97848 matches found
PostgreSQL DDL DoS
The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...
LibSoup Memory Leak DoS
The vulnerability of the HTTP server-based LibSoup library lies in the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Linux kernel shmem DoS
The vulnerability of the shmem module in the Linux operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow an attacker to cause a service failure...
PostgreSQL pgcrypto Unauthorized Access
The vulnerability of the pgcrypto module in the PostgreSQL database management system is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
PostgreSQL SCRAM Disclosure
The vulnerability of the SCRAM authentication subsystem in the PostgreSQL database management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
PostgreSQL picksplit Disclosure
The vulnerability of the picksplit function in the PostgreSQL database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...
PostgreSQL Buffer Overflow
The vulnerability of the PostgreSQL database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
PostgreSQL EXTRACT Code Execution
The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
PostgreSQL fuzzystrmatch Code Execution
The vulnerability of the levenshtein and levenshteinlessequal functions in the fuzzystrmatch database extension of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
ECPG clients PostgreSQL DoS
The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure by sending an incorrect bytea value...
pg_dump Code Execution
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
psql Command Execution
The vulnerability of the psql utility in the PostgreSQL database management system lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
PostgreSQL Logical Decoding Code Execution
The vulnerability of the logical decoding mechanism in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Linux DRI Driver Heap Buffer Overflow DoS
The vulnerability of the xeregsradd function in the drivers/gpu/drm/xe/xeregsr.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failur...
WebKitGTK WebKit DoS
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
WPE WebKit DoS
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the processv2sparseread function in the net/ceph/messengerv2.c kernel module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
Linux kernel drivers/md DoS
The vulnerability of the drivers/md components of the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
PostgreSQL refint module Code Execution
The vulnerability of the refint module in the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
amcheck Extension RCE
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
PostgreSQL pg_restore_attribute_stats() Code Execution
The vulnerability of the pgrestoreattributestats function in the PostgreSQL database management system is related to type mixing errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PostgreSQL Code Execution
The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PostgreSQL ascii Disclosure
The vulnerability of the ascii function in the PostgreSQL database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
PostgreSQL ALTER TABLE Alter Type Data Modification
The vulnerability of the ALTER TABLE/ALTER TYPE command in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to delete or modify data...
Zyxel networking device security bypass
The vulnerability of the sociallogin.cgi script of the Zyxel networking devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
OpenColorIO ConvertToRegularExpression Heap Buffer Overflow DoS
The vulnerability of the ConvertToRegularExpression function in the src/OpenColorIO/FileRules.cpp component of the OpenColorIO color management framework is related to the output of the operation being stored outside of the buffer. Exploiting this vulnerability could allow an attacker to cause a...
Expat storeAtts Function DoS
The vulnerability of the storeAtts function in the Expat library is related to its algorithmic complexity. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Apache Tomcat RewriteValve Bypass
The vulnerability of the RewriteValve component in the Apache Tomcat application server is related to improper handling of data with URL encoding. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms remotely...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...
Microsoft Malware Protection Engine Privilege Escalation
The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, relates to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability can allow attackers to increase their privileges...
Phoca Cart Joomla Unauthorized Access
The vulnerability of the Phoca Cart component in the Joomla content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Content Credentials SDK Pointer Dereferencing DoS
The vulnerability of the Content Credentials SDK libraries is related to errors in pointer assignment. Exploiting this vulnerability could allow an attacker to cause service failures...
Content Credentials SDK Uncontrolled Resource Consumption DoS
The vulnerability of Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Online Store Authentication Bypass Privilege Escalation
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
Online Store Code Execution
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...
Adobe Lightroom Classic Code Execution
The vulnerability of the Adobe Lightroom Classic graphic editor is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Lightroom Classic Integer Overflow RCE
The vulnerability of the Adobe Lightroom Classic graphic editor is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Adobe Lightroom Classic Buffer Overflow Code Execution
The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Adobe Lightroom Classic Buffer Overflow Code Execution
The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Adobe Lightroom Classic Buffer Overflow Code Execution
The vulnerability of the Adobe Lightroom Classic graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PostgreSQL to_char Function Code Execution
The vulnerability of the tochartimestamptz function in the PostgreSQL database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Tenda AC12 Router set_wl_guest_iplist fromSetWifiGusetBasic buffer overflow DoS
The vulnerabilities of the functions setwlguestiplist and fromSetWifiGusetBasic of the Tenda AC12 router are related to the occurrence of operations outside the buffer in memory. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiality, integrity, and...
Zyxel CGI Command Execution
The vulnerability of CGI programs in microprogramming software for network devices from Zyxel relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
openssl_encrypt File Read Write
The vulnerability in the opensslencrypt/modules/pluginsystem/pluginsandbox.py file, belonging to the opensslencrypt library written in Python, relates to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to rea...
Content Credentials SDK Path Traversal
The vulnerability of the Content Credentials SDK libraries is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Content Credentials SDK Countable Loss of Significance DoS
The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Countable Loss of Significance DoS
The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Insufficient Validation Bypass
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...