Linux ieee80211_prep_hw_scan() Buffer Overflow

The vulnerability of the ieee80211prephwscan function in the net/mac80211/scan.c module of the Linux kernel is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

ext4_ext_replay_update_ex Heap Buffer Overflow DoS

The vulnerability of the ext4extreplayupdateex function in the fs/ext4/extents.c file of the Linux kernel’s file system ext4 is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel pac1934_read_raw() Heap Buffer Overflow

The vulnerability of the pac1934readraw function in the drivers/iio/adc/pac1934.c module of the Linux kernel relates to accessing memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

D-Link DIR-605L Router formSetWanPPTP Data Compromise

The vulnerability of the formSetWanPPTP function /goform/formSetWanPPTP of the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the ltqetopfreechannel function in the drivers/net/ethernet/lantiqetop.c file of the Linux kernel’s Ethernet driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

DevTools Suite Data Compromise

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux squashfs_read Buffer Overflow DoS

The vulnerability of the squashfsread inode function in the fs/squashfs/inode.c file of the squashfs file system in the Linux kernel is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux netif_queue_set_napi Buffer Overflow DoS

The vulnerability of the netifqueuesetnapi function in the Linux operating system is related to memory writing beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux cdrom_ioctl_timed_media_change Buffer Overflow

The vulnerability of the cdromioctltimedmediachange function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Tenda FH1206 fromqossetting() Function Compromise Data Compromise

The vulnerability of the fromqossetting function /goform/qossetting of the Tenda FH1206 router’s microprogramming system is related to the operation that occurs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the...

amdgpu driver Heap Buffer Overflow DoS

The vulnerability of the amdgpuvceringparsecs function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver for the amdgpu core of the Linux operating system is related to the absence of initialization for the variable size. Exploiting this vulnerability could allow an attacker to compromise the...

SUSE CVE-2024-38796

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

Security Bulletin: Vulnerabilities in libmaxminddb, dnsmasq and bind affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem product

Summary Vulnerabilities in libmaxminddb, dnsmasq and bind affect IBM Storage Virtualize products and could cause impacts to integrity and availability. CVE-2023-50387 CVE-2023-50868 CVE-2020-28241 CVE-2023-4408. Vulnerability Details CVEID:CVE-2023-50387 DESCRIPTION: ISC BIND is vulnerable to a...

Xen PCI DeviceHandler Data Compromise

The vulnerability of the cross-platform hypervisor component PCI DeviceHandler is related to errors in the program code. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the system...

Linux amdkfd Kernel Heap Buffer Overflow DoS

The vulnerability of the criurestorememoryofgpu function in the driver gpu/drm/amd/amdkfd/kfdchardev.c of the amdkfd kernel of the Linux operating system is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...

Linux rndis Component Use-After-Free

The vulnerability of the rndissetresponse function in the rndis component of the Linux operating system is related to the operation “BufOffset + 8”, which can lead to a integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Unbound DNS Server External Configuration Compromise

The vulnerability of the Unbound DNS server relates to the ability for processes outside the Unbound group to modify the configuration of the Unbound execution environment. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of th...

tsc2046 Linux Data Compromise

The vulnerability of the tsc2046 component in the Linux operating system is related to writing beyond the allowed write limits. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2024-6632

A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability...

Traccar 安全漏洞

Traccar is a Java-based website builder that provides GPS tracking capabilities from Traccar, Inc. in the United States. The software supports more than 170 GPS protocols and more than 1500 models of GPS tracking devices.Traccar can be used with any major SQL database system. It also provides an...