11953 matches found
kernel: KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfntopfncache Reject kvmgpccheck and kvmgpcrefresh if the cache is inactive. Not checking the active flag during refresh is particularly egregious, as KVM can end up with a vali...
kernel: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
A flaw was found in the libata module in the Linux kernel. A NULL pointer dereference can be triggered in the unlikely case that the PPI, an array of ATA portinfo, argument of the atahostallocpinfo function is NULL. This issue causes a crash and results in a denial of service...
kernel: power: supply: fix null pointer dereferencing in power_supply_get_battery_info
In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in powersupplygetbatteryinfo when kmalloc fail to allocate memory in kasprintf, propname will be NULL, strcmp called by ofgetproperty will cause null pointer dereference. So return...
kernel: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhciallocstreaminfo xhciallocstreaminfo allocates stream context array for streaminfo -streamctxarray with xhciallocstreamctx. When some error occurs, streaminfo-streamctxarray is not...
CVE-2023-28566
Information disclosure in WLAN HAL while handling the WMI state info command...
Command injection
Information disclosure in WLAN HAL while handling the WMI state info command...
CVE-2023-28566 Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling the WMI state info command...
CVE-2023-28566 Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling the WMI state info command...
PT-2023-18480
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue involves memory corruption in a multi-mode call processor when processing a bit mask API. Recommendations At the moment, there is no information about a newer version that...
PT-2023-30228 · E-Tax · E-Tax
Name of the Vulnerable Software and Affected Versions: e-Tax software versions 3.0.10 and earlier Description: The issue is related to the improper restriction of XML external entity references XXE in the e-Tax software due to the configuration of the embedded XML parser. This allows an attacker ...
PT-2023-29990 · Loytec · Linx Configurator +7
Name of the Vulnerable Software and Affected Versions: LOYTEC LINX-151 affected versions not specified LOYTEC LINX-212 version 6.2.4 LOYTEC LVIS-3ME12-A1 version 6.2.2 LOYTEC LIOB-586 version 6.2.3 LOYTEC LIOB-580 V2 affected versions not specified LOYTEC LIOB-588 affected versions not specified...
CVE-2023-43087
CVE-2023-43087 affects Dell PowerScale OneFS versions 8.2.x and 9.0.0.x–9.5.0.x. The vulnerability arises from improper handling of insufficient permissions, enabling a low-privileged remote attacker to disclose information. Exploitation details are not provided in the supplied documents; no in-t...
CVE-2023-45015
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-46327
Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...
Online Bus Booking System SQL Injection Vulnerability
Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which is caused by insufficient filtering of the useremail parameter on the businfo.php page, resulting in a SQL injection vulnerability...
PT-2023-9540 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.58 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation of PictureInPicture in Google Chrome and Microsoft Edge, which allowed a remote...
PT-2023-29355 · Unknown · Online Bus Booking System
Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the bus id parameter of the "bus info.php" resource does not validate the characters received and they...
PT-2023-29354 · Unknown · Online Bus Booking System
Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the user query parameter of the "bus info.php" resource does not validate the characters received and...
Online Bus Booking System SQL Injection Vulnerability
Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which originates from the date parameter of the businfo.php page not being sufficiently filtered, resulting in a SQL injection vulnerability...