTTP Server Information Disclosure
The vulnerability of the Apache HTTP Server is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Apache ActiveMQ Authentication Bypass
The vulnerability of Apache ActiveMQ software products is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
SITI-Navigator Access Control File Upload
The vulnerability of SITI-Navigator software is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to upload arbitrary files...
SITI-Navigator Arbitrary Command Execution
The vulnerability of the SITI-Navigator software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
hp-bioscfg Kernel DoS
The vulnerability of the hp-bioscfg component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
iommufd/selftest DoS
The vulnerability of the iommufd/selftest components in the Linux operating system is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux netfilter DoS
The vulnerability in the net/netfilter/nfconncount.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
libfreerdp H.264 Information Disclosure
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...
FreeRDP RDP Server DoS
The vulnerability of the rdpsndserverrecvformats function in the channels/rdpsnd/server/rdpsndmain.c file of the RDP client FreeRDP is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
Metabase Query Privilege Escalation
The vulnerability of the Metabase data visualization and reporting software relates to the lack of measures taken to protect the SQL query structure during the processing of the resetpassword parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...
Oracle Internet Directory LDAP Server Full Control
The vulnerability of the OID LDAP Server component of the Oracle Internet Directory service in the Oracle Fusion Middleware software platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain full control over the system using the LDAP...
Qualcomm KGSL Driver Privilege Escalation
The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level and execute arbitrary code...
phpMyFAQ SetupController PHP My FAQ
The vulnerability of the src/phpMyFAQ/Controller/Api/SetupController.php file in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause...
Grafana Alertmanager Templates Test Endpoint DoS
The vulnerability of the Alertmanager Templates Test Endpoint component of the Grafana monitoring and logging platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Coredns Privilege Escalation
The vulnerability of the Coredns DNS server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
Gitea Authentication Bypass Info Disclosure
The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CoreDNS Loop Plugin Privilege Escalation
The vulnerability of the CoreDNS Loop Plugin in the coredns DNS server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to increase their privileges...
Apache HTTP Server Privilege Escalation
The vulnerability of the Apache HTTP Server web server is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...
PostgreSQL tsvector tsquery Code Execution
The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
PostgreSQL pgcrypto Unauthorized Access
The vulnerability of the pgcrypto module in the PostgreSQL database management system is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
PostgreSQL Session Expiration Unauthorized Access
The vulnerability of the PostgreSQL database management system is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read and modify data...
PostgreSQL Data Selection Evaluator ctid Session Expiration Disclosure
The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
PostgreSQL refint module Code Execution
The vulnerability of the refint module in the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PostgreSQL SCRAM Disclosure
The vulnerability of the SCRAM authentication subsystem in the PostgreSQL database management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
amcheck Extension RCE
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
PostgreSQL PL/Tcl PL/Perl Code Execution
The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PostgreSQL Code Execution
The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PostgreSQL Buffer Overflow
The vulnerability of the PostgreSQL database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
PostgreSQL GSSAPI Man-in-the-Middle
The vulnerability of the GSSAPI component in the PostgreSQL database management system is related to the lack of integrity checks during the transmission of messages through the communication channel. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks...
PostgreSQL fuzzystrmatch Code Execution
The vulnerability of the levenshtein and levenshteinlessequal functions in the fuzzystrmatch database extension of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
ECPG clients PostgreSQL DoS
The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure by sending an incorrect bytea value...
pg_dump Code Execution
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...