92298 matches found
The vulnerability in the Firefox web browser and the Thunderbird email client relates to the ability to write beyond the buffer limit, allowing an attacker to trigger a service failure.
The vulnerability in the Firefox web browser and the Thunderbird email client is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the GC component in the Firefox browser and the Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the GC component in the Firefox browser and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the Firefox web browser and Thunderbird email client, related to uncontrolled resource consumption, allows attackers to trigger a service failure.
The vulnerability in the Firefox web browser and Thunderbird email client is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the xmlFAParseQuantExact() function in the xmlregexp.c component of the Libxml2 library allows a attacker to cause a service failure.
The vulnerability of the xmlFAParseQuantExact function in the xmlregexp.c component of the Libxml2 library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Parsec Cups protection and marking tool lies in the improper release of memory before deleting the last reference, allowing a violator to trigger a service failure.
The vulnerability of the Parsec Cups protection and marking mechanism is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the extract_file() function in the GNU Tar archive viewer allows a hacker to trigger a service failure.
The vulnerability of the extractfile function in the GNU Tar archive viewer is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Bzip2 data compression utility, related to pointer dereferencing errors, allows a hacker to cause a service failure.
The vulnerability of the Bzip2 data compression utility is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the copy_stack() function on the printing server of CUPS allows a attacker to cause a service failure.
The vulnerability of the copystack function in the CUPS printing server relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the get_mech_set() function in the spnego_mech.c component of the Kerberos authentication protocol allows a attacker to cause a service failure.
The vulnerability of the getmechset function in the spnegomech.c component of the Kerberos authentication protocol is related to reading data from within a permissible buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the extract_timestamp function in the Linux Audit storage and record-searching tool allows a perpetrator to trigger a service failure.
The vulnerability of the extracttimestamp function in the Linux Audit storage and record-searching tool is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the `src/cfgparse.c` component of the HAProxy server software allows a attacker to cause a service failure.
The vulnerability in the src/cfgparse.c component of the HAProxy server software is related to errors in pointer dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the PARSEC security subsystem, related to type conversion errors, allows a perpetrator to trigger a service failure.
The vulnerability of the PARSEC security subsystem is related to type conversion errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the astra-safepolicy software for security configuration, related to the lack of data security mechanisms, allows a perpetrator to trigger a service failure.
The vulnerability of the astra-safepolicy security configuration software is related to the lack of a data security mechanism. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the decode_krb5_flags() function in the asn1_k_encode.c component of the Kerberos authentication protocol allows a attacker to cause a service denial.
The vulnerability of the decodekrb5flags function in the asn1kencode.c component of the Kerberos authentication protocol is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service denial...
The vulnerability of the xmlBufSetInputBaseCur function in the Libxml2 library allows a attacker to cause a service failure.
The vulnerability of the xmlBufSetInputBaseCur function in the Libxml2 library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Уязвимость компонента Animation браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Animation браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
The vulnerability of the formSetPassword() function in D-Link DIR-513 router software allows a hacker to cause memory corruption.
The vulnerability of the formSetPassword function in D-Link DIR-513 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...
The vulnerability of HashiCorp Consul Community Edition and Consul Enterprise in the configuration tool, related to improper definition of the link before accessing the file, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the HashiCorp Consul Community Edition and Consul Enterprise service configuration tools is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access t...
Уязвимость компонента Chromoting браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Chromoting браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
Уязвимость компонента WebMIDI браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента WebMIDI браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
Уязвимость компонента Compositing браузера Google Chrome, позволяющая нарушителю получить доступ к защищаемой информации
Уязвимость компонента Compositing браузера Google Chrome связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации...
The vulnerability of the free() function in Google Chrome’s browser allows a hacker to trigger memory corruption.
The vulnerability of the free function in Google Chrome browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause memory corruption...
The vulnerability of the Accessibility component in Google Chrome browser allows attackers to enhance their privileges.
The vulnerability of the Accessibility component in Google Chrome browser relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...
Уязвимость компонента Tint браузера Google Chrome, позволяющая нарушителю выполнить произвольный код или раскрыть конфиденциальную информацию
Уязвимость компонента Tint браузера Google Chrome связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код или раскрыть конфиденциальную информацию...
The vulnerability of the cross-platform MsQuic library, related to a countable loss of significance, allows attackers to increase their privileges.
The vulnerability of the cross-platform MsQuic library is related to a countable loss of significance. Exploiting this vulnerability can allow attackers to enhance their privileges...
Vulnerability of the formQuickIndex() function (/goform/QuickIndex) in the Tenda FH451 router’s software, allowing a hacker to execute arbitrary code
The vulnerability of the formQuickIndex function /goform/QuickIndex in the Tenda FH451 router’s software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Уязвимость компонента Codecs браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Codecs браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
Уязвимость компонента MHTML браузера Google Chrome, позволяющая нарушителю раскрыть конфиденциальную информацию
Уязвимость компонента MHTML браузера Google Chrome связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть конфиденциальную информацию...
Уязвимость компонента Media браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Media браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри изолированной программной среды с помощью специально созданной HTML-стран...
The vulnerability of the strcpy() function (/goform/exeCommand) in the Tenda F453 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the strcpy function /goform/exeCommand in the Tenda F453 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Уязвимость графического процессора браузера Google Chrome, позволяющая нарушителю вызвать повреждение памяти
Уязвимость графического процессора браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать повреждение памяти...
The vulnerability of the JetBrains YouTrack project management and task management software lies in its inability to eliminate special elements in the template creation mechanism, allowing attackers to execute arbitrary code.
The vulnerability of the JetBrains YouTrack project and task management tool is related to the lack of measures taken to eliminate special elements in the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the safe() function in the Gogs self-managed Git repository creation tool allows a hacker to perform cross-site scripting attacks.
The vulnerability of the safe function in the Gogs self-managed Git repository creation tool exists because measures to protect the website structure are not taken. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Gogs software tool for creating self-governed Git repositories stems from the lack of protective measures taken against the website structure. This allows attackers to perform cross-site scripting attacks.
The vulnerability of the Gogs self-managed Git repository creation software exists because measures to protect the structure of the web interface have not been implemented. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Уязвимость компонента Cast браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Cast браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
The vulnerability of the pickle.loads() function in the Hugging Face LeRobot library, which allows a hacker to execute arbitrary code.
The vulnerability of the pickle.loads function in the Hugging Face LeRobot library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Уязвимость компонента Angle браузера Google Chrome, позволяющая нарушителю повысить свои привилегии или выполнить произвольный код
Уязвимость компонента Angle браузера Google Chrome связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
Уязвимость компонента Feedback браузера Google Chrome, позволяющая нарушителю повысить свои привилегии
Уязвимость компонента Feedback браузера Google Chrome связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...
The vulnerability of Ubiquiti UniFi Protect’s microprogramming software, related to deficiencies in authentication procedures, allows a intruder to gain unauthorized access to the device.
The vulnerability of Ubiquiti UniFi Protect’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to the device...
Vulnerability of the fromSetCfm() function (/goform/setcfm) in the Tenda FH451 router’s software, allowing a hacker to execute arbitrary code
The vulnerability of the fromSetCfm function /goform/setcfm in the Tenda FH451 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of manipulating arguments, allowing attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...
The vulnerability of the Google Chrome browser’s Views component allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Google Chrome browser’s Views component relates to the possibility of memory usage after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the module for implementing AEAD algorithms, algif_aead, in the Linux operating system, allows attackers to enhance their privileges.
The vulnerability of the module for implementing AEAD algorithms in Linux kernel systems is related to the lack of checks for the correctness of incoming requests. Exploiting this vulnerability can allow attackers to enhance their privileges...
Уязвимость компонента Canvas браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Canvas браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри изолированной программной среды с помощью специально созданной...
The vulnerability of the WebView component for displaying web pages in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the WebView component in Google Chrome browsers relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the application programming interface of the software for creating self-governing Git repositories called Gogs allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the application programming interface of the Gogs self-managed Git repository creation software is related to the disclosure of information through query strings. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...
The vulnerability of the sub_3C434() function (/goform/AdvSetWan) in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the sub3C434 function /goform/AdvSetWan of the Tenda FH451 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Уязвимость библиотеки ANGLE браузера Google Chrome, позволяющая нарушителю получить доступ к системным ресурсам за пределами ограниченной среды браузера
Уязвимость библиотеки ANGLE браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к системным ресурсам за пределами ограниченной среды браузера...
Уязвимость компонента Navigation браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента Navigation браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код через специально созданную HTML-страницу...
The vulnerability of the Gogs software tool for creating self-governed Git repositories stems from the lack of protective measures taken against the website structure. This allows attackers to perform cross-site scripting attacks.
The vulnerability of the Gogs self-managed Git repository creation software exists because measures to protect the structure of the web interface have not been implemented. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...