ROS-20260803-73-0022

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

GHSA-8FPG-XM3F-6CX3 Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

Impact next-auth Auth.js v5 applications that gate access by checking only for the existence of the auth object — the pattern shown in the official session management / protecting resources guide — are affected. When the Auth.js configuration produces a server-side error, the auth object exposed ...

MariaDB Audit Plugin Bypass

The vulnerability of the server audit plugin of the MariaDB database management system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

ROS-20260524-73-0043

Vulnerability in mariadb related to security configuration errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Siemens SIMATIC HMI Comfort Panels have undisclosed vulnerabilities

Siemens SIMATIC HMI Comfort Panels are touchscreen devices produced by the German company Siemens. Siemens SIMATIC HMI Comfort Panels have security vulnerabilities. These vulnerabilities stem from improper restrictions on access to web browsers through the control panel. Unauthorized attackers ca...

TanStack Query security vulnerabilities

TanStack Query is an open-source library developed by TanStack, featuring a complete set of functions and supporting TypeScript. There is a security vulnerability in TanStack Query. This vulnerability stems from attackers exploiting configuration errors in the pullrequesttarget, GitHub Actions...

HCL BigFix RunBookAI security vulnerabilities

HCL BigFix RunBookAI is an AI-driven automation platform developed by the American company HCL. HCL BigFix RunBookAI has a security vulnerability, which stems from the continuous presence of insecure input texts. The processing of component inputs poses security risks, increasing the likelihood o...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability, which stems from an incorrect calculation of the groups= part in the output. This vulnerability may allow unauthorized access or lead to security...

Zscaler Client Connector security vulnerability

The Zscaler Client Connector is a lightweight agent provided by Zscaler Inc. There is a security vulnerability associated with the Zscaler Client Connector, which stems from incorrect startup configurations. This vulnerability may cause a small amount of traffic to go unnoticed in rare instances...

Nextcloud Server Security Configuration

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

nwl_dsi_bridge_mode_set() DoS

The vulnerability of the nwldsibridgemodeset function in the drivers/gpu/drm/bridge/nwl-dsi.c driver module is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ill_acc_of_setup() MIPS Architecture Disclosure

The vulnerability of the illaccofsetup function in the arch/mips/ralink/illacc.c module of the Linux operating system’s architecture support is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause service failures...

sndctl LedSysfs_Add() DoS

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux net/sched cls_api Heap Buffer Overflow DoS

The vulnerability of the tcfblockplaybackoffloads function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

Linux kernel umh Call User Mode Helper Exec

The vulnerability of the callusermodehelperexec function in the kernel/umh.c module of the Linux operating system is related to errors in system configuration or settings. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux sync_file_merge Heap Buffer Overflow DoS

The vulnerability of the syncfilemerge function in the drivers/dma-buf/syncfile.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux I2C Driver Buffer Overflow DoS

The vulnerability of the i2cacpinotify function in the drivers/i2c/i2c-core-acpi.c module of the Linux I2C driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

lib/kunit/executor_test.c Heap Buffer Overflow DoS

The vulnerability of the kfreeatend function in the lib/kunit/executortest.c module of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

IndustryPack device support driver Heap Buffer Overflow Info Disclosure

The vulnerability of the ipoctalinstslot function in the module drivers/ipack/devices/ipoctal.c of the IndustryPack device support driver for the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected informati...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmlapicregread function in the arch/x86/kvm/lapic.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...