The vulnerability of the decode_status_report() function in the OFono mobile communication interface, related to the issue of operations going beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decodestatusreport function in the OFono mobile communication interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to access confidential data, compromise its integrity, and cause...

The vulnerability of the Linux operating system’s kernel, related to an incorrect bit shifting of a integer value, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to an incorrect bit offset for a integer value. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the `createNewClientSessionWithId()` function in the `GenericMediaServer` component of the streaming multimedia Live555 library lies in its reliance on memory management after it is freed. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the createNewClientSessionWithId function in the GenericMediaServer component of the streaming multimedia Live555 library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise i...

The vulnerability in the `color.c` component of the `sycc420_to_rgb` function in the OpenJPEG library, related to buffer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the color.c component in the sycc420torgb function of the OpenJPEG library, which is used for image encoding and decoding, relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

CVE-2024-8306

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...

CVE-2023-31310

Improper input validation in Power Management Firmware PMFW may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting in a loss of integrity and/or availability...

CVE-2023-31310

Improper input validation in Power Management Firmware PMFW may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting in a loss of integrity and/or availability...

CVE-2021-26367

CVE-2021-26367 describes a vulnerability where an attacker with local access could cause a misconfiguration of the Trusted Memory Regions (TMRs) on AMD platforms with AMD Secure Processor (ASP). The root cause is misconfiguration of TMR address ranges, potentially enabling an attacker to set an a...

CVE-2021-26367

A malicious attacker in x86 can misconfigure the Trusted Memory Regions TMRs, which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability...

PT-2024-12280 · Amd +8 · Sev Firmware +8

Name of the Vulnerable Software and Affected Versions: SEV firmware affected versions not specified Description: The issue is related to incomplete system memory cleanup in SEV firmware, which could allow a privileged attacker to corrupt guest private memory. This potentially results in a loss of...

PT-2024-11957 · Iommu +9 · Iommu +9

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the improper handling of certain special address ranges with invalid device table entries DTEs by the IOMMU. This may allow an attack...

The vulnerability of the UploadCustomModule (/cgi-bin/cstecgi.cgi) function in the TOTOLINK A3300R router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UploadCustomModule /cgi-bin/cstecgi.cgi function in the TOTOLINK A3300R router microprogramming software arises due to an overflow of the buffer on the stack during the processing of the File parameter. Exploiting this vulnerability allows a malicious actor to compromise...

PT-2025-14525 · Amd · Amd Npu Driver

Name of the Vulnerable Software and Affected Versions: AMD NPU Driver affected versions not specified Description: The issue is related to an integer overflow within the AMD NPU Driver, which could allow a local attacker to write out of bounds. This may potentially lead to loss of integrity or...

Dell PowerScale OneFS Improper Input Validation Vulnerability

Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. The Dell PowerScale OneFS has an improper input validation vulnerability that stems from the presence of an incorrect input validation...

CVE-2024-25970

Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an improper input validation vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to loss of integrity...

CVE-2024-25970

Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an improper input validation vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to loss of integrity...

CVE-2024-0710 GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification

The GP Unique ID plugin for WordPress is vulnerable to Unique ID Modification in all versions up to, and including, 1.5.5. This is due to insufficient input validation. This makes it possible for unauthenticated attackers to tamper with the generation of a unique ID on a form submission and repla...

CVE-2024-0710

CVE-2024-0710 – GP Unique ID (WordPress) : Unauthenticated attackers can modify the generated Unique ID due to insufficient input validation in GP Unique ID plugin versions up to 1.5.5, risking integrity where ID uniqueness matters. CVSS v3.1 base score 5.3 (Medium). Remediation: upgrade to 1.5.6...

The vulnerability of the ProcXIGetSelectedEvents() function in the X Window System Xorg-server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ProcXIGetSelectedEvents function in the X Window System Xorg-server lies in the possibility of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service...

The vulnerability in the `src/video/SDL_pixels.c` component of the Simple DirectMedia Layer library allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the src/video/SDLpixels.c file of the Simple DirectMedia Layer library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures due to the...