The vulnerability of the rndis_set_response() function in the rndis component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rndissetresponse function in the rndis component of the Linux operating system is related to the operation “BufOffset + 8”, which can lead to a integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Unbound DNS server, which is related to external system control or configuration settings, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Unbound DNS server relates to the ability for processes outside the Unbound group to modify the configuration of the Unbound execution environment. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of th...

The vulnerability of the tsc2046 component in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the tsc2046 component in the Linux operating system is related to writing beyond the allowed write limits. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2024-6632

A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability...

Traccar 安全漏洞

Traccar is a Java-based website builder that provides GPS tracking capabilities from Traccar, Inc. in the United States. The software supports more than 170 GPS protocols and more than 1500 models of GPS tracking devices.Traccar can be used with any major SQL database system. It also provides an...

CVE-2024-22121

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...

The vulnerability of the setParentalRules function (/cgi-bin/cstecgi.cgi) in the TOTOLINK EX1200L router software allows a violator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setParentalRules function /cgi-bin/cstecgi.cgi of the TOTOLINK EX1200L router software arises due to a buffer overflow in the stack when processing parameters such as week, sTime, and eTime. Exploiting this vulnerability allows an attacker to compromise the confidentialit...

The vulnerability of the ima_collect_measurement() function in the IMA component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imacollectmeasurement function in the security/integrity/ima/imaapi.c module of the IMA kernel of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the Outside In Core component within Oracle’s software development kit (SDK) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Outside In Core component in Oracle’s software development kit SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Outside In Core component within Oracle’s software development kit (SDK) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Outside In Core component in Oracle’s software development toolset SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the rtl_init_one() function in Realtek’s network adapter drivers for Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rtlinitone function in the drivers/net/ethernet/realtek/r8169main.c file of the Realtek network adapter drivers for the Linux operating system is related to an infinite waiting loop for resources. Exploiting this vulnerability could allow an attacker to compromise the...

SUSE CVE-2020-27823

A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

The vulnerability of the libndp library, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the libndp library relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending specially crafted IPv6 packets...

ROS-20240529-04

A vulnerability in the ImageIO component of the Oracle Java SE software platform and the Oracle GraalVM Virtual Machine Enterprise Edition is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a partial denial of service Vulnerability i...

The vulnerability of the ljca_new_client_device() function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ljcanewclientdevice function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the pdsc_auxbus_dev_register() function in the drivers/net/ethernet/amd/pds_core/auxbus.c file of the AMD network device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pdscauxbusdevregister function in the drivers/net/ethernet/amd/pdscore/auxbus.c file of the AMD network device driver for the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the ipv6_mc_down() function in the net/ipv6/mcast.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv6mcdown function in the net/ipv6/mcast.c module of the Linux operating system’s IPv6 kernel implementation is related to resource competition race conditions. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the inet_init() function in the net/ipv4/af_inet.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetinit function in the net/ipv4/afinet.c module, which is part of the Linux kernel’s implementation of the IPv4 protocol, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the imgu_fmt() function in the drivers/staging/media/ipu3/ipu3-v4l2.c file of the Intel ipu3Imgdu driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c file of the Intel ipu3-imgu driver for the Linux operating system is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the `ip6_tnl_parse_tlv_enc_lim()` function in the `net/ipv6/ip6_tunnel.c` module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6tnlparsetlvenclim function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...