Apache Superset <=1.3.2 - Default Login

Apache Superset through 1.3.2 contains a default login vulnerability via registered database connections for authenticated users. An attacker can obtain access to user accounts and thereby obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-44451 info:...

ROS-20261014-73-0011

The vulnerability of the loongsongpufixupdmahang function in the arch/loongarch/pci/pci.c module, which is part of the LoongArch architecture support for the Linux operating system, is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromi...

Netcore NR268 CGI User Ok Data Compromise

The vulnerability of the userok function in the CGI interface of Netcore NR268 microprogramming systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20261013-73-0210

The vulnerability of the hciuartregisterdev function in the drivers/bluetooth/hcildisc.c device driver of the Linux operating system’s Bluetooth driver is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise...

Linux net/tipc/bearer ipvlan_hard_header Heap Buffer Overflow

The vulnerability of the ipvlanhardheader function in the net/tipc/bearer.c component of the Linux operating system is related to the pointer being dereferenced after its expiration. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

ROS-20261007-73-0097

The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux operating system’s multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261006-73-0325

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux fs/mnt_idmapping.c Heap Buffer Overflow DoS

The vulnerability of the statmountmntidmap function in the fs/mntidmapping.c component of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261006-73-0048

The vulnerability of the Linux operating system’s kernel security module, AppArmor, is related to coding errors. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Linux kernel TCP Connection Request Buffer Overflow DoS

The vulnerability of the tcpconnrequest function in the include/net/tcp.h component of the Linux kernel is related to the predictability of random initial numbers for TCP sessions. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Linux USB solenoids yurex_probe Heap Buffer Overflow

The vulnerability of the yurexprobe function in the drivers/usb/misc/yurex.c module of the Linux device driver for USB devices relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

Linux kernel OVPN TCP Socket Detach

The vulnerability of the ovpntcpsocketdetach function in the drivers/net/ovpn/tcp.c file of the Linux kernel’s network device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...

mac80211 Stack Use-After-Free

The vulnerability of the function ieee80211prepconnection in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the...

Crosswork Data Gateway Auth Bypass

The vulnerability of the Crosswork Data Gateway data collection platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected informatio...

Linux hardware monitoring driver pt5161l_read_block_data Heap Buffer Overflow

The vulnerability of the pt5161lreadblockdata function in the drivers/hwmon/pt5161l.c file of the Linux operating system’s device monitoring driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...

ROS-20260930-73-0124

The vulnerabilities of the functions qla2x00updateoptrom and qla2x00managehoststats in the drivers/scsi/qla2xxx/qlabsg.c module of the SCSI device driver for the Linux operating system are related to operations involving resources after their expiration. Exploiting these vulnerabilities could all...

ROS-20260929-73-0046

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker...

ROS-20260929-73-0202

The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel-based multimedia device driver involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260924-73-0030

The vulnerability of the excludesuperstripes function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...