ROS-20260803-73-0022

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

GHSA-8FPG-XM3F-6CX3 Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

Impact next-auth Auth.js v5 applications that gate access by checking only for the existence of the auth object — the pattern shown in the official session management / protecting resources guide — are affected. When the Auth.js configuration produces a server-side error, the auth object exposed ...

The vulnerability of the server audit plugin of the MariaDB database management system allows attackers to bypass existing security mechanisms.

The vulnerability of the server audit plugin of the MariaDB database management system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

ROS-20260524-73-0043

Vulnerability in mariadb related to security configuration errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Siemens SIMATIC HMI Comfort Panels have undisclosed vulnerabilities

Siemens SIMATIC HMI Comfort Panels are touchscreen devices produced by the German company Siemens. Siemens SIMATIC HMI Comfort Panels have security vulnerabilities. These vulnerabilities stem from improper restrictions on access to web browsers through the control panel. Unauthorized attackers ca...

TanStack Query 安全漏洞

TanStack Query is an open-source library developed by TanStack, featuring a complete set of functions and supporting TypeScript. There is a security vulnerability in TanStack Query. This vulnerability stems from attackers exploiting configuration errors in the pullrequesttarget, GitHub Actions...

HCL BigFix RunBookAI 安全漏洞

HCL BigFix RunBookAI is an AI-driven automation platform developed by the American company HCL. HCL BigFix RunBookAI has a security vulnerability, which stems from the continuous presence of insecure input texts. The processing of component inputs poses security risks, increasing the likelihood o...

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability, which stems from an incorrect calculation of the groups= part in the output. This vulnerability may allow unauthorized access or lead to security...

Zscaler Client Connector 安全漏洞

The Zscaler Client Connector is a lightweight agent provided by Zscaler Inc. There is a security vulnerability associated with the Zscaler Client Connector, which stems from incorrect startup configurations. This vulnerability may cause a small amount of traffic to go unnoticed in rare instances...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in security configuration errors, which allow attackers to compromise the accessibility of protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the nwl_dsi_bridge_mode_set() function in the drivers/gpu/drm/bridge/nwl-dsi.c driver module allows a attacker to cause a service failure.

The vulnerability of the nwldsibridgemodeset function in the drivers/gpu/drm/bridge/nwl-dsi.c driver module is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ill_acc_of_setup() function in the arch/mips/ralink/ill_acc.c module exposes the MIPS architecture of the Linux operating system, allowing an attacker to cause a service failure.

The vulnerability of the illaccofsetup function in the arch/mips/ralink/illacc.c module of the Linux operating system’s architecture support is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `sndctl LedSysfs_Add()` function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, allows a hacker to cause a service failure.

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the tcf_block_playback_offloads() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the tcfblockplaybackoffloads function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

The vulnerability of the sync_file_merge() function in the drivers/dma-buf/sync_file.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the syncfilemerge function in the drivers/dma-buf/syncfile.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the call_usermodehelper_exec() function in the kernel/umh.c module of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the callusermodehelperexec function in the kernel/umh.c module of the Linux operating system is related to errors in system configuration or settings. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kfree_at_end() function in the lib/kunit/executor_test.c module of the Linux operating system allows a malicious attacker to trigger a service failure.

The vulnerability of the kfreeatend function in the lib/kunit/executortest.c module of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the i2c_acpi_notify() function in the drivers/i2c/i2c-core-acpi.c module of the Linux operating system’s I2C driver support library allows a attacker to cause a service failure.

The vulnerability of the i2cacpinotify function in the drivers/i2c/i2c-core-acpi.c module of the Linux I2C driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ipoctal_inst_slot() function in the module drivers/ipack/devices/ipoctal.c of the IndustryPack device support driver for the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the ipoctalinstslot function in the module drivers/ipack/devices/ipoctal.c of the IndustryPack device support driver for the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected informati...

The vulnerability of the kvm_lapic_reg_read() function in the arch/x86/kvm/lapic.c module of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the kvmlapicregread function in the arch/x86/kvm/lapic.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...