44192 matches found
Linux arch/arm64/net/bpf_jit_comp.c prepare_trampoline() Buffer Overflow Do
The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c module of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux net/unix/af_unix manage_oob Data Compromise
The vulnerability of the manageoob function in the net/unix/afunix.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux kernel ntfs3 miEnumattr() Heap Buffer Overflow
The vulnerability of the miEnumattr function in the fs/ntfs3/record.c file of the Linux kernel’s file system ntfs3 is related to an increase in privileges. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
IBM MQ Operator Emergency Recovery Unauthenticated Access
The vulnerability of the emergency recovery function of the Native HA Cross-Region Replication CRR of the IBM MQ Operator allows a attacker to gain unauthorized access to protected information...
drivers/watchdog/sc520_wdt.c wdt_startup() Use-After-Free
The vulnerability of the wdtstartup function in the drivers/watchdog/sc520wdt.c module related to Linux kernel watchdog timer support stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel driver/us function Heap Buffer Overflow DoS
The vulnerability of the ucsiccgsynccontrol function in the drivers/us module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux net/smc/af_smc Heap Buffer Overflow DoS
The vulnerability of the smccreate function in the net/smc/afsmc.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux kernel Function Use-After-Free
The vulnerability of the userfencecreate function in the drivers/gpu/drm/xe/xesync.c kernel module of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
Linux fsnotifyPutSb_watchedObjects Heap Buffer Overflow DoS
The vulnerability of the fsnotifyPutSbwatchedObjects function in the fs/notify/mark.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel xe_reg_sr_add Heap Buffer Overflow DoS
The vulnerability of the xeregsradd function in the drivers/gpu/drm/xe/xeregsr.c kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
TOTOLINK T10 Router Data Compromise
The vulnerability of TOTOLINK T10 router microprogramming software is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
zynqmp_qspi_irq Heap Buffer Overflow DoS
Vulnerability of the zynqmpqspiirq function in the drivers/spi/spi-zynqmp-gqspi.c module – The Linux kernel’s SPI device driver support has a vulnerability related to incorrect checking of the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the...
TOTOLINK T10 Router SetWiFiScheduleCfg Function
The vulnerability of the setWiFiScheduleCfg function /cgi-bin/cstecgi.cgi in the TOTOLINK T10 router microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the desc parameter. Exploiting this vulnerability allows a remote attacker to...
drivers/crypto/intel/iaa/iaa_crypto_main.c Use After Free
Vulnerability of the saveiaawq function in the drivers/crypto/intel/iaa/iaacryptomain.c module – The Linux kernel cryptographic accelerator driver has a vulnerability related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to...
CVE-2025-6318
A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. This vulnerability affects unknown code of the file /admin/checkavailability.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit ha...
Secret Sharing in 5G-MEC: Applicability for Joint Security and Dependability
Multi-access Edge Computing MEC, an enhancement of 5G, processes data closer to its generation point, reducing latency and network load. However, the distributed and edge-based nature of 5G-MEC presents privacy and security challenges, including data exposure risks. Ensuring efficient manipulatio...
PT-2025-26278 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal
Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue has been found in the PHPGurukul Emergency Ambulance Hiring Portal, affecting an unknown functionality of the file /index.php. The manipulation of the...
PHPGurukul Pre-School Enrollment System 注入漏洞
Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /admin/checkavailability.ph...
PT-2025-26312 · Dell · Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL injection'. This could be exploited by a low-privileged...
Google Chrome Media Data Compromise
The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...