33 matches found
CVE-2026-0151
In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-41747
An XSS vulnerability in pxcvlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to...
CVE-2025-41747 Reflected XSS vulnerability in pxc_vlanIntfCfg.php
An XSS vulnerability in pxcvlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to...
CVE-2022-50677 ipmi: fix use after free in _ipmi_destroy_user()
In the Linux kernel, the following vulnerability has been resolved: ipmi: fix use after free in ipmidestroyuser The intffree function frees the "intf" pointer so we cannot dereference it again on the next line...
EUVD-2022-37556
Malicious code in bioql PyPI...
EUVD-2022-37561
Malicious code in bioql PyPI...
CVE-2023-53521
CVE-2023-53521 affects the Linux kernel as reported by EulerOS advisories: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove(). The bug occurs when edev->components is zero, causing reads from edev->component[0] to access invalid memory, resulting in a slab-out-of-bounds condition (read ...
UBUNTU-CVE-2025-38456
In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmicreateuser The "intf" list iterator is an invalid pointer if the correct "intf-intfnum" is not found. Calling atomicdec&intf-nrusers on and invalid pointer will lead to memo...
CVE-2022-34604
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp...
CVE-2022-34609
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp...
PT-2024-21866
Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos versions 980, 850, 1280, 1380, and 1330 Description An issue was discovered in the function slsi nan subscribe get nl params, where there is no input validation check on hal req-num intf addr present coming from...
kernel: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in sesintfremove A fix for: BUG: KASAN: slab-out-of-bounds in sesintfremove+0x23f/0x270 ses Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013 When edev-components is zero, accessing...
PT-2022-32893
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.10.126 Description A refcount leak was discovered in the mdp4 modeset init intf function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.12...
PT-2022-32733
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.15.50 Description A refcount leak was discovered in the mdp4 modeset init intf function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.12...
PT-2022-33008
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.4.201 Description A refcount leak was discovered in the mdp4 modeset init intf function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.12...
PT-2022-32529
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue is related to a refcount leak in the mdp4 modeset init intf function. This problem was introduced in version v4.12 and is fixed in Linux Kernel version v5.18.8. The actual impact and...
H3C Magic R200 Buffer Overflow Vulnerability (CNVD-2022-54323)
H3C Magic R200 is a wireless router device. H3C Magic R200 doping.asp has a buffer overflow vulnerability in the handling of INTF parameters, which can be exploited by remote attackers to submit special requests that can crash the service program or execute arbitrary code in the application conte...
CVE-2022-34604
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp...