CVE-2024-22121

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...

TOTOLINK EX1200L setParentalRules Buffer Overflow

The vulnerability of the setParentalRules function /cgi-bin/cstecgi.cgi of the TOTOLINK EX1200L router software arises due to a buffer overflow in the stack when processing parameters such as week, sTime, and eTime. Exploiting this vulnerability allows an attacker to compromise the confidentialit...

Linux IMA Use-After-Free

The vulnerability of the imacollectmeasurement function in the security/integrity/ima/imaapi.c module of the IMA kernel of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Outside In Core Component Oracle SDK Data Compromise

The vulnerability of the Outside In Core component in Oracle’s software development kit SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Outside In Core Component Oracle SDK Data Compromise

The vulnerability of the Outside In Core component in Oracle’s software development toolset SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Realtek rtl_init_one() Buffer Overflow

The vulnerability of the rtlinitone function in the drivers/net/ethernet/realtek/r8169main.c file of the Realtek network adapter drivers for the Linux operating system is related to an infinite waiting loop for resources. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2024-3985

Name of the Vulnerable Software and Affected Versions VideoLAN VLC affected versions not specified Description The issue is related to a heap-based buffer overflow in the MMS handler of the VideoLAN VLC media player. Exploitation of this issue could allow a remote attacker to impact the...

SUSE CVE-2020-27823

A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

libndp Buffer Overflow DoS

The vulnerability of the libndp library relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending specially crafted IPv6 packets...

ROS-20240529-04

A vulnerability in the ImageIO component of the Oracle Java SE software platform and the Oracle GraalVM Virtual Machine Enterprise Edition is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a partial denial of service Vulnerability i...

AMD network device driver auxbus function buffer overflow DoS

The vulnerability of the pdscauxbusdevregister function in the drivers/net/ethernet/amd/pdscore/auxbus.c file of the AMD network device driver for the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel USB driver Heap Buffer Overflow DoS

The vulnerability of the ljcanewclientdevice function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6tnlparsetlvenclim function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

Linux IPv4 Protocol Heap Buffer Overflow DoS

The vulnerability of the inetinit function in the net/ipv4/afinet.c module, which is part of the Linux kernel’s implementation of the IPv4 protocol, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ipv6mcdown function in the net/ipv6/mcast.c module of the Linux operating system’s IPv6 kernel implementation is related to resource competition race conditions. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

Intel ipu3Imgdu Driver Heap Buffer Overflow

The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c file of the Intel ipu3-imgu driver for the Linux operating system is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise t...

Tenda i21 Router Command Injection

The vulnerability of the formexeCommand function in Tenda i21 router microprogramming software is related to the operation that occurs outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

PT-2024-3929

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Presentation API of Google Chrome and Microsoft Edge browsers. This...

PT-2024-6864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds write warning in the Linux kernel, specifically in the drm/amdgpu module. The vulnerability is associated with the amdgpu ring init function and...

PT-2025-7547

Name of the Vulnerable Software and Affected Versions XWiki versions prior to 15.10.11 XWiki versions prior to 16.4.1 XWiki versions prior to 16.5.0RC1 Description XWiki Platform is susceptible to a remote code execution RCE vulnerability. An unauthenticated attacker can execute arbitrary code by...