22073 matches found
CVE-2024-58009 Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2capsockalloc A NULL sock pointer is passed into l2capsockalloc when it is called from l2capsocknewconnectioncb and the error handling paths should also be aware of it. Seemingly a...
CVE-2025-25324
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25324
Technical details about CVE-2025-25324 are not publicly available in the provided documents. Monitoring for updates from sources may be needed to confirm affected components, root cause, impact, and remediation.
DEBIAN-CVE-2022-49731
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong? case that the 'ppi' parameter of atahostallocpinfo points to an array starting with a NULL pointer, there's going to be a kernel oop...
AZL-68612 CVE-2022-49267 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: mmc: core: use sysfsemit instead of sprintf sprintf still used in the MMC core for the sysfs output is vulnerable to the buffer overflow. Use the new-fangled sysfsemit instead. Found by Linux Verification Center linuxtesting.org...
CVE-2022-49267
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-49267
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2022-49731
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong? case that the 'ppi' parameter of atahostallocpinfo points to an array starting with a NULL pointer, there's going to be a kernel oop...
CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday placed two security flaws impacting Microsoft Partner Center and Synacor Zimbra Collaboration Suite ZCS to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities in...
CVE-2022-49731 ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong? case that the 'ppi' parameter of atahostallocpinfo points to an array starting with a NULL pointer, there's going to be a kernel oop...
CVE-2022-49267
CVE-2022-49267 affects the Linux kernel MMC core: the sysfs output path used sprintf(), which could overflow buffers. The fix replaces sprintf() with sysfs_emit() to prevent buffer overflows. Public documents confirm the vulnerability and its remediation, with no exploitation details provided.
CVE-2022-49267 mmc: core: use sysfs_emit() instead of sprintf()
In the Linux kernel, the following vulnerability has been resolved: mmc: core: use sysfsemit instead of sprintf sprintf still used in the MMC core for the sysfs output is vulnerable to the buffer overflow. Use the new-fangled sysfsemit instead. Found by Linux Verification Center linuxtesting.org...
The vulnerability in the VERM_AJAX_functions.php script of the software for managing call centers allows a violator to execute arbitrary code.
The vulnerability of the VERMAJAXfunctions.php software for the Vicidial call processing center is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-49035link is external Microsoft Partner Center Improper Access Control Vulnerability CVE-2023-34192link is external Synacor Zimbra Collaboration Suite ZCS...
Microsoft Partner Center Improper Access Control Vulnerability
Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges...
Benner ModernaNet 安全漏洞
Benner ModernaNet is a diagnostic center application from Benner. A security vulnerability exists in Benner ModernaNet version 1.2.0 and prior versions that stems from cross-site request forgery and could allow remote attacks...
CVE-2025-25960
Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator...
